--- title: Qualys WAS Reviews meta_title: 'Qualys WAS Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 21 reviews by the users' company size, role or industry to find out how Qualys WAS works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 21 scale: '5' date_modified: '2026-11-11' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops ---

Qualys WAS Reviews & Product Details

Top-Rated Alternatives

Burp Suite

4.8/5(137)

View All Alternatives

User Insights

Average based on 21 real user reviews.

Typical contract price

$0k - $0k

Per Year

Qualys WAS Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is Qualys WAS, and what problem is it built to solve?

Qualys WAS is part of the Qualys Cloud Platform, which automates vulnerability detection and security management for web applications. It helps organizations address security and compliance risks across applications and other IT environments.

What company sizes and industries is Qualys WAS the best fit for?

Qualys WAS appears most aligned with mid-market and enterprise teams, with reviewers also representing small businesses. The industries with the strongest representation include:

Company size — Mid-market: A prominent segment among positive reviewers.
Company size — Enterprise: Also strongly represented, including teams managing larger environments.
Industry — Information technology and services: A substantial area of reviewer representation.
Industry — Computer software: Another well-represented segment.
Industry — Computer and network security: A recurring use context for application scanning.

Is Qualys WAS considered safe and secure for handling data?

Qualys WAS supports application security by scanning web applications for vulnerabilities and helping teams prioritize findings for remediation. Users also describe using it for ongoing monitoring, while noting that scan results can include false positives and that it complements rather than replaces penetration testing.