Comodo cWatch vs. Qualys TruRisk Platform

If you are well versed with servers and server security and just need a scanning tool but can do malware mitigation yourself, then you'd probably be ok with this. If you are not, there are a lot of steps to even connect your server and get it to scan correctly, and no mitigation steps are made immediately obvious should there be a threat, so it's a lot for an unfamiliar or beginner user.

Incentivized

It is well suited for environments that are looking for a solution that is top notch for vulnerability scanning, and is the most accurate at doing so. It would also fit environments that have a lot of endpoints to scan or like to have scanning done on an automatic basis. It is less appropriate in environments that want to use a platform right away, without getting training in how to use it, or reading documentation on the product.

Incentivized

• It provides a web application firewall (WAF) that helps to protect websites and web applications from cyber-attacks. The WAF uses advanced security rules and machine learning algorithms to identify and block malicious traffic.
• Comodo cWatch helps us to comply with various security regulations and standards, such as PCI DSS, HIPAA, and SOC 2.
• Incident response services of Comodo cWatch helps us to quickly respond to security incidents. This includes a team of security experts who are available 24/7 to provide assistance in the event of a security breach.

Incentivized

• Attestation is so easy with Qualys. I find this one feature makes the investment worth the cost
• Ease of use. Within an hour of first installing, a person can be running compliance tests without a hitch.
• Great training materials and support. I have never had to take more than twenty minutes to solve a problem either through support or the forums.

Incentivized

• How updates are managed
• Support - timing and back and forth with question/answers

Incentivized

• Notices some findings which were not clear why they appear(suspected false positive).
• Working with Qualys support(for example due to the previous point) wasn't the best experience. the response was very slow.
• Qualys limit the daily API requests. In case you need more, it will cost.

Incentivized

Again, the usability of Qualys has been a pinpoint for this entire review. It was easily the worst thing about the product and because of this, I would not recommend Qualys to anybody in my field. This should be something that Qualys strives to improve if they wish to stay in business.

Incentivized

Support is chat only and was not very easy to deal with. I had to spend hours on chat with them just to get my server connected properly. I was getting cookie cutter answers for a while before they were able to get someone more higher up to me. Didn't seem US based either.

Incentivized

They had a support page within the WAS to report any concerns or seek help. But the UI of that is not smooth. Regardless support staff were pretty responsive and helpful. They scheduled calls to understand and address our problems. Email support is good as well.

Incentivized

Comodo cWatch competes with Barracuda Web security that we also used and stand out with its amazing features and solutions such as application monitoring, real time web traffic analyzing, security and policy management, early threat and detection and identifying the risk for prevention. With all these reason being handy to us we choose Comodo cWatch.

Incentivized

We find that Nessus is a great product, on par if not slightly better compared to Qualys in terms of their pricing model. However, Qualys Cloud Platform has better quality reporting, and offers great tips and suggestions on quickly closing a gap and eliminating the risk. In our organization, both products are great and meet our expectations, but due to pricing, we favor Nessus slightly more.

Incentivized

• Less downtime in web applications which improved overall productivity.
• Pricing is neat and money-back guarantee ensures trust.
• Support from support team is bit late, this will impact on our daily productivity.

Incentivized

• The most important thing that happens with this program is to automate one hundred percent the security of my system since this program is in charge of supervising each of the applications and websites in detail.
• One of the purposes for which we trust Qualys Cloud Platform is to keep our system clean and secure; the ability of this software to manage our vulnerability makes us more cautious about working with it.

Incentivized