Intruder vs Qualys External Attack Surface Management

Intruder

7.8 #1 in Vulnerability Scanning Software

7.5 #9 in Patch Management Software

	Intruder	Qualys External Attack Surface Management
Free plan	Yes
Free trial	Yes	Yes
Paid from	Free
Platforms	api, Linux, macOS, Web, Windows	api, Linux, Web
Free plan	Yes	No
Deployment model	hybrid	hybrid
Supported targets	external IP addresses, domains, subdomains, internal Windows/macOS/Linux devices, web applications, APIs, cloud environments, container images	routers, switches, firewalls, servers, workstations, databases, printers, wireless access devices, cloud assets, containers, mobile devices, OT and IoT assets
Authenticated scanning	Yes	Yes
Continuous scanning	Yes	Yes
Compliance frameworks	SOC 2, ISO 27001, PCI DSS, HIPAA, Cyber Essentials	PCI DSS, HIPAA, CIS
External asset discovery		Yes
Cloud asset discovery		Yes
Monitoring frequency		continuous
API access		Yes
Certificate discovery		Yes
Revocation workflows		Yes
Certificate types		tls
CA integrations		Yes
Registry scanning		Yes
SBOM generation		Yes
Image scanning		Yes
Runtime protection		Yes
Kubernetes security		Yes
Admission control		Yes
API testing		Yes
Browser-based scanning		Yes
CI/CD integration		Yes
Supported platforms		Windows, Linux, Mac
Third-party patching		Yes
Reboot controls		defer
Scheduled deployment		Yes
Offline device support		No
Misconfiguration checks		Yes
Permission analysis		Yes
Automated remediation		Yes
Compliance monitoring		Yes
Access model		read_write
CIS benchmarks		Yes
Configuration drift		Yes
Agentless assessment		Yes
Cloud infrastructure		Yes
Agent-based assessment		Yes
Web application scanning		Yes
Remediation tracking		Yes
Risk prioritization		advanced