# Qualys: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 14 judge labels across 7 categories by 9 of 14 models. Page: https://www.gane.ai/index/it/vendors/qualys

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Application security posture management](https://www.gane.ai/index/it/developer/application-security-posture-management/index.md) | 0% | 59 | 33% | 3 |
| [Breach and attack simulation](https://www.gane.ai/index/it/security/breach-and-attack-simulation/index.md) | 0% | 30 | 0% | 3 |
| [Cloud-native application protection](https://www.gane.ai/index/it/cloud/cloud-native-application-protection/index.md) | 0% | 32 | 0% | 2 |
| [Cloud security posture management](https://www.gane.ai/index/it/cloud/cloud-security-posture-management/index.md) | 0% | 58 | 50% | 2 |
| [Penetration testing as a service](https://www.gane.ai/index/it/security/penetration-testing-as-a-service/index.md) | 0% | 110 | 50% | 2 |
| [API security platforms](https://www.gane.ai/index/it/security/api-security-platforms/index.md) | 0% | 88 | 0% | 1 |
| [SaaS security posture management](https://www.gane.ai/index/it/security/saas-security-posture-management/index.md) | 0% | 96 | 100% | 1 |

## What the models said for it

- "You already rely on Qualys or want cloud risk folded into a broader vulnerability and exposure-management program." (GPT-6 Luna, CNAPP)
- "Qualys is best for cloud security and compliance." (Mistral Small, ASPM)

## And against it

- "older versions of broader security suites (e.g., some from Qualys, Rapid7, or Tenable if not updated). They excel in compliance but can overwhelm without tuning." (Grok 4.20, CSPM)
- "Many cheap providers run an automated scanner (like Nessus or Qualys), put a custom cover on the PDF, and sell it as a "penetration test."" (Gemini 3.5 Flash, PTaaS)
- "SSPM feels like an afterthought; depth in SaaS-specific configuration may be shallow" (DeepSeek V4 Flash, SSPM)
- "Who to Watch Out For: Checkmarx, Fortify, SonarQube (in default mode), and Qualys." (Qwen 3.7 Flash, ASPM)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 2 | 0 | 2 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 1 | 1 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 1 | 1 |
| Mistral Small | 0 | 1 | 2 | 0 | 3 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 1 | 1 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 1 | 1 | 2 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 1 | 0 | 1 |
| GPT-6 Luna | 0 | 1 | 0 | 0 | 1 |
| Muse Glimmer 30B | 0 | 0 | 2 | 0 | 2 |

## Sources returned with these answers

The sites and pages cited by the answers that named Qualys, from 34 of the 50 answers that named it (only the models that return a source list).

### Domains cited

- g2.com: 13
- csoonline.com: 10
- gane.ai/index: 8
- peerspot.com: 8
- reddit.com: 7
- gartner.com: 6
- github.com: 5
- sphericalinsights.com: 5
- checkpoint.com: 4
- ciopages.com: 4

### Pages cited

- https://g2.com/categories/breach-and-attack-simulation-bas: 5
- https://csoonline.com/article/2132289/breach-and-attack-simulation-tools.html: 4
- https://sphericalinsights.com/blogs/top-15-companies-in-global-breach-and-attack-simulation-market-2026-2035-expert-view-by-spherical-insights: 4
- https://techtarget.com/news/Pros-and-cons-of-7-breach-and-attack-simulation-tools/837268: 4
- https://checkpoint.com/cyber-hub/what-is-application-security-appsec/what-is-api-security/the-5-top-api-security-tools: 3
- https://csoonline.com/article/657138/how-to-choose-the-best-cloud-security-posture-management-tools.html: 3
- https://www.gane.ai/index/it/security/breach-and-attack-simulation/enterprise: 3
- https://paloaltonetworks.com/cyberpedia/cspm-tools: 3

## In its own words

What Qualys's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: Enterprise Cyber Risk and Security Platform (https://qualys.com/)
- For: business (https://qualys.com/)
- Free plan or trial: Try the Enterprise TruRisk Platform for free. (https://qualys.com/)
- Integrations claimed: 100 (https://qualys.com/)
- Certifications: FedRAMP
- Hosting: US, CA, EU, IN, AE, UK, AU, KSA
- Customers named: Aflac, Capital One, Cintas, Frontier Airlines, New Orleans Saints, Olympus, Saudi Telecom Company, Sodexo

## What it publishes

Every page qualys.com exposes, read 2026-09-29: 11443 addresses. By kind, pages and the last 90 days:

- blog: 1171 pages, 41 in the last 90 days, latest 2026-09-28
- case study: 11 pages, 0 in the last 90 days, latest 2017-11-01
- webinar or virtual event: 12 pages, 0 in the last 90 days, latest 2023-07-01
- conference or event: 57 pages, 0 in the last 90 days, latest 2023-11-01
- report or ebook: 403 pages, 0 in the last 90 days, latest 2024-01-01
- comparison: 8 pages, 1 in the last 90 days, latest 2026-09-10
- template or tool: 16 pages, 0 in the last 90 days, latest 2017-04-01
- glossary or explainer: 62 pages, 0 in the last 90 days, latest 2025-12-30
- news or press: 4 pages, 0 in the last 90 days, latest undated
- Recent: 2026-09-28 blog: Developer new perimeter supply chain cloud breaches https://blog.qualys.com/vulnerabilities-threat-research/2026/09/28/developer-new-perimeter-supply-chain-cloud-breaches
- Recent: 2026-09-23 blog: Cisa bod 26 04 timelines for three linux kernel cves https://blog.qualys.com/product-tech/2026/09/23/cisa-bod-26-04-timelines-for-three-linux-kernel-cves
- Recent: 2026-09-17 blog: End of point in time compliance continuous audit readiness https://blog.qualys.com/product-tech/2026/09/17/end-of-point-in-time-compliance-continuous-audit-readiness
- Recent: 2026-09-17 blog: The autonomous engine behind remediation and what finally makes it safe https://blog.qualys.com/product-tech/2026/09/17/the-autonomous-engine-behind-remediation-and-what-finally-makes-it-safe
- Recent: 2026-09-16 blog: Oracle critical security patch update september 2026 review https://blog.qualys.com/vulnerabilities-threat-research/2026/09/16/oracle-critical-security-patch-update-september-2026-review
- Recent: 2026-09-15 blog: Before you patch why patch reliability matters for confident deployment https://blog.qualys.com/product-tech/2026/09/15/before-you-patch-why-patch-reliability-matters-for-confident-deployment

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.