OpenText Fortify DAST vs Qualys External Attack Surface Management
Qualys External Attack Surface Management
7.0 #9 in Patch Management Software
About Qualys External Attack Surface Management| OpenText Fortify DAST | Qualys External Attack Surface Management | |
|---|---|---|
| Free trial | Yes | |
| Platforms | Linux, Web | api, Linux, Web |
| Authenticated scanning | Yes | Yes |
| API testing | Yes | Yes |
| Browser-based scanning | Yes | Yes |
| CI/CD integration | Yes | Yes |
| Deployment model | hybrid | hybrid |
| Free plan | No | |
| External asset discovery | Yes | |
| Cloud asset discovery | Yes | |
| Monitoring frequency | continuous | |
| API access | Yes | |
| Certificate discovery | Yes | |
| Revocation workflows | Yes | |
| Certificate types | tls | |
| CA integrations | Yes | |
| Registry scanning | Yes | |
| SBOM generation | Yes | |
| Image scanning | Yes | |
| Runtime protection | Yes | |
| Kubernetes security | Yes | |
| Admission control | Yes | |
| Supported platforms | Windows, Linux, Mac | |
| Third-party patching | Yes | |
| Reboot controls | defer | |
| Scheduled deployment | Yes | |
| Offline device support | No | |
| Misconfiguration checks | Yes | |
| Permission analysis | Yes | |
| Automated remediation | Yes | |
| Compliance monitoring | Yes | |
| Access model | read_write | |
| CIS benchmarks | Yes | |
| Configuration drift | Yes | |
| Agentless assessment | Yes | |
| Cloud infrastructure | Yes | |
| Agent-based assessment | Yes | |
| Web application scanning | Yes | |
| Remediation tracking | Yes | |
| Risk prioritization | advanced | |
| Supported targets | routers, switches, firewalls, servers, workstations, databases, printers, wireless access devices, cloud assets, containers, mobile devices, OT and IoT assets | |
| Continuous scanning | Yes | |
| Compliance frameworks | PCI DSS, HIPAA, CIS |
Listed together in Best Web Application Security ScannersBest Dynamic Application Security Testing Software