--- title: Qualys WAS Reviews meta_title: 'Qualys WAS Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 21 reviews by the users' company size, role or industry to find out how Qualys WAS works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 21 scale: '5' date_modified: '2026-11-11' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops ---

Qualys WAS Reviews & Product Details

User Insights

Average based on 21 real user reviews.

Typical contract price

$0k - $0k

Sign in to view

Per Year

Qualys WAS Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is Qualys WAS, and what problem is it built to solve?

Qualys WAS is part of the Qualys Cloud Platform, which automates vulnerability detection and security management for web applications. It helps organizations address security and compliance risks across applications and other IT environments.

What company sizes and industries is Qualys WAS the best fit for?

Qualys WAS appears most aligned with mid-market and enterprise teams, with reviewers also representing small businesses. The industries with the strongest representation include:
  • Company size — Mid-market: A prominent segment among positive reviewers.
  • Company size — Enterprise: Also strongly represented, including teams managing larger environments.
  • Industry — Information technology and services: A substantial area of reviewer representation.
  • Industry — Computer software: Another well-represented segment.
  • Industry — Computer and network security: A recurring use context for application scanning.

Is Qualys WAS considered safe and secure for handling data?

Qualys WAS supports application security by scanning web applications for vulnerabilities and helping teams prioritize findings for remediation. Users also describe using it for ongoing monitoring, while noting that scan results can include false positives and that it complements rather than replaces penetration testing.

Qualys WAS Reviews (21)

Reviews

Qualys WAS Reviews (21)

4.5
21 reviews

What do users say?

Generated using AI from real user reviews
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Balaji Ganesh M.
BM
Balaji Ganesh M.
Senior Engineer - Product Security
Mid-Market (51-1000 emp.)
"Qualys WAS"
5/5
What do you like best about Qualys WAS?

The user experience was great, the customer support was flawless, WAS software was easy to use, and the certification offered by Qualsy was beneficial. Review collected by and hosted on G2.com.

What do you dislike about Qualys WAS?

The pricing is a bit expensive, and saas offering is costly for small to medium-sized organisations. The VMDR solution is a great offering it is worth the price. Review collected by and hosted on G2.com.

Verified User in Outsourcing/Offshoring
IO
Verified User in Outsourcing/Offshoring
Enterprise (> 1000 emp.)
"Overall very good"
4/5
What do you like best about Qualys WAS?

Easy integration and has very extensive reporting. Review collected by and hosted on G2.com.

What do you dislike about Qualys WAS?

Some false positives and complex navigation Review collected by and hosted on G2.com.

Debarati B.
DB
Debarati B.
Senior Software Engineer
Mid-Market (51-1000 emp.)
"Qualys WAS Review"
4/5
What do you like best about Qualys WAS?

It's effortless to use and gives a graphical interface to visualize all details about the application. Review collected by and hosted on G2.com.

What do you dislike about Qualys WAS?

There is nothing to dislike as of now. It serves the purpose. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
CI
Verified User in Information Technology and Services
Small-Business (50 or fewer emp.)
"Best DAST tool in the market."
5/5
What do you like best about Qualys WAS?

Their detection engine is quite well and I have personally discovered a couple of vulnerabilities that were not easy to identify manually. Their vulnerability DB is always updated with the latest 0-days detections. Review collected by and hosted on G2.com.

What do you dislike about Qualys WAS?

They should come up with a free trial option. Review collected by and hosted on G2.com.

Verified User in Computer Software
UC
Verified User in Computer Software
Enterprise (> 1000 emp.)
"Web application Scanner"
3/5
What do you like best about Qualys WAS?

1. Complex visualizations can also be created since the queries support Boolean logic

2. Informative reports

3. Scan configurations were quick and easy.

4. Offers a wide range of settings for more targeted scans Review collected by and hosted on G2.com.

What do you dislike about Qualys WAS?

1. Redundantly scans pages in vain with little to no modification in the alphanumeric query parameter values

2. It doesn’t cover automatic patching for all types of vulnerabilities. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
UI
Verified User in Information Technology and Services
Small-Business (50 or fewer emp.)
"Very positive and fit well into their suite of products."
4/5
What do you like best about Qualys WAS?

The best thing I liked was the level of detail provided within the solution as well as the easy fit and use into the overall Qualys product suite. Review collected by and hosted on G2.com.

What do you dislike about Qualys WAS?

Not much that I dislike, aside from the fact that some other solutions provide a bit more detail and proof of the vulnerability over what I have seen with the Qualys solution. Review collected by and hosted on G2.com.

Byron T.
BT
Byron T.
FinOps Principal
Mid-Market (51-1000 emp.)
"Qualys WAS is a web application scanning app which monitors the threats in web apps."
5/5
What do you like best about Qualys WAS?

We faced a major security breach in our system before we started this app. It offers two types of securities. First of all, the network security which is great in many aspects. It scans the unauthorized access every time and tries to send mails for recognition. The special feature is the vulnerability scanning technique. This points out the weaknesses in the system and empowers them. It is very easily launched with the cloud platform. The regular updates regarding the vulnerability management are also a thing in this app. Secondly, it offers the computer security feature. It further brings the audit trail that is giving some major monitoring. Review collected by and hosted on G2.com.

What do you dislike about Qualys WAS?

Some of the features should be included in it for much better use like firewall and activity monitoring. This can prove great in so many ways for online security systems. The intrusion detection system is important as well for detecting the malicious activities going on. It is also missing in this app. Antivirus and anti-spam are must-have features and this app does not have them as well. Review collected by and hosted on G2.com.

Verified User in Computer Software
UC
Verified User in Computer Software
Enterprise (> 1000 emp.)
"Very good tool for vulnerability findings"
5/5
What do you like best about Qualys WAS?

Qualys gives list of vulnerability findings along with solution and criticality of the issue. Which really helps organization to keep monitoring and implement vulnerability fixes. Review collected by and hosted on G2.com.

What do you dislike about Qualys WAS?

Sometimes if we run for multiple servers, some servers getting error out, and has limitation for no of servers scanned in single request. Review collected by and hosted on G2.com.

Verified User in Computer Software
UC
Verified User in Computer Software
Small-Business (50 or fewer emp.)
"Although it doesn't replace a penetration testing, it is amazing to keep monitoring vulnerabilities"
4/5
What do you like best about Qualys WAS?

Once you set up your web application scan, you can schedule monthly scans to ensure your website is not vulnerable. In this way, it is easy to monitor the vulnerabilities on your environment. I also like to use the Qualys WAS to monitor my Wordpress website for missing patches. Review collected by and hosted on G2.com.

What do you dislike about Qualys WAS?

As any WAS solution, this does not replace a pentesting. There is a considerable amount of false-positives and false-negatives. Also, the initial WAS configuration may be a little bit overwhelming, there are a LOT of parameters and some of them are not that well described. However, once you set your scan, you will never have to worry about it anymore. Review collected by and hosted on G2.com.

Gaurav G.
GG
Gaurav G.
Senior Software Engineer
Enterprise (> 1000 emp.)
"Qualys review"
4/5
What do you like best about Qualys WAS?

It offers vulnerability scanning which is the best part in project. It is a quiet efficient automation tool for performing multiple penetration tests. Review collected by and hosted on G2.com.

What do you dislike about Qualys WAS?

It is a really nice software to use. There is no any thing to dislike. Review collected by and hosted on G2.com.

Questions about Qualys WAS? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

GU
Guest User
•
Last activity about 3 years ago

What are the typical features offered by vulnerability scanner?

0 Upvotes
1
Join the conversation
Pricing

Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more.

Qualys WAS Comparisons
Qualys WAS Features
Compliance Testing
Perimeter Scanning
Configuration Monitoring
Manual Application Testing
Static Code Analysis
Black Box Testing
Issue Tracking
Detection Rate
False Positives