Qualys VMDR
by Qualys
Covered
9
controls
Partial
2
controls
Gaps
3
controls
Overview
Qualys VMDR by Qualys is a vulnerability management solution that covers 9 NIST 800-171 controls (8% total coverage). It addresses key requirements in the vulnerability management domain for defense contractors pursuing CMMC compliance.
Implementation Notes
Deploy Qualys VMDR with FIPS-validated configurations. Integrate with your SIEM for centralized audit logging. Review partial controls quarterly to identify supplementary tooling needs.
More Vulnerability Management Products
Frequently Asked Questions
How many NIST 800-171 controls does Qualys VMDR cover?
Qualys VMDR covers 9 of 110 NIST 800-171 controls (8%), with 2 partially covered and 3 gaps.
Can Qualys VMDR alone satisfy CMMC Level 2?
No single tool covers all 110 NIST 800-171 controls. Qualys VMDR covers 8% and should be part of a layered security stack addressing the remaining controls.
What controls does Qualys VMDR not cover?
Qualys VMDR does not cover controls mp-3-8-1, ia-3-5-1, pe-3-10-1. These require supplementary solutions such as physical security controls, additional access management, or media protection tools.
Map Your Full Security Stack
See NIST 800-171 control coverage for 80+ security products.
Open NIST Tool Mapper