Qualys External Attack Surface Management vs Qualys Scanner Appliance

Qualys External Attack Surface Management

7.8 #5 in Patch Management Software

6.4 #18 in Network Vulnerability Scanners

	Qualys External Attack Surface Management	Qualys Scanner Appliance
Free trial	Yes
Platforms	api, Linux, Web	self-hosted, Web
Free plan	No
External asset discovery	Yes
Cloud asset discovery	Yes
Monitoring frequency	continuous
API access	Yes
Certificate discovery	Yes
Revocation workflows	Yes
Certificate types	tls
CA integrations	Yes
Deployment model	hybrid
Registry scanning	Yes
SBOM generation	Yes
Image scanning	Yes
Runtime protection	Yes
Kubernetes security	Yes
Admission control	Yes
Authenticated scanning	Yes
API testing	Yes
Browser-based scanning	Yes
CI/CD integration	Yes
Supported platforms	Windows, Linux, Mac
Third-party patching	Yes
Reboot controls	defer
Scheduled deployment	Yes
Offline device support	No
Misconfiguration checks	Yes
Permission analysis	Yes
Automated remediation	Yes
Compliance monitoring	Yes
Access model	read_write
CIS benchmarks	Yes
Configuration drift	Yes
Agentless assessment	Yes
Cloud infrastructure	Yes
Agent-based assessment	Yes
Web application scanning	Yes
Remediation tracking	Yes
Risk prioritization	advanced
Supported targets	routers, switches, firewalls, servers, workstations, databases, printers, wireless access devices, cloud assets, containers, mobile devices, OT and IoT assets
Continuous scanning	Yes
Compliance frameworks	PCI DSS, HIPAA, CIS
Deployment		hybrid
Credentialed scans		Yes
Agent-based scanning		Yes
Compliance checks		Yes
Supported operating systems		Windows, Linux/Unix
Network discovery		Yes