OpenVAS vs Qualys VMDR

OpenVAS9.0Visit Qualys VMDR8.5Visit

Higher score OpenVAS #3 in Vulnerability Scanning Software 9.0/10 Free plan · 14-day trial Free planFree trial✓ 2 of 2 features Visit OpenVAS

vs

Qualys VMDR #7 in Vulnerability Scanning Software 8.5/10 7-day trial Free trial✓ 2 of 2 features Visit Qualys VMDR

• OpenVAS fits best

  Teams wanting open-source network coverage

• Qualys VMDR fits best

  Large enterprises with complex asset estates

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature	OpenVAS 9.0/10 Visit ↗	Qualys VMDR 8.5/10 Visit ↗
At a glance
Editor score	9.0	8.5
Ranking	#3 in Vulnerability Scanning Software	#7 in Vulnerability Scanning Software
Best for	Teams wanting open-source network coverage	Large enterprises with complex asset estates
Pricing model	Free plan + paid	Paid
Starting price	—	—
Free plan	✓ (best)	—
Free trial	14 days	7 days
Free trial length	14 days	7 days
Deployment	Self-hosted	Cloud, Self-hosted
Platforms	Web, Windows, macOS, Linux	Web
Support	Community, Docs	Email, Docs, Community
Compliance	GDPR	HIPAA, PCI DSS, SSO/SAML
Integrations	5 integrations	101+ integrations
Built for	Small business, Mid-market, Enterprise	Small business, Mid-market, Enterprise
Features OpenVAS 2/2 · Qualys VMDR 2/2
Authenticated scanning	✓	✓
Continuous scanning	✓	✓
Specs
Deployment model	On_premises	Hybrid
Supported targets	network services, servers, applications, endpoints, container images	routers, switches, firewalls, servers, workstations, databases, printers, wireless access devices, cloud assets, containers, mobile devices, OT and IoT assets
Asset limit	150 assets	Not checked yet
Compliance frameworks	CIS Benchmarks, IT-Grundschutz	PCI DSS, HIPAA, CIS
Our review
Pros	Authenticated and unauthenticated scans across networks, servers and applications Continuous scanning, daily feed updates, agents and container image scanning Free asset limit of 150 with scheduling, reports, APIs and distributed scanning	Scans on-premises, cloud, containers, mobile, OT and IoT assets Prioritizes vulnerabilities using threat intelligence and risk context Connects with ServiceNow, Jira, SIEM and security operations tools
Cons	OPENVAS FREE is for private use and non-professional IT infrastructures OPENVAS BASIC is intended for networks with fewer than 150 assets OPENVAS SCAN uses quote-based pricing	Starts at $2,195 with no free plan Broad coverage may exceed the needs of smaller environments Higher tiers are required for remediation and endpoint protection
Our verdict	OpenVAS is an open-source vulnerability scanner developed and maintained by Greenbone AG. It supports unauthenticated and authenticated testing across network services, servers, applications, endpoints and container images. The product… Read the review →	Qualys VMDR is a cloud-based vulnerability management product for organizations that need to discover assets, assess vulnerabilities and misconfigurations, prioritize risk, and coordinate remediation. It covers routers, switches,… Read the review →

Strengths and trade-offs

• OpenVAS — where it wins

  • Authenticated and unauthenticated scans across networks, servers and applications
  • Continuous scanning, daily feed updates, agents and container image scanning
  • Free asset limit of 150 with scheduling, reports, APIs and distributed scanning

  Where it doesn't

  • OPENVAS FREE is for private use and non-professional IT infrastructures
  • OPENVAS BASIC is intended for networks with fewer than 150 assets
  • OPENVAS SCAN uses quote-based pricing

• Qualys VMDR — where it wins

  • Scans on-premises, cloud, containers, mobile, OT and IoT assets
  • Prioritizes vulnerabilities using threat intelligence and risk context
  • Connects with ServiceNow, Jira, SIEM and security operations tools

  Where it doesn't

  • Starts at $2,195 with no free plan
  • Broad coverage may exceed the needs of smaller environments
  • Higher tiers are required for remediation and endpoint protection

• OpenVAS9.0/10 · Free plan · 14-day trial

  A broad open-source scanner with authenticated testing, continuous scans and compliance features.

  Visit OpenVASFull verdict →
• Qualys VMDR8.5/10 · 7-day trial

  A broad vulnerability platform for enterprises managing complex, hybrid asset estates.

  Visit Qualys VMDRFull verdict →