Aikido Security vs Red Hat Advanced Cluster Security for Kubernetes comparison

Aikido Security vs. Red Hat Advanced Cluster Security for Kubernetes

Download the complete report

Helped 915,341 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of October 2026, in the Container Security category, the mindshare of Qualys TotalCloud is 1.8%, up from 1.1% compared to the previous year. The mindshare of Aikido Security is 1.3%, up from 0.4% compared to the previous year. The mindshare of Red Hat Advanced Cluster Security for Kubernetes is 1.4%, down from 2.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Mindshare Distribution
Product	Mindshare (%)
Qualys TotalCloud	1.8%
Aikido Security	1.3%
Red Hat Advanced Cluster Security for Kubernetes	1.4%
Other	95.5%

Container Security

Featured Reviews

reviewer2859021

Sr Security Engineer at a tech vendor with 5,001-10,000 employees

Risk-based triage has transformed container security and now prioritizes high-impact threats

The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.

Read full review

Tarunn Goswami

GEN AI Engineer at a educational organization with 51-200 employees

Security has shifted left and now catches vulnerabilities early in our development workflow

There are a few areas for improvement. The first is scan speed. For large repositories, initial scans can be slow. Incremental scanning helps, but full scans still take considerable time. The second thing is the false positive rate. While Auto-Triage is good, it is not perfect. Occasionally, genuine issues get filtered out and real false positives slip through. The third one is remediation guidance. Aikido Security tells you what is vulnerable, but sometimes the fix suggestions are generic. More specific, actionable remediation steps would save developer time. The fourth one is IDE integrations. It currently works best in CI/CD pipelines. A proper VS Code or JetBrains plugin for real-time scanning while coding would be a significant improvement. From a customer point of view, the following things could change. The first thing is documentation for custom rules. Aikido Security allows you to create custom scanning rules, but the documentation for this feature is surprisingly thin. I spent considerable time in community forums and with trial and error just to configure basic custom rules. Step-by-step guides with real-world examples would make this feature much more accessible. The second thing is better Slack and communication integrations. Currently, security alerts come through email and dashboard notifications, but our team lives in Slack. A more configurable Slack integration that sends contextual alerts directly to the relevant developer, not just a generic channel notification, would dramatically improve response time. The third one is historical trend reporting. While Aikido Security shows current vulnerability status well, generating historical reports showing security posture improvement over time is limited. For presenting security progress to management or stakeholders, better exportable trend reports would be very valuable.

Read full review

Daniel Stevens

Software Engineer at Galley

Offers easy management and container connection with HTTPS, but the support needs to improve

I have experience with the solution's setup in Rio de Janeiro, Brazil and our company has assisted in the development of a cluster in a research department, but we didn't start from scratch because we have IT professionals who have installed Kubernetes across 12 nodes of a cluster and a new environment can be created for a new platform. I also had another setup experience of Red Hat Advanced Cluster Security for Kubernetes in Portugal where I had to implement the solution in a cluster of 22 computer servers, which was completed with assistance from the IT department of the company. The initial setup process of the solution can be considered as difficult. The setup process involves using the permissions, subnets and range of IPs, which makes it complex. Deploying Red Hat Advanced Cluster Security for Kubernetes takes around eight to ten hours for new clusters. The solution's deployment can be divided into three parts. The first part involves OpenStack, where the cluster's resources need to be identified. The second part involves virtualizing assets and identifying other physical assets, for which OpenStack, Kubernetes, or OpenShift are used. The third part of the deployment involves dividing the networks into subnetworks and implementing automation to deploy the microservices using Helm. The number of professionals required for the solution's deployment depends upon the presence of automated scripts. Ideally, two or three professionals are required to set up Red Hat Advanced Cluster Security for Kubernetes.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The platform's unified view of the organization proves particularly valuable for leadership team meetings."

"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"

"Qualys TotalCloud has saved our time by giving us better asset visibility and risk-based prioritization, as it has reduced the time spent manually reviewing CVEs and deciding what to address first."

"Qualys TotalCloud helps you not just to identify misconfigurations, but you can actually also fix issues."

"Qualys TotalCloud has significantly improved our organization by automating our reporting processes, reducing the time spent on report creation from two hours to less than fifteen to twenty minutes."

"I appreciate TotalCloud's real-time protection and remediation features. The remediation options include automated one-click remedies and custom changes that help manage vulnerabilities efficiently."

"The most valuable feature is extensibility."

"I would definitely recommend it because it is easy to handle any cloud resources."

More Qualys TotalCloud pros

"My advice for others looking into using Aikido Security is that if the codebase and everything need to be audited and recorded in a single forum, and if they want a unified solution to scan both the code and the image, they can definitely use it."

"Since switching to Aikido Security, I have noticed a positive impact on my team's productivity with measurable results, as we now have measurements."

"Aikido Security offers the best features including being very easy to use, allowing even a normal tech person with some hands-on experience to use this tool and clearly get the results they want."

"Aikido Security has positively impacted my organization significantly because initially we were thinking it would take a month for us to achieve SOC 2 compliance again, and with Aikido Security, we were able to get all codebase vulnerability fixes within a week for all our 13 or 14 repositories that we had."

"Aikido Security saved me several hours each week by automating vulnerability scanning and security checks, reducing the need for manual review and helping me focus on more development."

"We were able to close 90% of issues with the help of Aikido Security tools, providing a return on investment."

"Aikido Security nests directly in our development workflow and it catches security issues before they reach production."

"My advice to others looking into using Aikido Security is to get it as soon as possible; right now, it is a very good tool for a very good price, and you will see a return on investment in less than six months."

More Aikido Security pros

"I am impressed with the tool's visibility."

"One of the most valuable features I found was the ability of this solution to map the network and show you the communication between your containers and your different nodes."

"Offers easy management with authentication and authorization features"

"It is easy to install and manage."

"I like virtualization and all those tools that come with OpenShift. I also like Advanced Cluster Management and the built-in security."

"The most beneficial security feature of the product revolves around the areas of vulnerability and configuration."

"The most valuable feature of the solution is its monitoring feature."

"The benefit of working with the solution is the fact that it's very straightforward...It is a perfectly stable product since the details are very accurate."

More Red Hat Advanced Cluster Security for Kubernetes pros

Cons

"I sometimes have difficulty detecting or uninstalling certain versions of applications, which I have to do manually."

"One thing that could be improved is the user experience and navigation."

"I chose a rating of nine out of ten because there is a complex interface that sometimes overwhelms new engineers."

"One of the things that could be improved is the alerts. Qualys is a fantastic tool, especially with the TruRisk feature, but one challenge that most leaders face involves alert fatigue."

"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."

"It is already perfect, but they can bring some newer dashboards and customization options for the dashboard. It would be great to be able to include on-prem assets on the dashboard."

"In TotalCloud, I would suggest improvements in policy checks to cater to various inventory types like VPCs, subnets, S3 buckets, or IAMs. There is a lack of data segregation according to criticality or inventory."

"Regarding technical support from Qualys, they respond, but the response time can be too long. Sometimes we need to wait weeks for solutions to simple questions."

More Qualys TotalCloud cons

"However, there was one minor issue that I faced. When I had a UUID for an object in the code, Aikido Security was considering it as a secret key, which it was not."

"Aikido Security can be improved by addressing the lags in the UI and ensuring that updates can be given very quickly and rapidly."

"I think Aikido Security could be improved by addressing its Jira integration, which I feel needs a bit of work."

"I think Aikido Security could improve by reducing some pricing model. Pricing is quite high for a normal user, and if they can make it a little less, it will be much better."

"There are a few areas for improvement. The first is scan speed; for large repositories, initial scans can be slow, and while incremental scanning helps, full scans still take considerable time."

"Regarding Aikido Security's AI accuracy and reliability of output, I think its AI capabilities are all right, but it can miss the point sometimes; it is good to have a fast and cheap overview, but I would not rely 100% on it."

"The accuracy of Aikido Security's output is still not very high, and there are a few features where they are still lacking behind regarding accuracy."

"I think Aikido Security could be improved with more detailed remediation guidance, such as additional beginner-friendly tutorials and enhanced customization for alerts and reporting."

"The support and specifications need to be up to date for the cluster technologies"

"I do see that some features associated with the IAST part are not included in the tool, making it an area where improvements are required."

"They're trying to convert it to the platform as a source. They are moving in the direction of Cloud Foundry so it can be easier for a developer to deploy it."

"Red Hat is somewhat expensive."

"The documentation about Red Hat Advanced Cluster Security available online is very limited... So it's very limited to the documentation."

"The initial setup is pretty complex. There's a learning curve, and its cost varies across different environments. It's difficult."

"The deprecation of APIs is a concern since the deprecation of APIs will cause issues for us every time we upgrade."

"The solution's price could be better."

More Red Hat Advanced Cluster Security for Kubernetes cons

Pricing and Cost Advice

"Qualys TotalCloud is expensive."

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."

"The cost is high, but it meets our organizational needs."

"Qualys TotalCloud offers cost-effective licensing flexibility."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

More Qualys TotalCloud pricing and cost advice

Information not available

"We purchase a yearly basis license for the solution."

"Red Hat offers two pricing options for their solution: a separate price, and a bundled price under the OpenShift Platform Plus."

"The price of Red Hat Advanced Cluster Security for Kubernetes is better than Palo Alto Prisma."

"It's a costly solution"

"The pricing model is moderate, meaning it is not very expensive."

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

915,341 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

16%

Outsourcing Company

12%

Manufacturing Company

11%

Financial Services Firm

10%

Comms Service Provider

13%

Outsourcing Company

11%

Manufacturing Company

11%

Financial Services Firm

27%

Outsourcing Company

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	6
Large Enterprise	35

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	5
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	2
Large Enterprise	4

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

What needs improvement with Qualys TotalCloud?

In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys...

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is regarding the cloud visibility that we were not having previously. Previous...

What needs improvement with Aikido Security?

One area I think Aikido Security could improve is the depth of their reporting and remediation guidance; sometimes, t...

What is your primary use case for Aikido Security?

My main use case for Aikido Security is to consolidate all our application security scanning into one platform, prima...

What advice do you have for others considering Aikido Security?

My advice for anyone considering Aikido Security is to proceed and try it as the onboarding process is straightforwar...

Microsoft Defender for Cloud vs Qualys TotalCloud

Ask a question

Earn 20 points

Comparisons

Wiz vs Qualys TotalCloud

Compared 11% of the time

Compared 7% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Orca Security vs Qualys TotalCloud

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Semgrep vs Aikido Security

Compared 7% of the time

Snyk vs Aikido Security

Compared 7% of the time

GitHub vs Aikido Security

Compared 6% of the time

SonarQube vs Aikido Security

Compared 6% of the time

GitHub Advanced Security vs Aikido Security

Compared 4% of the time

More Aikido Security Competitors

Tenable.io Container Security vs Red Hat Advanced Cluster Security for Kubernetes

Compared 12% of the time

Prisma Cloud by Palo Alto Networks vs Red Hat Advanced Cluster Security for Kubernetes

Compared 10% of the time

Aqua Cloud Security Platform vs Red Hat Advanced Cluster Security for Kubernetes

Compared 9% of the time

Tigera vs Red Hat Advanced Cluster Security for Kubernetes

Compared 5% of the time

Qualys Exposure Management vs Red Hat Advanced Cluster Security for Kubernetes

Compared 5% of the time

More Red Hat Advanced Cluster Security for Kubernetes Competitors

Product Reports

Qualys TotalCloud

Download Qualys TotalCloud product report

Download Aikido Security product report

Aikido Security

October 2026

Red Hat Advanced Cluster Security for Kubernetes

Download Red Hat Advanced Cluster Security for Kubernetes product report

Red Hat Advanced Cluster Security for Kubernetes report

Also Known As

Qualys TotalCloud with FlexScan

No data available

StackRox

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Aikido Security is the no-nonsense platform that empowers developers by centralizing code-to-cloud security issues and providing rapid guidance for fixing vulnerabilities.

With over 6,000 teams utilizing its features, Aikido Security prioritizes effective security management by consolidating 11 comprehensive scans into one platform. This approach translates complex vulnerabilities into understandable insights, targeting non-enterprise SaaS businesses with engineering teams of 10-500 developers. It focuses on delivering security management without excessive costs or complexity through a product-led growth model.

What are the standout features of Aikido Security?

SAST: Secures code as it is written.
DAST: Monitors surfaces, dynamically tests for vulnerabilities with OWASP ZAP.
IaC: Detects infrastructure vulnerabilities.
CSPM: Real-time detection of cloud infrastructure risks.
Container Scanning: Assesses container environments for risky packages.
Secrets Detection: Identifies exposed API keys, passwords.
Open Source Dependencies: Analyzes dependencies to avoid vulnerabilities.
Open Source License: Maps and exports SBOMs to manage license risks.
Malware Detection: Protects from supply chain attacks.
Runtime Protection: Secures apps with an embedded firewall.
Custom Scans: Integrates with existing tools like SonarQube.

Why should you consider Aikido Security?

Easy Adoption: Setup takes less than 3 minutes with clear UX.
Cost Efficiency: Offers a comprehensive 9-in-1 solution at competitive pricing.
Accurate Results: Best false positive reduction in the market.

In industries like software development and cloud services, Aikido Security is implemented to provide clear insights, enabling teams to focus on rapid product growth while maintaining robust security. Its product-led growth strategy, including a freemium offering, allows developers to experience benefits firsthand without initial investment.

Aikido Security

Red Hat Advanced Cluster Security for Kubernetes empowers organizations with robust capabilities in container security, vulnerability management, and workload transition, seamlessly integrated with OpenShift for optimal orchestration.

Red Hat Advanced Cluster Security for Kubernetes stands out with its comprehensive features like authentication, authorization, and API integration. Users appreciate resource sharing, segmentation, and virtualization capabilities, all facilitated by a user-friendly Cockpit web interface and command administration. The system's strengths are visible through effective security protocols, such as secure UPI images, container networking, and built-in security features. Its advanced cluster management and monitoring ensure efficiency, while focus on vulnerability and configuration management addresses key concerns. However, improvements in documentation, web UI, and API flexibility are needed, with challenges in command line configuration and deployment also noted. Stability issues due to API deprecation and the need for enhanced zero trust, access control, and database connectivity present room for growth.

What are the key features of Red Hat Advanced Cluster Security for Kubernetes?

API Integration: Seamless integration capabilities with APIs for enhanced automation.
Resource Sharing: Effective resource distribution within clustered environments.
Secure UPI Images: Encrypted images for heightened security and safety.
Container Networking: Modern networking protocols for efficient container communication.
Communication Mapping: Detailed network traffic visualization and analysis.

What benefits and ROI can users expect from Red Hat Advanced Cluster Security for Kubernetes?

Vulnerability Management: In-depth identification and mitigation of security threats.
Compliance Management: Ensures adherence to regulatory standards and practices.
Integration with OpenShift: Streamlined orchestration for enhanced deployment flexibility.
Threat Detection: Advanced capabilities for monitoring and responding to potential security breaches.

Red Hat Advanced Cluster Security for Kubernetes is implemented across various industries to facilitate the transition from traditional monolithic applications to dynamic containerized environments. Organizations in sectors such as finance, healthcare, and technology benefit from its robust segmentation, monitoring abilities, and behavior analysis. With the integration of Istio and GRPC, industries achieve secure microservices communication and improved visibility for comprehensive threat monitoring.

Red Hat

Sample Customers

Information Not Available

FinTech GoCardless ZIP CertifID HealthTech Dental Intelligence PE & Group Techstars Cronos Group Security Tech Human Security Tines HR Tech Simployer Recruitee Agency November Five Other Lighthouse (Hospitality Tech) Smokeball (LegalTech) Runna (B2C Tech) GEA Group (Manufacturing) Community fibre (Telecom) n8n (Software Development)

City National Bank, U.S. Department of Homeland Security

Aikido Security vs. Red Hat Advanced Cluster Security for Kubernetes