# Qualys VMDR vs Tenable Vulnerability Management

| Attribute | Qualys VMDR | Tenable Vulnerability Management |
|---|---|---|
| **vioscaleAI score** | 48.8 (13% (low)) | 25 (63% (medium)) |
| content.faq | `[{"answer":"A comprehensive vulnerability management solution that discovers and scans known and unknown assets, prioritizes findings using threat intelligence, and streamlines remediation through built-in workflows and integrations with ticketing and ITSM platforms. It is indexed under Vulnerability Management.","source":"https://www.qualys.com/apps/vulnerability-management-detection-response/","question":"What is Qualys VMDR?","confidence":0.6},{"answer":"Qualys VMDR supports the web, Windows, macOS, Linux and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://www.qualys.com/apps/vulnerability-management-detection-response/","question":"What platforms does Qualys VMDR support?","confidence":0.6},{"answer":"Yes. Qualys VMDR can be deployed cloud / SaaS, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://www.qualys.com/apps/vulnerability-management-detection-response/","question":"Can Qualys VMDR be self-hosted?","confidence":0.6},{"answer":"We have confirmed 31 integrations for Qualys VMDR, including ServiceNow ITSM, Jira, Amazon Inspector, AWS, Microsoft Azure, Google Cloud Platform, Splunk and Jenkins, plus 23 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.qualys.com/apps/vulnerability-management-detection-response/","question":"What does Qualys VMDR integrate with?","confidence":0.6},{"answer":"Qualys VMDR is available in the United States, the United Kingdom, the EU, Canada, India, the United Arab Emirates, Australia and Saudi Arabia. Its primary markets are the United States, the EU and the United Kingdom.","source":"https://www.qualys.com/partners/qlu-pricing","question":"Where is Qualys VMDR available?","confidence":0.75}]` | `[{"answer":"Tenable One consolidates vulnerability management with broader exposure data to help organizations identify and remediate critical security risks. It supports multi-cloud and hybrid environments with automated risk prioritization and compliance management capabilities. It is indexed under Vulnerability Management.","source":"https://www.tenable.com/cloud-security/pricing","question":"What is Tenable Vulnerability Management?","confidence":0.6},{"answer":"Tenable Vulnerability Management does not publish its prices. Pricing is quoted on request, so the figure depends on your seat count and requirements. We record this as a pricing-transparency signal rather than guessing a number. Pricing changes often, so verify at source before relying on it.","source":"https://www.tenable.com/cloud-security/pricing","question":"How much does Tenable Vulnerability Management cost?","confidence":0.6},{"answer":"We have confirmed browser-based access to Tenable Vulnerability Management. That is the extent of what we could verify from public sources, so it may well offer desktop or mobile clients we have not indexed.","source":"https://www.tenable.com/cloud-security/pricing","question":"What platforms does Tenable Vulnerability Management support?","confidence":0.6},{"answer":"Yes. Tenable Vulnerability Management can be deployed cloud / SaaS, hybrid, on-premise, air-gapped and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://www.tenable.com/cloud-security/pricing","question":"Can Tenable Vulnerability Management be self-hosted?","confidence":0.6}]` |
| deployment.options | `{"cloud":true,"hybrid":true,"on_prem":true}` | `{"cloud":true,"on_prem":true}` |
| description.long | A comprehensive vulnerability management solution that discovers and scans known and unknown assets, prioritizes findings using threat intelligence, and streamlines remediation through built-in workflows and integrations with ticketing and ITSM platforms. | A cloud-based vulnerability management platform that identifies and prioritizes security risks across cloud infrastructure and on-premises assets, integrating misconfigurations and identity risks into a unified exposure management strategy. |
| features.capabilities | `{"pci_asv":true,"agent_based":true,"agentless_cloud":true,"asset_discovery":true,"authenticated_scan":true,"remediation_workflow":true}` | `{"asset_discovery":true,"remediation_workflow":true}` |
| integrations.count | 100 | 1 |
| integrations.list | `[{"name":"ServiceNow ITSM"},{"name":"Jira"},{"name":"Amazon Inspector"},{"name":"AWS","native":true,"category":"cloud"},{"name":"Microsoft Azure","native":true,"category":"cloud"},{"name":"Google Cloud Platform","native":true,"category":"cloud"},{"name":"ServiceNow","native":true,"category":"cmdb","direction":"bidirectional"},{"name":"Splunk","native":true,"category":"siem"},{"name":"Jenkins","native":true,"category":"ci_cd"},{"name":"GitHub","native":true,"category":"ci_cd"},{"name":"GitLab","native":true,"category":"ci_cd"},{"name":"Okta","native":true,"category":"iam"},{"name":"Microsoft Defender","native":true,"category":"endpoint"},{"name":"CrowdStrike","native":true,"category":"endpoint"},{"name":"SentinelOne","native":true,"category":"endpoint"},{"name":"Palo Alto Networks Prisma Cloud","native":true,"category":"cspm"},{"name":"Rapid7 InsightVM","native":true,"category":"vulnerability"},{"name":"Tenable IO","native":true,"category":"vulnerability"},{"name":"Tanium","native":true,"category":"endpoint"},{"name":"VMware","native":true,"category":"virtualization"},{"name":"Wiz","native":true,"category":"cspm"},{"name":"Orca Security","native":true,"category":"cspm"},{"name":"Black Duck","native":true,"category":"sca"},{"name":"Snyk","native":true,"category":"sca"},{"name":"CheckmarxOne","native":true,"category":"sast"},{"name":"HCL AppScan","native":true,"category":"dast"},{"name":"PortSwigger BurpSuite","native":true,"category":"dast"},{"name":"Veracode","native":true,"category":"sast"},{"name":"BitSight","native":true,"category":"risk"},{"name":"BugCrowd","native":true,"category":"bug_bounty"},{"name":"NetApp","native":true,"category":"storage"},{"name":"Nutanix","native":true,"category":"hypervisor"},{"name":"Azure","native":true,"category":"cloud","direction":"bidirectional"},{"name":"QRadar","native":true,"category":"siem","direction":"outbound"},{"name":"Cortex XDR","native":true,"category":"endpoint_security","direction":"bidirectional"},{"name":"Microsoft Entra ID","native":true,"category":"identity_access","direction":"bidirectional"},{"name":"Microsoft Defender for Cloud","native":true,"category":"cloud_security","direction":"bidirectional"},{"name":"GCP","native":true,"category":"cloud","direction":"bidirectional"},{"name":"OCI","native":true,"category":"cloud","direction":"bidirectional"},{"name":"Bamboo","native":true,"category":"ci_cd","direction":"bidirectional"},{"name":"VMware Tanzu","native":true,"category":"container_orchestration","direction":"bidirectional"},{"name":"Aqua CNAPP","native":true,"category":"container_security","direction":"bidirectional"},{"name":"Claroty","native":true,"category":"iot_ot_security","direction":"bidirectional"},{"name":"Nozomi Vantage","native":true,"category":"iot_ot_security","direction":"bidirectional"},{"name":"Cybereason","native":true,"category":"endpoint_security","direction":"bidirectional"},{"name":"Armis Centrix","native":true,"category":"iot_security","direction":"bidirectional"},{"name":"Ordr","native":true,"category":"iot_ot_security","direction":"bidirectional"},{"name":"BMC Helix CMDB","native":true,"category":"cmdb_asset_management","direction":"bidirectional"},{"name":"Kong API Security","native":true,"category":"api_security","direction":"bidirectional"},{"name":"MuleSoft API Security","native":true,"category":"api_security","direction":"bidirectional"},{"name":"Swagger API Security","native":true,"category":"api_security","direction":"bidirectional"},{"name":"GCP Apigee","native":true,"category":"api_security","direction":"bidirectional"},{"name":"Cortex Cloud by Palo Alto Networks","native":true,"category":"cloud_security","direction":"bidirectional"}]` | `[{"name":"Splunk"}]` |
| market.availability | `{"hqCountry":"US","primaryMarkets":["US","EU"],"availabilityScope":"global","availableCountries":["US","EU","GB","CA","AU","IN","AE","IT"],"notAvailableCountries":[]}` | - |
| platform.support | `{"cli":true,"web":true}` | `{"web":true}` |
| pricing | `{"type":"subscription","currency":"USD","sourceUrl":"https://www.qualys.com/partners/qlu-pricing","retrievedAt":"2026-08-20T12:47:23.533Z"}` | `{"type":"subscription","summary":"Annual subscription model; specific pricing not disclosed on this page.","sourceUrl":"https://www.tenable.com/products/vulnerability-management","retrievedAt":"2026-09-29T14:55:19.973Z"}` |
| pricing.free_tier | - | no |
| pricing.model | commercial | commercial |
| pricing.price_level | unknown | unknown |
| pricing.transparent | no | no |
| reliability.sla_pct | - | 99.95 |
| security.fedramp | - | yes |
| security.gdpr | yes | - |
| security.pci | - | yes |
| security.trust_center | https://www.qualys.com/customers/success-stories/ameritas-aws-cis-compliance-with-qualys | https://www.tenable.com/education/courses/security-center-specialist |

## Capabilities (Vulnerability Management)

| Capability | Qualys VMDR | Tenable Vulnerability Management |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Authenticated scan | ✓ | - |
| Agent based | ✓ | - |
| Agentless cloud | ✓ | - |
| Asset discovery | ✓ | ✓ |
| Scap oval | - | - |
| PCI asv | ✓ | - |
| Remediation workflow | ✓ | ✓ |
| Fedramp | - | - |
| Open source | - | - |

*Source: vioscaleAI. Generated 2026-10-16T20:59:49.847Z. "-" = undocumented, not absent.*