PLATFORM NOTES · QUALYS

Qualys CSAM: CAASM and asset inventory facts (2026)

SHORT ANSWER

Qualys CSAM is Qualys's cybersecurity asset management product. It collects through the Qualys agent, which can also act as a passive sensor, syncs with ServiceNow and BMC ITSM tools, links to a Qualys EASM product and offers a free trial. No price is published, and which third-party sources it reads, and its SaaS, identity and OT coverage, are not described on the page we read.

By The Inventory Desk · CAASM Finder · Published 2026-10-11

Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.

Visit Qualys's site

Which approaches does Qualys describe?

Full bar: described on the vendor's pages we read
Hatched bar: described with a condition (another product, a higher tier, or part of the approach)
Stub: not in our sources (it may exist; we did not find it)

The bars show what each vendor's own pages describe, or how your answers weigh the five approaches. They are not a measure of how well a product works.

From Qualys's own pages.
Approach	Status	What the pages say	Source
CAASM aggregation	Not in our sources	Not described on the pages we read.	None
Agent-based inventory	Described	Collects through the Qualys agent, which can also act as a passive sensor.	Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026
External attack surface management	With a condition	The product page links to Qualys EASM; we did not read that page.	Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026
CMDB-centred inventory	With a condition	Syncs with ServiceNow and BMC ITSM tools rather than acting as a CMDB.	Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026
Exposure management	With a condition	Describes one platform and one view of cyber risk; the detail is not on the page we read.	Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026

Which parts of an estate does Qualys cover?

Estate coverage described on Qualys's pages.
Servers and network devices	Not in our sources
Cloud workloads	Not in our sources
SaaS applications	Not in our sources
Identities as assets	Not in our sources
Off-network laptops	Not in our sources
OT and IoT devices	Not in our sources
Internet-facing discovery	Partly Qualys EASM is linked from the product page; not read. Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026

How does Qualys collect and reconcile data?

Collection and reconciliation described on Qualys's pages.
Deployment	Uses the Qualys agent, which can also act as a passive sensor; deployment options are not detailed on the page we read. Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026
Offers its own agent	Matches Qualys agent, usable as a passive sensor. Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026
Works without new agents	Not in our sources
Merges records from several sources	Not in our sources
Integrations	ServiceNow and BMC ITSM sync; other integrations are not listed on the page we read. Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026

What does Qualys do with the inventory?

What Qualys's pages describe doing with asset data.
Feeds or updates a CMDB	Matches Syncs with ServiceNow and BMC ITSM tools. Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026
Cross-source queries and reports	Not in our sources
Workflows, tickets or actions	Not in our sources
Platform it is part of	None
Platforms it connects to	ServiceNow: Syncs with ServiceNow and BMC ITSM tools. Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026

What does Qualys cost?

Not published

Not published. A free trial is offered.

Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026

Free tier or trial Matches Free trial offered.

Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026

Where is Qualys strong, and where are its limits?

Strengths and limits come from the vendor's own pages and our sources; a limit can be something we did not find.

Strengths

The Qualys agent doubles as a passive sensor for finding other devices.
Syncs with ServiceNow and BMC ITSM tools.
A free trial, and an EASM product linked from the same page.

Limits

No price published.
Which third-party sources it reads, and its SaaS, identity and OT coverage, are not described on the page we read.

What does Qualys say about itself?

No vendor figures are quoted in these notes.

What has Qualys announced recently?

No dated announcements in our sources.

Who should shortlist Qualys?

Consider Qualys if you already run the Qualys agent and want asset management from the same data, or if you need sync with ServiceNow or BMC.

In our example finder profiles, Qualys is not in the first group; your own answers may differ.

Run the finder with your answers

How does Qualys compare with each other vendor?

Questions people ask

Does Qualys need an agent?

Own agent: Matches. Qualys agent, usable as a passive sensor. Works without new agents: Not in our sources. Not in our sources.

Does Qualys work with a CMDB?

Matches. Syncs with ServiceNow and BMC ITSM tools.

Does Qualys publish its prices?