Try our new research platform with insights from 80,000+ expert users
Qualys TotalCloud Logo

Qualys TotalCloud Reviews

Vendor: Qualys
4.3 out of 5
Badge Ranked 1
Leave a review

What is Qualys TotalCloud?

TotalCloud is the Qualys approach to Cloud Native Application Protection Platform (CNAPP) for cloud infrastructure and SaaS environments. With TotalCloud, customers extend TruRisk insights (transparent cyber risk scoring methodology) from the Qualys Enterprise TruRisk Platform to their cloud environments allowing for a seamless unified view of cyber risk across on-prem, hybrid, and multi-cloud environments. 

Get the Qualys TotalCloud Buyer's Guide and find out what your peers are saying about Qualys TotalCloud, Wiz, Datadog and more!
Qualys TotalCloud is the #1 ranked solution in top SaaS Security Posture Management (SSPM) solutions, #7 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #8 ranked solution in Cloud Workload Protection Platforms, #8 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #10 ranked solution in top Vulnerability Management solutions, and #12 ranked solution in Container Security Solutions. PeerSpot users give Qualys TotalCloud an average rating of 8.6 out of 10. Qualys TotalCloud is most commonly compared to Wiz: Qualys TotalCloud vs Wiz. Qualys TotalCloud is popular among the large enterprise segment, accounting for 57% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 15% of all views.
Buyer's Guide
Qualys TotalCloud
December 2025
Get the report
Helped 879,371 peers since 2012

Featured Qualys TotalCloud reviews

Read more reviews

Qualys TotalCloud mindshare

Product category:
Cloud-Native Application Protection P...
As of December 2025, the mindshare of Qualys TotalCloud in the Cloud-Native Application Protection Platforms (CNAPP) category stands at 1.6%, up from 1.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
ProductMarket Share (%)
Qualys TotalCloud1.6%
Wiz21.6%
Prisma Cloud by Palo Alto Networks13.2%
Other63.599999999999994%
Cloud-Native Application Protection Platforms (CNAPP)

PeerResearch reports based on Qualys TotalCloud reviews

TypeTitleDate
CategoryCloud-Native Application Protection Platforms (CNAPP)Dec 31, 2025Download
ProductReviews, tips, and advice from real usersDec 31, 2025Download
ComparisonQualys TotalCloud vs WizDec 31, 2025Download
ComparisonQualys TotalCloud vs Prisma Cloud by Palo Alto NetworksDec 31, 2025Download
ComparisonQualys TotalCloud vs SentinelOne Singularity Cloud SecurityDec 31, 2025Download
Suggested products
TitleRatingMindshareRecommending
Wiz4.521.6%96%33 interviewsAdd to research
Datadog4.3N/A97%209 interviewsAdd to research
 
 
Key learnings from peers
Last updated Dec 28, 2025

Valuable Features

Qualys TotalCloud offers valuable features such as automatic inventory detection, extensibility for creating custom controls, a user-friendly interface, vulnerability management, and TruRisk Insights. It integrates well with Power BI, providing comprehensive dashboards and enabling efficient risk assessment. Its cloud-native architecture supports automation and API integration, reducing manual tasks. Additional features include FlexScan for internet-facing VMs, real-time protection, agent versatility, and centralized vulnerability management dashboards. These capabilities significantly enhance security posture and streamline cloud management.
  • "If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."
  • "Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."
  • "Once you have your vulnerabilities fixed and your patches pushed out using Qualys TotalCloud, then you are able to eliminate threats and cyber risk."

Room for Improvement

Qualys TotalCloud needs more intuitive licensing, improved IP resolution, and the ability to disable default policies. Enhanced reporting, better UI, and comprehensive vulnerability assessment including PaaS and AI-related risks are required. Integration options and refined dashboards are also needed. Policy compliance, support for Windows OS in containers, and addressing zero-day vulnerabilities are other areas for enhancement. Users desire faster updates, seamless onboarding, and improved container security.
  • "I think Qualys TotalCloud needs to improve its handling of zero-day vulnerabilities and supply chain management because modern ransomware attacks not only target prime critical infrastructures but also the supply chain system."
  • "The downside is only in container security, but it has not been a long time since they introduced these models."
  • "I sometimes have difficulty detecting or uninstalling certain versions of applications, which I have to do manually."

ROI

Qualys TotalCloud has led to noteworthy time and resource savings, performing tasks equivalent to three employees and automating processes through CallStream integration. Risk management workload has significantly decreased, with up to 90% time saved, leading to a low risk level. ROI indicators suggest Qualys TotalCloud yields more than 50% improvement, with a cost and effort reduction of 15% to 40%. Users consistently engage with Qualys personnel to explore new features for additional benefits.

Pricing

Enterprise buyers find Qualys TotalCloud’s pricing competitive and aligned with market expectations, though many perceive it as expensive. Organizations integrating it as part of a subscription or leveraging existing licenses appreciate the cost-effectiveness and flexibility in licensing. While some view the pricing as higher compared to other tools, they find the comprehensive features, including integration and automation, justify the cost. Overall, larger enterprises typically find it affordable and worthwhile for the advanced capabilities offered.
  • "It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
  • "Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
  • "Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."

Popular Use Cases

Qualys TotalCloud is primarily utilized for managing cloud security and compliance across multi-cloud environments. It supports vulnerability management, compliance checking, posture management, and automated patching. Organizations use its features to identify and remediate cloud vulnerabilities, conduct scans, and manage SaaS applications. It provides comprehensive insight into compliance posture, enabling the prioritization of remediation tasks and offering a unified platform for CSPM and other security functions across AWS, Azure, and GCP.

Service and Support

Qualys TotalCloud's customer service is mostly commendable, with rapid response and in-depth resolutions noted. While some experience swift and effective support, others find delays problematic, notably for complex issues. Technical support is often praised for being available 24/7, offering proactive assistance, and receiving high ratings from users. However, response times vary, and availability concerns are noted, with quality depending on the expertise of individuals. Improvements could involve quicker responses and better streamlined communication channels.

Deployment

Qualys TotalCloud's initial deployment is generally straightforward with clear instructions, though some experience challenges related to permissions and configuration. For smaller teams or those with adequate admin rights, the process is smoother. Implementation times range from a few days to several months depending on complexity and resources. Many highlight the ease of use, especially due to its user-friendly interface, while others need assistance or third-party expertise. Maintenance varies based on setup and infrastructure needs.

Scalability

Qualys TotalCloud effectively handles scaling for businesses of various sizes, from small teams to large enterprises. Users frequently rate its scalability high, often around nine or ten out of ten, highlighting its ability to manage increasing accounts, users, and environments efficiently. Organizations across multiple locations and complex infrastructures rely on its robust back-end infrastructure, ensuring smooth operations even as they expand. Qualys TotalCloud is recognized for its adaptability and reliable scaling capabilities.

Stability

Qualys TotalCloud is consistently praised for its exceptional stability, frequently rated between eight and ten out of ten. Users consistently report no significant issues, noting it rarely crashes or lags, and offers reliable performance with minimal downtime. Notifications for maintenance are provided ahead of time, ensuring smooth operations. The tool is highly regarded for reliability, maintaining operability even with occasional internet disruptions, making it a dependable choice for cloud stability.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Qualys TotalCloud Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business8
Midsize Enterprise2
Large Enterprise22
By reviewers
By visitors reading reviews
Company SizeCount
Small Business103
Midsize Enterprise50
Large Enterprise202
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
11%
Government
9%
Insurance Company
5%
Healthcare Company
5%
Transportation Company
4%
Media Company
4%
Comms Service Provider
4%
Performing Arts
3%
University
3%
Educational Organization
3%
Logistics Company
3%
Retailer
3%
Energy/Utilities Company
3%
Real Estate/Law Firm
2%
Wholesaler/Distributor
2%
Consumer Goods Company
2%
Outsourcing Company
1%
Recreational Facilities/Services Company
1%
Marketing Services Firm
1%
Non Profit
1%
Construction Company
1%
Renewables & Environment Company
1%
Hospitality Company
1%

Compare Qualys TotalCloud with alternative products

Go!

Learn more about Qualys TotalCloud

Features and capabilities of Qualys TotalCloud include, but are not limited to: 

Discover: Complete visibility and insights into cyber-risk exposure across multi-cloud. Continuously discover and monitor all your workloads across a multi-cloud environment for a 360-degree view of your cloud footprint. Identify known and previously unknown internet-facing assets for 100% visibility and tracking of risks.

Assess: Comprehensive cloud-native assessments with FlexScanTM. Extensive scanning capabilities with Qualys FlexScan, including no-touch, agentless, API- and snapshot-based scanning, along with agent- and network-based scanning for in-depth assessment. Use these multiple scanning methods to scan a workload to get a unified and comprehensive view of vulnerabilities and misconfigurations.

Prioritize: Unified security view to prioritize cloud risk with TruRiskTM. Experience a unified risk-based view of cloud security with insights across workloads, services, and resources. Qualys TruRisk quantifies security risk by workload criticality and vulnerabilities; it correlates with ransomware, malware, and exploitation threat intelligence to prioritize, trace, and reduce risk.

Defend: Real-time protection against evolving and unknown threats with InstaProtectTM. Qualys enables continuous monitoring of all cloud assets to ensure they are protected against threats and attacks at runtime. Qualys keeps your cloud runtime safe by detecting known and unknown threats across the entire kill chain in near real-time across a multi-cloud environment.

Remediate: Fast remediation with QFlow – no code, drag-and-drop workflows. The integration of QFlow technology into Qualys TotalCloud saves security and DevOps teams valuable time and resources. Automation and no-code, drag-and-drop workflows help simplify the time-consuming operational tasks of assessing vulnerabilities on ephemeral cloud assets, alerting on high-priority threats, remediating misconfigurations, and quarantining high-risk assets.

Qualys TotalCloud was previously known as Qualys TotalCloud with FlexScan.

Related questions

  • 32
When evaluating Cloud-Native Application Protection Platforms (CNAPP), what aspect do you think is the most important to look for?
  • 41
Why is a CNAPP (Cloud-Native Application Protection Platform) important?
  • 36
What CNAPP solution do you recommend for a hybrid cloud?
  • 53
Why are Cloud-Native Application Protection Platforms (CNAPP) tools important for companies?
  • 44
When evaluating Cloud-Native Application Protection Platforms (CNAPP) solutions, what aspect do you think is the most important to look for?
  • 178
Why is Cloud-Native Application Protection Platforms (CNAPP) important for companies?
  • 20
What Cloud-Native Application Protection Platform do you recommend?

Product Categories

Product Categories
Cloud-Native Application Protection Platforms (CNAPP)
Vulnerability Management
Container Security
Cloud Workload Protection Platforms (CWPP)
Cloud Security Posture Management (CSPM)
SaaS Security Posture Management (SSPM)

Popular Comparisons

Popular Comparisons
Wiz vs Qualys TotalCloud Logo
Wiz vs Qualys TotalCloud
Datadog vs Qualys TotalCloud Logo
Datadog vs Qualys TotalCloud
Snyk vs Qualys TotalCloud Logo
Snyk vs Qualys TotalCloud
Microsoft Defender for Cloud vs Qualys TotalCloud Logo
Microsoft Defender for Cloud vs Qualys TotalCloud
Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud Logo
Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud
Qualys VMDR vs Qualys TotalCloud Logo
Qualys VMDR vs Qualys TotalCloud
Varonis Platform vs Qualys TotalCloud Logo
Varonis Platform vs Qualys TotalCloud
AWS GuardDuty vs Qualys TotalCloud Logo
AWS GuardDuty vs Qualys TotalCloud
AWS Security Hub vs Qualys TotalCloud Logo
AWS Security Hub vs Qualys TotalCloud
JFrog Xray vs Qualys TotalCloud Logo
JFrog Xray vs Qualys TotalCloud
Orca Security vs Qualys TotalCloud Logo
Orca Security vs Qualys TotalCloud
Claroty Platform vs Qualys TotalCloud Logo
Claroty Platform vs Qualys TotalCloud
Check Point CloudGuard CNAPP vs Qualys TotalCloud Logo
Check Point CloudGuard CNAPP vs Qualys TotalCloud
Aqua Cloud Security Platform vs Qualys TotalCloud Logo
Aqua Cloud Security Platform vs Qualys TotalCloud
FortiCNAPP vs Qualys TotalCloud Logo
FortiCNAPP vs Qualys TotalCloud
See all alternatives
 
Qualys TotalCloud Reviews Summary
Author infoRatingReview Summary
Cyber Security Specialist at UBS Financial5.0We use Qualys TotalCloud for managing AWS, Azure, and Google Cloud, which helps us identify vulnerabilities and misconfigurations. While its asset management and reporting features are valuable, the initial onboarding process can be challenging for newcomers.
Security Manager at a consultancy with 10,001+ employees4.0We implemented Qualys TotalCloud to enhance control over publicly exposed assets, appreciating its dashboards and remediation features for improved compliance. Although the UI could better support query building, it provided significant cost savings and superior visibility over alternatives.
Senior Information Security Engineer at a consultancy with 10,001+ employees4.5We deploy Qualys TotalCloud for monitoring both on-premises containers and cloud applications, valuing its visibility into container vulnerabilities. We're working to consolidate various tools into Qualys for comprehensive risk assessment and centralized security management.
IT Manager at a consultancy with 10,001+ employees5.0We manage security compliance across Azure, GCP, and AWS using Qualys TotalCloud, which has boosted our compliance rate from 60% to 90%. While valuable, some features like Cloud Detection and Response need further development for full functionality.
Project Lead at Persistent Systems4.5We use Qualys TotalCloud for real-time security assessments of our cloud environment. Its AI-powered features facilitate vulnerability management and asset categorization. Improvements are needed in load speeds and vulnerability detection, though we've seen a 15-20% effort reduction.
Senior Technical Program /Product Manager at a transportation company with 10,001+ employees3.5We use Qualys VMDR and TotalCloud for vulnerability management across on-prem and cloud systems. It's effective for detection and asset monitoring, though container scanning needs maturity. Setup was smooth, support decent, and overall, I'd rate it a seven.
Senior Security Consultant at CyberNxt Solutions LLP5.0I find Qualys TotalCloud helpful for auditing, offering valuable API scanning when cloud agents can't be deployed. While it's nearly perfect, enhanced dashboard customization and on-prem asset inclusion would be beneficial. Compared to WIZ, its data presentation is superior.
Senior Security Consultant at CyberNxt Solutions LLP4.5I use Qualys TotalCloud for detecting and remediating misconfigurations and vulnerabilities in our cloud environment, benefiting from on-demand scans. Integration with SIEM, SOAR, and ITSM needs improvement, but it saves us considerable time and effort.