Number of Seats/Users: Qualys Cloud Platform offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows Qualys Cloud Platform that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from Qualys Cloud Platform. Qualys Cloud Platform reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: Qualys Cloud Platform offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from Qualys Cloud Platform. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: Qualys Cloud Platform often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Here at Spendbase our internal data shows that Qualys Cloud Platform, especially VMDR, is generally seen as a strong, enterprise‑grade option, but with a few patterns you’ll want to know before you commit budget.

Overall sentiment
Most Spendbase clients rate Qualys highly for depth and coverage, but there’s a clear split:

• Many call it “best in class” for vulnerability management and compliance.
• A smaller but vocal group reports frustration with false positives, complexity, and support.

What Spendbase clients like most
Our data highlights a few consistent strengths:

• Security coverage & accuracy
• Strong vulnerability detection and detailed findings
• Continuous assessment and up‑to‑date vuln database

• Solid support for PCI, CIS and other standards

• Platform & usability

• Cloud‑based access from anywhere
• Flexible scheduling and multiple scan profiles
• Rich dashboards and reports that management likes

• One agent supporting multiple modules (VMDR, PC, SCA, PM, FIM, etc.)

• Onboarding & learning

• Helpful training videos and labs
• UI considered “nice and clean” once people get used to it

Key pain points to factor into pricing talks
Our internal feedback shows recurring issues that you can use as levers in negotiations:

• Cost and licensing
• Frequently flagged as expensive, especially for small or mid‑size orgs
• IP‑based licensing (paying for whole subnets, not just live IPs) drives up cost
• False positives & noise
• Repeated mentions of:
  • False positives (including compliance checks on non‑existent services)
  • Time spent validating and tuning
• Complexity
• Setup and configuration described as:
  • “Confusing” with many similar scan options
  • Easy to misconfigure and then results suffer
• Dual old/new UIs can cause confusion
• Operational limitations
• No offline / air‑gapped deployment option
• Can’t do some forms of external credentialed scans
• Occasional delays in endpoint data updates
• Weak or clunky patch‑management integration for some use cases
• Support & reliability (mixed)
• Some clients praise responsive support
• Others mention unresolved tickets and “promises for next release”

How we typically advise Spendbase customers
When we negotiate Qualys contracts, we usually:

• Push for discounts tied to:
• High IP counts and subnet‑based licensing inefficiencies
• Time and resources needed to manage false positives and complex setup
• Recommend piloting:
• On a limited scope first, to size licenses correctly and avoid overpaying
• Encourage bundling:
• Multiple modules (VMDR, PCI, Patch, etc.) under one discounted agreement instead of buying piecemeal.