Qualys Web Application Scanning
LeaderSecurity and compliance for your global IT assets.
Est 1999|Valuation $5.5B|Raised $152.6M
Security and compliance for your global IT assets.
Published Oct 22, 2026
| Starting Price | Quote-based; vendor does not publish standard list pricing | Quote-based; varies by edition and deployment | Quote-based; varies by edition and deployment |
| Appropriate For | Organizations standardizing on the Qualys platform and running automated DAST at scale with centralized governance | Teams prioritizing automated crawling and proof-based detection within a dedicated AppSec scanning product | Teams combining automated scanning with deep manual testing workflows and using Burp tooling across testing programs |
| Key Strength | Integration with vendor asset inventory and platform modules; scheduled scanning and centralized governance | Emphasizes automated crawling, detection performance, and proof-based verification in marketing materials | Strong manual testing ecosystem and tooling for pentesters; enterprise automation options for scanning |
| Key Weakness | Reported authentication and crawling challenges in complex enterprise scenarios; pricing is quote-based | Marketing claims are vendor-directed and require independent validation; tuning is still required in practice | Automated scanning can require internal deployment or agents for internal assets and may not cover all modern app patterns without configuration |
Where the product is likely to be most appropriate:
Where other products may be preferred:
Pricing comparisons are difficult without vendor quotes. Buyers should perform proof-of-concept evaluations and bake-offs using representative workloads.