No more typing reviews! Try our Samantha, our new voice AI agent.
Qualys TotalCloud Logo

Qualys TotalCloud Reviews

Vendor: Qualys
4.3 out of 5
Leave a review

What is Qualys TotalCloud?

TotalCloud is the Qualys approach to Cloud Native Application Protection Platform (CNAPP) for cloud infrastructure and SaaS environments. With TotalCloud, customers extend TruRisk insights (transparent cyber risk scoring methodology) from the Qualys Enterprise TruRisk Platform to their cloud environments allowing for a seamless unified view of cyber risk across on-prem, hybrid, and multi-cloud environments. 

Get the Qualys TotalCloud Buyer's Guide and find out what your peers are saying about Qualys TotalCloud, Datadog, Wiz and more!
Qualys TotalCloud is the #2 ranked solution in top SaaS Security Posture Management (SSPM) solutions, #8 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #8 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #9 ranked solution in Cloud Workload Protection Platforms, #11 ranked solution in top Vulnerability Management solutions, and #13 ranked solution in Container Security Solutions. PeerSpot users give Qualys TotalCloud an average rating of 8.6 out of 10. Qualys TotalCloud is most commonly compared to Datadog: Qualys TotalCloud vs Datadog. Qualys TotalCloud is popular among the large enterprise segment, accounting for 51% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 16% of all views.
Buyer's Guide
Qualys TotalCloud
March 2026
Get the report
Helped 886,576 peers since 2012

Featured Qualys TotalCloud reviews

Read more reviews

Qualys TotalCloud mindshare

Product category:
Cloud-Native Application Protection P...
As of April 2026, the mindshare of Qualys TotalCloud in the Cloud-Native Application Protection Platforms (CNAPP) category stands at 1.7%, up from 1.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Cloud-Native Application Protection Platforms (CNAPP) Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.7%
Wiz15.4%
Prisma Cloud by Palo Alto Networks11.4%
Other71.5%
Cloud-Native Application Protection Platforms (CNAPP)

PeerResearch reports based on Qualys TotalCloud reviews

TypeTitleDate
CategoryCloud-Native Application Protection Platforms (CNAPP)Apr 14, 2026Download
ProductReviews, tips, and advice from real usersApr 14, 2026Download
ComparisonQualys TotalCloud vs WizApr 14, 2026Download
ComparisonQualys TotalCloud vs Prisma Cloud by Palo Alto NetworksApr 14, 2026Download
ComparisonQualys TotalCloud vs SentinelOne Singularity Cloud SecurityApr 14, 2026Download
Suggested products
TitleRatingMindshareRecommending
Datadog4.3N/A97%208 interviewsAdd to research
Wiz4.415.4%97%40 interviewsAdd to research
 
 
Key learnings from peers
Last updated Apr 12, 2026

Valuable Features

Qualys TotalCloud's valuable features include accurate reporting, zero-day attack detection, unified vulnerability and threat assessment, continuous monitoring, and automated remediation. Its cloud security capabilities, agent versatility, single prioritized risk view, and integration with cloud accounts improve security posture management and efficiency. Features like TruRisk Insights, FlexScan, and customizable dashboards enhance vulnerability detection. The platform automates processes, offers comprehensive visibility, and provides clear attack path visualizations, reducing manual intervention. Its intuitive interface and API integration simplify complex security operations.
  • "Qualys TotalCloud is an excellent platform, and the beauty of the platform is that we can get all the vulnerabilities, see all the reports in a single dashboard, view them segregated, and easily learn about critical, high, and medium findings with appropriately provided remediation steps."
  • "Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution."
  • "If I had to say something positive about the product that brings me the biggest benefit, I would say it has accurate reports, gets new update CVEs, zero-day attack detection, and is easy to manage with its GUI."

Room for Improvement

Qualys TotalCloud requires enhanced reporting and clarity in remediation steps for vulnerabilities. Improvements in custom dashboards tailored to specific compliance needs, better integration options, and streamlined UI/UX are essential. Users face challenges with onboarding and need advancements in container security, including Windows support. The system should also address zero-day vulnerabilities proactively and improve its vulnerability detection for various environments while simplifying its complex licensing model. Pricing is also a concern among users.
  • "Areas that need improvement in every solution include the remediation part. The remediation steps should be simple enough for everyone to understand."
  • "Regarding technical support from Qualys, they respond, but the response time can be too long. Sometimes we need to wait weeks for solutions to simple questions."
  • "The price is very expensive, actually."

ROI

Qualys TotalCloud shows significant reductions in manual effort, estimates suggest savings of 10% to 40% in effort and costs. Users report that it saves time equivalent to three positions, with daily updates improving vulnerability management by over 50%. Integration features automate tasks, improving efficiency, with resource savings up to 90%. Strong engagement with Qualys teams enhances the system's value, though specific cost details are typically handled by financial personnel.

Pricing

Qualys TotalCloud is often perceived as expensive, but many enterprises consider the investment justified due to its comprehensive features and centralized toolset. Its pricing is competitive for larger organizations, while smaller businesses may find it less affordable. The solution provides cost-effective licensing flexibility, with varying models for different modules. Many users appreciate the seamless integration with existing products, noting that it facilitates easier tracking, monitoring, and cost management without needing additional purchases.
  • "It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
  • "Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
  • "Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."

Popular Use Cases

Organizations primarily use Qualys TotalCloud for vulnerability management, cloud security posture management, and compliance monitoring. Core functions include continuous monitoring, application security testing, configuration compliance, and automated patching. It supports AWS, Azure, and GCP, offering agent-based scanning for containers and cloud infrastructure. Organizations benefit from a unified dashboard displaying security compliance, automated workflows for remediation, and seamless integration with existing SecOps tools like ServiceNow for enhanced security operations.

Service and Support

Qualys TotalCloud customer service receives high marks for responsiveness and helpfulness. Users appreciate their technical support and commend the team's proactive follow-ups and level of expertise. Concerns include occasional delays and varying support quality. Average ratings range between seven to nine out of ten, indicating general satisfaction despite room for improvement. Users note good documentation support. Some report long wait times, but many value the efficient real-time resolution methods provided by Qualys.

Deployment

Users found Qualys TotalCloud's initial setup straightforward and user-friendly, often completing deployment within days or weeks. Organizations appreciated the GUI-based interface and reported minimal complexity. Deployments varied depending on resources and permissions, but many completed integration without significant issues, even on hybrid models. Some required assistance for specific platform rights, while others faced challenges due to policy checks. Maintenance needs were generally low, with some needing to update or manage permissions and connections regularly.

Scalability

Qualys TotalCloud is widely recognized for its scalability, receiving ratings ranging from seven to ten out of ten. Users experience mostly positive results, noting improvements in scaling across environments and branches. Some challenges exist in management, yet organizations report successful expansion in user base and deployments. Different settings, from small to large enterprises, benefit from its scalable nature, effectively handling multiple users and diverse locations. Qualys TotalCloud adapts well to increasing demands across various sectors.

Stability

Users consistently rate Qualys TotalCloud's stability highly, often giving it scores between eight and ten. They experience minimal issues, with some noting occasional minor bugs quickly addressed by support. Downtime is rare and generally pre-communicated due to maintenance. Feedback highlights no significant problems with crashes or lags. Descriptions emphasize a reliable performance that maintains smooth operation and high uptime, with minimal disruption even during updates. Stability is deemed essential, requiring ongoing monitoring.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Qualys TotalCloud Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise25
By reviewers
By visitors reading reviews
Company SizeCount
Small Business120
Midsize Enterprise72
Large Enterprise201
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
16%
Manufacturing Company
10%
Computer Software Company
9%
Government
7%
Construction Company
6%
Transportation Company
5%
Comms Service Provider
5%
Insurance Company
5%
Healthcare Company
4%
Retailer
4%
Media Company
3%
Educational Organization
3%
University
3%
Wholesaler/Distributor
3%
Logistics Company
3%
Performing Arts
3%
Marketing Services Firm
2%
Energy/Utilities Company
2%
Real Estate/Law Firm
2%
Consumer Goods Company
2%
Outsourcing Company
1%
Non Profit
1%
Renewables & Environment Company
1%
Recreational Facilities/Services Company
1%
Hospitality Company
1%

Compare Qualys TotalCloud with alternative products

Go!

Learn more about Qualys TotalCloud

Features and capabilities of Qualys TotalCloud include, but are not limited to: 

Discover: Complete visibility and insights into cyber-risk exposure across multi-cloud. Continuously discover and monitor all your workloads across a multi-cloud environment for a 360-degree view of your cloud footprint. Identify known and previously unknown internet-facing assets for 100% visibility and tracking of risks.

Assess: Comprehensive cloud-native assessments with FlexScanTM. Extensive scanning capabilities with Qualys FlexScan, including no-touch, agentless, API- and snapshot-based scanning, along with agent- and network-based scanning for in-depth assessment. Use these multiple scanning methods to scan a workload to get a unified and comprehensive view of vulnerabilities and misconfigurations.

Prioritize: Unified security view to prioritize cloud risk with TruRiskTM. Experience a unified risk-based view of cloud security with insights across workloads, services, and resources. Qualys TruRisk quantifies security risk by workload criticality and vulnerabilities; it correlates with ransomware, malware, and exploitation threat intelligence to prioritize, trace, and reduce risk.

Defend: Real-time protection against evolving and unknown threats with InstaProtectTM. Qualys enables continuous monitoring of all cloud assets to ensure they are protected against threats and attacks at runtime. Qualys keeps your cloud runtime safe by detecting known and unknown threats across the entire kill chain in near real-time across a multi-cloud environment.

Remediate: Fast remediation with QFlow – no code, drag-and-drop workflows. The integration of QFlow technology into Qualys TotalCloud saves security and DevOps teams valuable time and resources. Automation and no-code, drag-and-drop workflows help simplify the time-consuming operational tasks of assessing vulnerabilities on ephemeral cloud assets, alerting on high-priority threats, remediating misconfigurations, and quarantining high-risk assets.

Qualys TotalCloud was previously known as Qualys TotalCloud with FlexScan.

Related questions

  • 79
When evaluating Cloud-Native Application Protection Platforms (CNAPP), what aspect do you think is the most important to look for?
  • 94
Why is a CNAPP (Cloud-Native Application Protection Platform) important?
  • 91
What CNAPP solution do you recommend for a hybrid cloud?
  • 103
Why are Cloud-Native Application Protection Platforms (CNAPP) tools important for companies?
  • 94
When evaluating Cloud-Native Application Protection Platforms (CNAPP) solutions, what aspect do you think is the most important to look for?
  • 244
Why is Cloud-Native Application Protection Platforms (CNAPP) important for companies?
  • 70
What Cloud-Native Application Protection Platform do you recommend?

Product Categories

Product Categories
Cloud-Native Application Protection Platforms (CNAPP)
Vulnerability Management
Container Security
Cloud Workload Protection Platforms (CWPP)
Cloud Security Posture Management (CSPM)
SaaS Security Posture Management (SSPM)

Popular Comparisons

Popular Comparisons
Datadog vs Qualys TotalCloud Logo
Datadog vs Qualys TotalCloud
Wiz vs Qualys TotalCloud Logo
Wiz vs Qualys TotalCloud
SentinelOne Singularity Cloud Security vs Qualys TotalCloud Logo
SentinelOne Singularity Cloud Security vs Qualys TotalCloud
Snyk vs Qualys TotalCloud Logo
Snyk vs Qualys TotalCloud
Microsoft Defender for Cloud vs Qualys TotalCloud Logo
Microsoft Defender for Cloud vs Qualys TotalCloud
Darktrace vs Qualys TotalCloud Logo
Darktrace vs Qualys TotalCloud
Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud Logo
Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud
Varonis Platform vs Qualys TotalCloud Logo
Varonis Platform vs Qualys TotalCloud
Qualys VMDR vs Qualys TotalCloud Logo
Qualys VMDR vs Qualys TotalCloud
Tanium vs Qualys TotalCloud Logo
Tanium vs Qualys TotalCloud
AWS GuardDuty vs Qualys TotalCloud Logo
AWS GuardDuty vs Qualys TotalCloud
CrowdStrike Falcon Cloud Security vs Qualys TotalCloud Logo
CrowdStrike Falcon Cloud Security vs Qualys TotalCloud
Orca Security vs Qualys TotalCloud Logo
Orca Security vs Qualys TotalCloud
JFrog Xray vs Qualys TotalCloud Logo
JFrog Xray vs Qualys TotalCloud
AWS Security Hub vs Qualys TotalCloud Logo
AWS Security Hub vs Qualys TotalCloud
See all alternatives
 
Qualys TotalCloud Reviews Summary
Author infoRatingReview Summary
Cyber Security Specialist at UBS Financial5.0We use Qualys TotalCloud for managing AWS, Azure, and Google Cloud, which helps us identify vulnerabilities and misconfigurations. While its asset management and reporting features are valuable, the initial onboarding process can be challenging for newcomers.
IT Security Expert at Alior Bank S.A.4.0At Alior Bank, I find Qualys TotalCloud unifies cloud vulnerability assessment, providing prioritized risk scoring and cost benefits. It's stable, but support is slow, and compliance scanning is missing. Overall, it's a solid solution for us.
Senior Cyber Security Analyst at a financial services firm with 10,001+ employees4.0I’ve used Qualys TotalCloud for four years across organizations to manage cloud security, appreciating its automated compliance and risk insights, though I find the UI outdated, reporting difficult to customize, and pricing higher than alternatives.
Senior Information Security Engineer at a tech company with 10,001+ employees4.0I've used Qualys TotalCloud for three years to manage cloud security, benefiting from its threat intelligence, CI/CD integration, and risk insights, though its UI and AI capabilities could improve; overall, it's stable, scalable, and cost-efficient.
IT Manager at a consultancy with 10,001+ employees5.0We manage security compliance across Azure, GCP, and AWS using Qualys TotalCloud, which has boosted our compliance rate from 60% to 90%. While valuable, some features like Cloud Detection and Response need further development for full functionality.
Cyber Security Manager at RJ Corp Retail4.5I am evaluating Qualys TotalCloud for VAPT of cloud and internal assets. I find its unified dashboard, legitimate findings, and accessible reports excellent, despite concerns about remediation clarity and pricing. Its detection is strong, and I rate it 9/10.
Project Lead at Persistent Systems4.5We use Qualys TotalCloud for real-time security assessments of our cloud environment. Its AI-powered features facilitate vulnerability management and asset categorization. Improvements are needed in load speeds and vulnerability detection, though we've seen a 15-20% effort reduction.
Senior Technical Program /Product Manager at a transportation company with 10,001+ employees3.5We use Qualys VMDR and TotalCloud for vulnerability management across on-prem and cloud systems. It's effective for detection and asset monitoring, though container scanning needs maturity. Setup was smooth, support decent, and overall, I'd rate it a seven.