Qualys delivers the cloud-based Enterprise TruRisk platform, with VMDR for vulnerability management, detection, and response. It combines lightweight Cloud Agents, scanner appliances, web app scanning, and container and cloud (TotalCloud) coverage, correlating findings into TruRisk risk scores. Aimed at mid-market and enterprise, it is a commercial SaaS priced by subscription. Trusted by many U.S. federal agencies; TotalCloud achieved FedRAMP High in 2026.
vulnerability-managementvmdrtruriskenterprise
Overview
- Founded
- 1999
- Pricing tier
- High
- Startup-friendly
- No
- Enterprise-ready
- Yes
Vulnerability management
- Agent-based
- Yes
- Agentless scanning
- Yes
- Web app scanning (DAST)
- Yes
- Container scanning
- Yes
- Cloud scanning
- Yes
- Risk prioritization
- Yes
- Open-source
- No
- Self-hostable
- Yes
- Free tier
- No
Cloud security (CSPM/CNAPP)
- Agentless scanning
- Yes
- CSPM (posture)
- Yes
- CWPP (workload)
- Yes
- CIEM (entitlements)
- Yes
- IaC scanning
- Yes
- Kubernetes security
- Yes
- Multi-cloud
- Yes
- Open-source
- No
- Free tier
- No
Categories & compliance
Categories
Compliance
ISO27001FedRAMPCSA-STAR