No more typing reviews! Try our Samantha, our new voice AI agent.

Amazon Inspector vs Vulcan Cyber comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
10th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
46
Ranking in other categories
Container Security (11th), Cloud Workload Protection Platforms (CWPP) (9th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
Amazon Inspector
Ranking in Vulnerability Management
27th
Average Rating
8.2
Reviews Sentiment
6.3
Number of Reviews
9
Ranking in other categories
IT Vendor Risk Management (6th)
Vulcan Cyber
Ranking in Vulnerability Management
28th
Average Rating
7.4
Reviews Sentiment
7.1
Number of Reviews
12
Ranking in other categories
Risk-Based Vulnerability Management (10th), Cloud Security Remediation (3rd)
 

Mindshare comparison

As of October 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.2%, up from 1.0% compared to the previous year. The mindshare of Amazon Inspector is 1.0%, down from 2.5% compared to the previous year. The mindshare of Vulcan Cyber is 0.9%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.2%
Amazon Inspector1.0%
Vulcan Cyber0.9%
Other96.9%
Vulnerability Management
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Rakesh-Gogane - PeerSpot reviewer
Principal Security Architect at Nagarro
Has supported cloud-specific threat scanning but lacks coverage across hybrid and third-party workloads
They might launch support for third-party environments in the next version regarding the best features in Amazon Inspector from my perspective. The false positive rate of Amazon Inspector is a little high, and it is not covering all different applications and scanning. It mostly covers specific native applications, and I think as per my understanding, it doesn't cover third-party environments or hybrid environments.
Vikram Chakravarthy - PeerSpot reviewer
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
Risk-based workflows have transformed how our teams prioritize and track critical vulnerabilities
One important area for improvement could be reporting flexibility and dashboard customization, as this would need to align with specific organizational requirements. I believe it could be better. Additionally, UI simplification and more customization around workflows and reporting would further enhance the analyst experience. Improvements in executive reporting, more customizable dashboards, and deeper workflow flexibility would enhance operational usability further. Vulcan Cyber handles scalability well in our organization. It maintains stability for visibility and remediation tracking, avoiding the need for additional storage, as it is cloud-based. It scales well in our environment, even as vulnerability data and assets grow significantly.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Qualys TotalCloud's most valuable feature is its agent versatility."
"Qualys TotalCloud has helped us view our risk structure, vulnerabilities, and security posture."
"One of Qualys' best features is its categorization, which allows us to see the types of assets, their security postures, and the AI-powered version of the tool."
"The best feature would be the ability to create policies. It is easy to control and update policies as required."
"TotalCloud offers a comprehensive suite of features, including EDR, XDR, and TrueRisk, providing a centralized platform for managing vulnerabilities and security risks."
"I would definitely recommend Qualys TotalCloud to other customers."
"The agent and agentless scanning in TotalCloud, particularly the FlexScan method, is incredibly valuable. With traditional scanning approaches, we had to give IP ranges and whitelist IPs. All that is now simplified. FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans."
"Qualys TotalCloud provides a single, prioritized view of risk, reducing the workload associated with consolidating multiple sources for risk prioritization."
"It operates continuously, so as soon as resources are created, it scans them for vulnerabilities."
"The most valuable feature of Amazon Inspector is the categorization of findings, which filters vulnerabilities by instance, container image, container repository, and Lambda function."
"The integration of Amazon Inspector with other AWS services has enhanced our security. Security Hub is a major asset because it allows us to centralize data from various AWS services. We can integrate third-party tools as well. It is just a single-click option."
"The vulnerability discovery is valuable, and they also rank those vulnerabilities for you. So, you could rapidly attack some of the higher, severe vulnerabilities as they pop up, if they do pop up."
"The assessment reports provided by Amazon Inspector have helped me in identifying security vulnerabilities in my cloud applications by giving us a nicely designed dashboard that provides all the security information we need to work on remediation."
"The findings dashboards are neat and easy to understand, offering clear demarcations for different types of findings and detailed insights into specific vulnerabilities and their associated instances. It is not a place where everything is dumped together. It offers an easy-to-understand layout."
"My experience with AWS technical support is very good, I didn't face any specific challenges, and even the documentation of AWS is good for both Microsoft, which is Azure, and AWS."
"It is scanning the whole repository for any sort of vulnerabilities, so it allows us to be more confident in our DevSecOps and not put a lot of folks or attention to it."
"It is very good when it comes to ingesting information from different sources and then displaying this information in an easy-to-use platform."
"I find the ability to consolidate information from multiple vulnerability scanners into a single source valuable."
"Now that the solution is onboarded, we are saving a lot of time. We're saving roughly four to ten hours a week."
"Vulcan Cyber offers a single pane of glass for centralizing our security data."
"Vulcan Cyber helps us prioritize the vulnerabilities that are really exploitable and our point of interest for the industry based on the threat intelligence that we get."
"There is a lot of flexibility in exporting, making it a really good feature. The exporting flexibility based on application type is commendable and provides significant value."
"Vulcan Cyber has had the biggest positive impact on my organization through the improvement in prioritization and remediation efficiency."
"They recently upgraded their UI, which is great. It is user-friendly."
 

Cons

"Two areas for improvement in Qualys TotalCloud are the speed of the public cloud platform and vulnerability detection."
"The main area needing improvement is integration. Although the team is strengthening TotalCloud, integration can be enhanced with SIEM, SOAR, ITSM, and other sources."
"The patching process with Qualys Patch Management, which is part of TotalCloud, does not cover installing certain prerequisites on the servers or workstations. This shortcoming means we must rely on SCCM when any service stack updates or additional prerequisites are needed."
"Although TotalCloud is a helpful tool, some of its advanced features are still under development."
"I think Qualys TotalCloud needs to improve its handling of zero-day vulnerabilities and supply chain management because modern ransomware attacks not only target prime critical infrastructures but also the supply chain system."
"The vulnerability part is good, but the policy compliance module needs improvement because it involves a lot of manual work. Specifically, the remediation part of the controls requires enhancements."
"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."
"I sometimes have difficulty detecting or uninstalling certain versions of applications, which I have to do manually."
"There isn't too much to improve right now. Scanning on demand or as a part of the pipeline versus a post pipeline solution would be good, but it is not a deal breaker by any means."
"The false positive rate of Amazon Inspector is a little high, and it is not covering all different applications and scanning."
"The other point is that the reporting features of Inspector need improvement. For example, I am in an organization with millions of CVEs, and getting an overview of all this is challenging."
"One area for improvement in Amazon Inspector is the automation aspect."
"One major area for improvement is remediation. My team works on remediating findings over time, likely using available patches. However, easier integration with Amazon's patching services would be very helpful."
"There is room for improvement in the scanning capabilities. I'd like to see broader coverage in terms of the vulnerabilities detected."
"It has automated vulnerability assessment, yet I seek more flexibility in defining custom vulnerability checks tailored to my needs, which is more difficult."
"The most challenging aspect I faced with Amazon Inspector during integration was automating the remediation process."
"The performance is bad. The query and the UI are always slow, and it's quite frustrating. Vulcan is trying to solve this with a newer design. The dashboard is also crowded. It pulls in all this raw information that you need to filter. Vulcan has filtering capabilities, but they're hard to manage. The labels aren't very clear, so you need to do things by trial and error. It's not as easy as other tools we've been using."
"I would describe Vulcan Cyber's user interface as adequate, but there are gaps that need addressing."
"We wish we had more insights into how they weigh the risks associated with the threat intel."
"Mainly, what I would like from them is more maintenance of the different connectors they have in the platform."
"The fact that we cannot use it for our reporting leads me to rate it three out of ten."
"It was a rough year in terms of setup. I had to set it up and onboard it. It was a significant effort from my side at least."
"Their support is good, but there are some flaws as well. We often encounter some issues that are not applicable to Vulcan Cyber as a whole; they apply only to us because we have customized requirements. In such cases, when we reach out with specific data and issues to their support team, they sometimes come back and say that the issues have been resolved. However, when we test to see if they have been remediated, they are still there."
"If there was a way for me to connect to the vendor directly from the application, it would be helpful."
 

Pricing and Cost Advice

"TotalCloud's price is about right where I would expect it to be."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"The cost is high, but it meets our organizational needs."
"Qualys TotalCloud is expensive."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"The lowest cost would be around $10 for a few small accounts, however, for thousands of accounts, it could be around $5000 to $6000 dollars per month."
"The pricing is very transparent and clear."
"It's priced according to market standards for its services."
"It is scaled as you go. There are probably a certain number of scans per month, and there are tiers. If you're under a certain tier, it is free. The second level is pennies, and then all the way up to like a million. So, it has a tiered pricing program. They're pretty good with your initial scanning, and there is room to scale based on being affordable, but it is fairly cheap. There are no additional costs. They pretty much think about it as a pay-per-scan type model."
"Its pricing is quite fair compared to what is out there in the market, especially compared to the tool from Microsoft. It is a SaaS platform that has an annual cost, so it is something that is already used by many companies. It is quite affordable."
"Our leadership knows better about the pricing. As per my knowledge, which might not be accurate, its price can come down."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
16%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Financial Services Firm
13%
Comms Service Provider
9%
Computer Software Company
7%
Construction Company
6%
Computer Software Company
16%
Manufacturing Company
8%
Construction Company
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise6
Large Enterprise35
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise6
By reviewers
Company SizeCount
Small Business1
Large Enterprise11
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is regarding the cloud visibility that we were not having previously. Previous...
What is your experience regarding pricing and costs for Amazon Inspector?
I am not honestly sure about the pricing side of Amazon Inspector, but that is taken care of by a separate team. I be...
What needs improvement with Amazon Inspector?
They might launch support for third-party environments in the next version regarding the best features in Amazon Insp...
What is your primary use case for Amazon Inspector?
I mostly use Amazon Inspector for vulnerability scanning on AWS native applications. For hybrid applications, we have...
What is your experience regarding pricing and costs for Vulcan Cyber?
My experience with pricing, setup cost, and licensing for Vulcan Cyber indicates that pricing typically depends on th...
What needs improvement with Vulcan Cyber?
One important area for improvement could be reporting flexibility and dashboard customization, as this would need to ...
What is your primary use case for Vulcan Cyber?
My main use case for Vulcan Cyber involves vulnerability prioritization and tracking remediation, including exposure ...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
No data available
 

Interactive Demo

 

Overview

 

Sample Customers

Information Not Available
betterment, caplinked, flatiron, university of nutri dame
Stitch Fix, Mandiant, Wealthsimple, Entrust, Anaplan, Deloitte, Origami Risk, Verana Health
Find out what your peers are saying about Amazon Inspector vs. Vulcan Cyber and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.