AWS Security Hub vs VMware Aria Automation comparison

Amazon Web Services (AWS) and Broadcom are both solutions in the Cloud Security Posture Management (CSPM) category. Amazon Web Services (AWS) is ranked #11 with an average rating of 7.7, while Broadcom is ranked #20 with an average rating of 8.2. Amazon Web Services (AWS) holds a 2.6% mindshare in CSPM, compared to Broadcom’s 1.0% mindshare. Additionally, 89% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 94% of Broadcom users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 8, 2026

VMware Aria Automation and AWS Security Hub both compete in the realm of cloud automation and security management, respectively. VMware Aria Automation may have the upper hand due to its comprehensive orchestration framework and flexibility in deployment across various environments.

Features: VMware Aria Automation provides an orchestration and automation framework with robust third-party integration, detailed analytics, and support for multi-cloud deployment. AWS Security Hub, meanwhile, offers seamless integration with AWS services and external security tools, providing a centralized security dashboard with real-time alerts and compliance monitoring.

Room for Improvement: VMware Aria Automation could benefit from a simplified configuration process, better integration with non-VMware environments like Azure and Google Cloud, and improved container support. AWS Security Hub might enhance its real-time scanning capabilities, improve cross-platform cloud integration, and offer a more intuitive interface with customizable dashboards and alert systems.

Ease of Deployment and Customer Service: VMware Aria Automation is widely used for on-premises and hybrid cloud environments with strong technical support but complex setup. AWS Security Hub is preferred for public and private cloud deployments due to AWS’s robust integration, though the quality of user support varies and complex issues often require escalation.

Pricing and ROI: VMware Aria Automation is considered expensive but justified by its extensive capabilities and time-saving automation features, promising significant ROI. AWS Security Hub follows a pay-as-you-go pricing model, making it affordable with reduced upfront costs, delivering value for organizations focused on AWS environments, highlighting operational efficiency and scalability improvements.

To learn more, read our detailed AWS Security Hub vs. VMware Aria Automation Report (Updated: April 2026).

Buyer's Guide

AWS Security Hub vs. VMware Aria Automation

April 2026

Download the complete report

Helped 900,747 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of June 2026, in the Cloud Security Posture Management (CSPM) category, the mindshare of Qualys TotalCloud is 1.6%, up from 1.2% compared to the previous year. The mindshare of AWS Security Hub is 2.6%, down from 4.2% compared to the previous year. The mindshare of VMware Aria Automation is 1.0%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM) Mindshare Distribution
Product	Mindshare (%)
Qualys TotalCloud	1.6%
AWS Security Hub	2.6%
VMware Aria Automation	1.0%
Other	94.8%

Cloud Security Posture Management (CSPM)

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

Karthik Ekambaram

Director at Scybers

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Read full review

VasilisGiannitsiotis

Senior IT at ITSolutions

Automation has streamlined complex financial workflows but still needs more intuitive orchestration

Something to improve in VMware Aria Automation would be related to VCF 9, as I do not know what it is trying to bring because they exposed it as the solution of everything. So VCF 9 will bring VCF Automation and VCF Operations, the new product line of VMware. I have not seen what this brings or what else it includes. Maybe in the area of vRealize Orchestrator, this would be beneficial because VRO can do everything. Perhaps a more user-friendly way to use that tool would be helpful because the possibilities there are endless. I am looking for more user-friendly navigation in VMware Aria Automation.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"TotalCloud has been excellent in providing us with immediate access to all the products and features we need, such as CSPM, TruRisk Insights, and compliance reports, including CIS and HIPAA."

"The dashboards are particularly valuable as they offer a comprehensive view of the environment, highlighting any misconfigurations."

"Vulnerability and threat detection and assessment of the criticality of the vulnerabilities exposed are most valuable."

"The most valuable feature is extensibility."

"Qualys TotalCloud provides unified vulnerability and threat assessment for IaaS and SaaS and a single prioritized view of risk, which helps reduce my workload by not having to combine multiple sources."

"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."

"By integrating TotalCloud, we have significantly reduced vulnerabilities in our deployment pipeline."

"One of Qualys' best features is its categorization, which allows us to see the types of assets, their security postures, and the AI-powered version of the tool."

More Qualys TotalCloud pros

"Cloudposse is a valuable feature as it guarantees my security."

"One of the most effective features of AWS Security Hub is the easy access to a dashboard with a ready-to-use security score."

"The best feature of AWS Security Hub is that you can get compliance or your cloud's current security posture."

"If someone asks your team how vulnerable or compliant you are with your infrastructure, you can show findings from AWS Security Hub that demonstrate a ninety-plus percentage compliance rate."

"Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup."

"The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud."

"The most valuable feature of AWS Security Hub is the ability to track when monitoring is not enabled on any of my resources."

"I like that AWS Security Hub currently has several good features, around four or five. The technical support for AWS Security Hub is also responsive."

More AWS Security Hub pros

"vRA provides that single pane of glass for our cloud tenants to deploy, monitor, access, and manage their VMs/guest operating systems."

"The product is really excellent, VMware provides a complete ecosystem, and it covers multi-cloud, which is where the market is going."

"The most valuable feature is the way that it plugs into our monitoring systems, and Infoblox and Puppet."

"We can take a template, spin it up, revise it, save it back off, and be able to have that for other departments, so we can deploy things very quickly and easily instead of manually building systems that would take several hours or a day."

"The solution is user-friendly and intuitive."

"The most valuable feature is the ability to see both compliance and vulnerabilities in a dashboard view."

"We also use it to pre-install the applications that the people selected when they ordered the machine, so they get a fully functional machine."

"The solution’s automated processes have reduced infrastructure provisioning time, taking the time down to about an hour whereas it could take days if it was done manually, and this time reduction has also reduced application provisioning time and time to market for our apps."

More VMware Aria Automation pros

Cons

"The response part of the Cloud Detection and Response (CDR) module can be improved."

"Qualys's ticketing system can be confusing when assigning tasks to individuals, and support could be improved by offering instant call solutions with engineers in addition to ticket replies."

"From a downside perspective, the UI is not user-friendly and feels dated compared to other tools like Prisma Cloud."

"An area for improvement would be to focus on risks related to AI, such as large language models and potential data leakage."

"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."

"The patching process with Qualys Patch Management, which is part of TotalCloud, does not cover installing certain prerequisites on the servers or workstations. This shortcoming means we must rely on SCCM when any service stack updates or additional prerequisites are needed."

"Overall, we are satisfied with it. However, the response part of the Cloud Detection and Response (CDR) module can be improved. It is not yet in place according to requirements; it is not completely available even though the module has been released."

"Qualys TotalCloud has the potential to improve by integrating a hybrid platform for comprehensive management of both on-premises and cloud infrastructures."

More Qualys TotalCloud cons

"The telemetry doesn't always go into the control center. When you have multiple instances running in AWS, you need a control tower to take feeds from Security Hub and analyze your results. Sometimes exemptions aren't passed between the control tower and Security Hub. The configuration gets mixed up or you don't get the desired results."

"The solution will only give you insight if you have configure rule enabled. It should work more like Prisma Cloud and Dome9 which have a better approach."

"Adding SIEM features would be beneficial because of the limited customization of AWS Security Hub."

"AWS Security Hub should improve the time it takes to update. It takes a long period of time when updating. It can take 24 hours sometimes to update. Additionally, when integrating this solution with more security tools, takes time."

"Many findings are too generic or irrelevant to the environment, which can lead to false positives."

"I would like a more fine-grained capability for creating custom rules and a more user-friendly experience programmatically in writing queries and configuring custom security rules, making it quicker and easier."

"The solution is not wholly self-sufficient."

"AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS."

More AWS Security Hub cons

"It's a good product. It's very extensible. It is fairly complex to set up, and it's fairly closely tied to VMware's infrastructure, so there's a lack of portability to public clouds and a lack of ability to manage infrastructure as code natively."

"I don't find it to be user-friendly or intuitive because, in my case, when I have to deploy SAP systems, I need to jump between the vRA, the vRO, and the actual vCenter itself. I need to go back and forth to do different things... I wish they could make it just one application, just vRA, that does all that. There might be a way to do it but I haven't figured out how to do it yet."

"I give it a six out of 10 because we still haven't met what we intended it for."

"Technical support could be improved. I definitely feel that the product is accelerating faster than the support engineers are able to keep up with the knowledge needed to know what's going on. The developers maintaining vRealize Automation are doing a great job improving it, but VMware is not doing a great job of training the people who we call to get support for it."

"In terms of additional features, I would like it to be able to poll my vCenter infrastructure more rapidly and adapt to changes quickly. It should alert me and let me know when there are broken components, as a result of underlying infrastructure changes. It needs to be more stringent."

"There are a lot of improvements required with regards to vRealize Automation."

"Broadcom has acquired the tool, which could lower its pricing. Many customers are moving away from VMware infrastructure towards enterprise systems like Azure or AWS. This shift could be due to two main reasons: pricing and uncertainty about the future, especially regarding how Broadcom will handle licenses and strategy."

"It has a learning curve."

More VMware Aria Automation cons

Pricing and Cost Advice

"The cost is high, but it meets our organizational needs."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."

"TotalCloud's price is about right where I would expect it to be."

"Qualys TotalCloud offers cost-effective licensing flexibility."

"Qualys TotalCloud is expensive."

"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."

More Qualys TotalCloud pricing and cost advice

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"AWS Security Hub's pricing is pretty reasonable."

"The price of AWS Security Hub is average compared to other solutions."

"The price of the solution is not very competitive but it is reasonable."

"Security Hub is not an expensive solution."

"There are multiple subscription models, like yearly, monthly, and packaged."

"The pricing is fine. It is not an expensive tool."

"We have seen significant ROI. We used to have physical servers, it took 90 days to get a server, order it, buy it, and get it in. We have it down to 10 minutes, building a server with virtualization, and now that's too slow. So, we let the customer do it at their speed. Therefore, it is pretty much up in a couple of minutes and they have a server."

"We do plan to see ROI with any new implementation of new technologies being implemented within our environment."

"I would rate the pricing a ten out of ten, with ten being very expensive."

"The solution is free of cost."

"There is confusion between licensing levels. There are three different licensed versions of vRealize Automation, and there are different things which can happen in each of them."

"The pricing for this solution is roughly 20% lower than the competitive products in the market."

"Better pricing is always handy, but I feel it's at the right price point."

"SaltStack is an open-source product."

More VMware Aria Automation pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

900,747 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at a comms service provider with 10,001+ employees

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Manufacturing Company

18%

Financial Services Firm

14%

Construction Company

Comms Service Provider

Financial Services Firm

13%

Manufacturing Company

10%

Computer Software Company

Comms Service Provider

Financial Services Firm

11%

Manufacturing Company

Computer Software Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	3
Large Enterprise	29

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	5
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	33
Midsize Enterprise	24
Large Enterprise	131

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

See all answers

What needs improvement with Qualys TotalCloud?

Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...

See all answers

What is your primary use case for Qualys TotalCloud?

Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...

See all answers

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel...

See all answers

What needs improvement with AWS Security Hub?

I do not see any areas for improvement in AWS Security Hub itself, but the cost factor is something that is the main ...

See all answers

What is your primary use case for AWS Security Hub?

AWS Security Hub is something I have used daily as it is a part of my job for cloud security purposes. If you are dea...

See all answers

What's the difference between VMware vRA (automation) and vROps (operations)?

vROP is a virtualization management solution from VMWare. It is efficient and easy to manage. You can find anything y...

See all answers

Is there any way to try VMware Aria Automation for free?

When it comes to VMware Aria Automation, you have three choices for free runs: Hands-on Lab (HOL) Advanced lab A fre...

See all answers

Which sectors can benefit the most from VMware Aria Automation?

I was looking at VMware Aria Automation case studies recently and I got the impression that three main kinds of compa...

See all answers

Comparisons

Wiz vs Qualys TotalCloud

Compared 12% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

JupiterOne vs Qualys TotalCloud

Compared 5% of the time

Varonis Platform vs Qualys TotalCloud

Compared 3% of the time

More Qualys TotalCloud Competitors

Microsoft Sentinel vs AWS Security Hub

Compared 33% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 6% of the time

Wiz vs AWS Security Hub

Compared 4% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 4% of the time

JupiterOne vs AWS Security Hub

Compared 2% of the time

More AWS Security Hub Competitors

Red Hat Ansible Automation Platform vs VMware Aria Automation

Compared 7% of the time

VMware Aria Operations vs VMware Aria Automation

Compared 4% of the time

Morpheus vs VMware Aria Automation

Compared 4% of the time

HashiCorp Terraform vs VMware Aria Automation

Compared 3% of the time

Microsoft Configuration Manager vs VMware Aria Automation

Compared 3% of the time

More VMware Aria Automation Competitors

Product Reports

Buyer's Guide

Qualys TotalCloud

June 2026

Download Qualys TotalCloud product report

Buyer's Guide

AWS Security Hub

June 2026

Download AWS Security Hub product report

Buyer's Guide

VMware Aria Automation

May 2026

Download VMware Aria Automation product report

Also Known As

Qualys TotalCloud with FlexScan

SQRRL

VMware vRealize Automation, vRA, VMware DynamicOps Cloud Suite, SaltStack

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

AWS Security Hub provides multi-account management and compliance checks alongside integrations with AWS services and third-party tools. It centralizes vulnerability tracking and risk prioritization, delivering real-time alerts for proactive security management.

AWS Security Hub enhances cloud security management through a centralized dashboard that monitors infrastructure resources and compliance scores, ensuring adherence to AWS standards. With integrations for vulnerability detection and security posture management, users can streamline security operations. While the platform offers notable benefits, areas for improvement include customization options for findings suppression and integration with multi-cloud environments.

What are the key features of AWS Security Hub?

Multi-Account Management: Seamlessly manage security across numerous accounts.
Compliance Checks: Stay aligned with standards such as PCI through automated reviews.
AWS Integrations: Connect effortlessly with AWS and third-party services to enhance security posture.
Real-Time Alerts: Quickly respond to potential threats with immediate notifications.
Risk Prioritization: Focus on critical vulnerabilities to enhance resource allocation.

What benefits should users expect from using AWS Security Hub?

Proactive Security: Early threat detection enables quicker mitigation strategies.
Cloud-Native Functionality: Utilize tools tailored for cloud environments.
Compliance Insights: Simplified compliance management provides transparency.
Ease of Use: Streamlined interface facilitates efficient security management.

Industries implementing AWS Security Hub leverage its capabilities for comprehensive security across multiple accounts and regions. Health, finance, and retail sectors benefit by automating compliance checks and monitoring security infrastructures. This service aids in identifying misconfigurations, tracking alerts, and ensuring infrastructure integrity during cyber incidents.

Amazon Web Services (AWS)

VMware Aria Automation is known for its automation capabilities, integrating with VMware and third-party tools to enhance workflow efficiency, save time, and manage resources effectively.

VMware Aria Automation offers a diverse set of features including a self-service portal and a streamlined user-friendly interface, which make it ideal for organizations aiming to automate virtual machine provisioning. The platform supports extensive automation capabilities across multi-cloud environments, featuring flexible blueprint designs and comprehensive integration with platforms like AWS, Azure, and ServiceNow. Though improvements are desired in areas like logging, template management, and vCenter integration, its robust framework facilitates IT infrastructure services, disaster recovery, and development operations. It is specifically beneficial for orchestrating workflows, automating routine tasks, and managing workloads efficiently in private and hybrid cloud environments.

What are the most important features of VMware Aria Automation?

Self-Service Portal: Empowers users with easy access to resources and tools needed for automation.
User-Friendly Interface: Simplifies navigation and usage for both technical and non-technical users.
Extensive Automation Capabilities: Streamlines VM deployment and processes across various platforms.
Integration with VMware and Third-Party Tools: Enhances workflow automation and extends functionality.
Flexible Blueprint Designs: Allows for customized and scalable deployment solutions.

What are the benefits and ROI users should consider?

Efficiency: Reduces manual workload, leading to time and cost savings.
Scalability: Supports dynamic growth and resource management.
Enhanced Workflow Automation: Improves process efficiency with comprehensive integrations.
Customizable Orchestration: Enables tailored solutions that meet specific requirements.
Resource Management: Efficiently utilizes resources, reducing waste and optimizing operations.

VMware Aria Automation is implemented across industries for automating the provisioning of virtual machines and managing cloud environments. It is used in sectors requiring efficient server deployment, network configurations, and seamless integration with tools such as AWS and Azure. It aids in reducing manual efforts, supporting IT infrastructure services, and enhancing disaster recovery protocols.

Broadcom

Sample Customers

Information Not Available

Edmunds, Frame.io, GoDaddy, Realtor.com

Rent-a-Center, Amway, Vistra Energy, Liberty Mutual

Buyer's Guide

AWS Security Hub vs. VMware Aria Automation

April 2026

Free Report: AWS Security Hub vs. VMware Aria Automation

Find out what your peers are saying about AWS Security Hub vs. VMware Aria Automation and other solutions. Updated: April 2026.

DOWNLOAD NOW

900,747 professionals have used our research since 2012.

See our AWS Security Hub vs. VMware Aria Automation report.

See our list of best Cloud Security Posture Management (CSPM) vendors.

We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.