BeyondTrust Network Security Scanner, powered by Retina (Legacy) vs. Qualys VMDR

Retina Network Security Scanner is well suited for any environment and infrastructure that would like to expose security deficiencies across their network as well as visualize vulnerabilities as they pertain to assets in their environment. I cannot think of any scenario that would not be appropriate for this product. Since the product carries over to pretty much all assets in your environment, I don't know off the top of y head what it wouldn't be appropriate for.

Incentivized

Qualys VMDR supports both remote scanning and as well as agent based scanning. With a complex infrastructure with over 2 million devices and 100s getting added and removed on daily basis makes the operations challenging. Qualys VMDR has a great feature to do discovery scan to detect active devices on the network and perform vulnerability scans on those assets. Authentication is also easy to setup and use.

Incentivized

• Besides the fact that Retina NSS performs the fundamental task of scanning all my network devices, one of the main strengths is the speed at which it scans. Time is money and I know people tent to wear that cliché out a bit, but when you are as small as we are of a team, every minute counts.
• We have utilized other network security scanners over the past 21 years and Retina NSS seems to have the smallest footprint with no evidence of scanning degrading performance of the devices scanned.
• They seem to update their database frequently enough that we notice a correlation of threats to discovery.
• There is a small learning curve, but overall, a seasoned IT professional can quickly get up and running in a few hours and get usable results quickly. This falls back on the speed at which Retina NSS scans. My previous network security scanners would sometimes take hours to complete a full vulnerability scan of between 250 - 400 devices, now it only takes a fraction of that time.

Incentivized

• Qualys VMDR automates the remediation process for risks without code.
• Scans and detects all of our assets whether they are IT or IOT
• Analyzes our environment for misconfigurations and measures risk against industry benchmarks

Incentivized

• I do not have any obvious cons to report at this time.

Incentivized

• Qualys VMDR can definitely improve on its reporting of assets as we have caught devices not captured in the Qualys VMDR scans.
• We would like to see an improvement on the dashboard interface as it is faulty sometimes.
• Qualys VMDR should focus on more competitive pricing as it is very expensive.

Incentivized

Next to Veeam (which is a tremendous product for backup/DR) this is the best service/software I have used in the past three decades. Should be called the Swiss Army Knife of security.

Incentivized

infrastructure to identify vulnerabilities

Always available with the exception on maint windows

Incentivized

Once in a while it would be slow -

Incentivized

This is iron but I am giving it 5 star and I can give more If I can do because they are best in support. So once you own this product they will assign a dedicated support for you and when you are under the weather with anything just connect them with anything call, ping or ticket they will come like Genie.

Not really - the integrations via connectors is not heavy lifting. Any complexity has to do with a service that requires more steps (i.e. AWS/GCP)

Incentivized

Retina Network Security Scanner is the only product we have used in our enterprise. I have used a product in the past called GFI LanGuard Network Security Scanner and while it did perform the functions of vulnerability testing, etc...it just wasn't nearly as refined as Retina NSS. It was slow and was not as lightweight as Retina as far as end-user detection.

Incentivized

Qualys VMDR was selected against competitors because of the depth of insight the platform provides. When stacked against other competitors, platforms like Syxsense couldn't produce the same level on insight and reporting like how Qualys VMDR does. Qualys VMDR also does a great job at gathering information about the latest security definitions and using those to analyze our environment to alert of any vulnerabilities. Something that Syxsense couldn't.

Incentivized

Outside some pretty arcane apps or OS this is painless. The problem - and self-inflicted - is that older stuff is not supported.

Incentivized

• The product is extremely easy to deploy, extremely positive.
• If you take full advantage of this product as I did, you will maximize your ROI quickly as we did.
• We were able to visualize our vulnerabilities efficiently and effectively and maintain scheduled scans that allowed us to maintain a continuous improvement atmosphere while securing our investments.
• The ability provide reporting allows our IT department to prioritize issues and remediate as required without chasing down low risk issues over high risk issues that need immediate attention.

Incentivized

• Cut down on manual efforts to investigate or remediate vulnerabilities, which can be a big driver of ROI
• Avoidance of potential incidents with upfront risk mitigation
• Patching efficiency gains

Incentivized