No more typing reviews! Try our Samantha, our new voice AI agent.

BMC Helix Cloud Security vs VMware Aria Automation comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

BMC Helix Cloud Security
Ranking in Cloud Security Posture Management (CSPM)
41st
Average Rating
8.0
Reviews Sentiment
7.5
Number of Reviews
5
Ranking in other categories
Cloud Workload Protection Platforms (CWPP) (24th)
VMware Aria Automation
Ranking in Cloud Security Posture Management (CSPM)
20th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
172
Ranking in other categories
Cloud Management (3rd), Configuration Management (8th), Network Automation (6th), Cloud Infrastructure Entitlement Management (CIEM) (5th)
 

Mindshare comparison

As of May 2026, in the Cloud Security Posture Management (CSPM) category, the mindshare of BMC Helix Cloud Security is 0.7%, up from 0.2% compared to the previous year. The mindshare of VMware Aria Automation is 0.8%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Security Posture Management (CSPM) Mindshare Distribution
ProductMindshare (%)
VMware Aria Automation0.8%
BMC Helix Cloud Security0.7%
Other98.5%
Cloud Security Posture Management (CSPM)
 

Featured Reviews

DG
Portfolio Manager/ Helix Administrator at Frontier Communications
A highly scalable and straightforward solution with a knowledgeable support team
We work on a third-party shared environment. It wouldn’t have been feasible for a smaller company. My company was actually the first one to do it. Just like any cloud security, it pays to do your research and have complimentary security involved. The product can’t be the be-all and end-all tool for your security. Overall, I rate the solution a nine out of ten.
VasilisGiannitsiotis - PeerSpot reviewer
Senior IT at ITSolutions
Automation has streamlined complex financial workflows but still needs more intuitive orchestration
Something to improve in VMware Aria Automation would be related to VCF 9, as I do not know what it is trying to bring because they exposed it as the solution of everything. So VCF 9 will bring VCF Automation and VCF Operations, the new product line of VMware. I have not seen what this brings or what else it includes. Maybe in the area of vRealize Orchestrator, this would be beneficial because VRO can do everything. Perhaps a more user-friendly way to use that tool would be helpful because the possibilities there are endless. I am looking for more user-friendly navigation in VMware Aria Automation.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Using this solution is an eye-opener; having that holistic view is the biggest eye-opener because you understand, from any of your connected cloud accounts, what your vulnerabilities are with it."
"The features that I've found most valuable are its container security aspect. I also like its vulnerability management tools."
"The most valuable aspects of BMC Helix Cloud Security are its security features and regulatory compliance capabilities."
"The cool feature of Helix Cloud Security is that you can do all that — understand and remediate issues — in one dashboard, based on the different policies that are available for security, out-of-the-box."
"It is a good tool to make sure that your containers are safe and sound."
"With very minimal effort, you are able to have a cohesive view into your security posture on one or multiple cloud accounts, particularly if you are dealing with multicloud."
"It's also multi-cloud. You can look at several cloud providers: AWS, Azure, or GCP."
"Role-based security is a valuable feature."
"The big benefit is it will spin up VMs quickly so it would take about 13 to 15 minutes to deploy a virtual machine. Whereas, if I were doing it based on an email from users who are requesting VMs, it might take time for me to hear back from them. This could be anywhere from an hour to a day."
"We have seen quite a bit of return on our investment, and we've actually been able to really change the way that we're doing build and deployments of virtual machines."
"The automation functionality has been most valuable. With a click of a button, we are able to automate provisioning, the build of new hardware and apply patches. These are all extremely important and differentiated tasks that can be automated in SaltStack."
"The most valuable feature of the product is the automation for services; it’s the basis of my work."
"With the advent of the automation, we've been able to give DevOps the ability to spin up environments, give them lease times, and then have it automatically reclaim the environment."
"We are part of a Cloud service provider; it has helped our business to grow and scale."
"Being able to give provisioning of environments over to our developers and the different teams has enabled them to put up environments faster and also freed up time for the IT team. This is really one of our bread and butter solutions for our developers."
"It has reduced provisioning time from roughly three to six weeks to about an hour on a private cloud, and about 25 minutes on public cloud."
 

Cons

"BMC Helix Cloud Security has room for improvement in terms of integrating its various features."
"Every organization out there doesn't rely on just one control body. They use FISMA control. They may use HIPAA, CIS, PCI, or SOX, then blend them. One of the things that is now in big demand for BMC Helix Cloud Security is content. That's the next journey in its lifespan, making it easier for the community to share and collaborate on content for security controls that can be measured and remediated."
"The biggest challenge now, which is a good problem to have, with BMC Helix is content."
"I think its TOA interfaces are still not that comfortable. The UI could be more user-friendly, easier to use."
"We've had some with issues connectors. The connectors have seemed to have caused a little bit of trouble, perhaps with the APIs trying to scan the environment. The only time I've had to reach out to tech support was for that. It seems it may not have been scanning correctly or I wasn't seeing data within a specific time. But we've set up a couple of connectors in the past couple of weeks and they actually scanned the AWS environment and we had data within about 10 minutes. It's working a lot faster and I think they're making improvements as they go."
"The UI could be more user-friendly."
"We've had some issues with connectors; the connectors have seemed to cause a little bit of trouble, perhaps with the APIs trying to scan the environment."
"I want the role-based security feature to be improved."
"Not as good, but there are some components in vRA that you can scale out a lot more quickly than other pieces."
"It has a learning curve."
"I don't find the solution to be intuitive and user- friendly. The GUI is really complicated."
"There are a number of bugs and regression errors that can make it frustrating at times, but given the flexibility so far I have found adequate workarounds."
"The setup was complex in many ways. The first reason is that we have many teams who work on it so it gets complicated gathering all of the people needed."
"It is not super-intuitive. It does require some skills to understand how to use it."
"They can improve on the dashboard representations and the options for non-technical people. I would like to see the ability to customize that and maybe provide them with helpful guides to what subscriptions they have. Sometimes, I find that I have to do more explanation to people who do approvals. I would really like to customize the display to the terms they use in their particular business unit. So a little bit more of a nod to the customization of the UI for non-technical users would be helpful."
"When it comes to the orchestration workflow, you're on your own. The documentation and resources are very limited, and you have to learn everything on your own."
 

Pricing and Cost Advice

"It is a subscription model with term licensing that is usually yearly. This includes, not only the product, but support and maintenance. It is based on cloud assets. Therefore, if you have 100 cloud assets, those cloud assets are measured based on evaluation or transactions. For example, if I'm evaluating that cloud asset for CIS compliance, PCI compliance, and AWS best practices, that asset gets evaluated three times, as those are three transactions. However, the license model is based on peak asset usage. So, over a year, if you deploy 100, 1000, 500, and then 2000 assets, you will be charged for the 2000 peak of assets managed by Helix Cloud Security."
"The pricing is based on an annual subscription, upfront, and it's based on cloud assets. Whether your assets are in Azure and AWS combined, the tool tells you how many assets are being scanned and that's the number used for pricing."
"There is confusion between licensing levels. There are three different licensed versions of vRealize Automation, and there are different things which can happen in each of them."
"We have seen significant ROI. We used to have physical servers, it took 90 days to get a server, order it, buy it, and get it in. We have it down to 10 minutes, building a server with virtualization, and now that's too slow. So, we let the customer do it at their speed. Therefore, it is pretty much up in a couple of minutes and they have a server."
"A simplified version for small businesses would be good."
"I would rate the pricing a ten out of ten, with ten being very expensive."
"Better pricing is always handy, but I feel it's at the right price point."
"As far as value is concerned, it has been essential to our environment. We have been able to deploy VMs quickly and the developers have their own sandbox, so they can spin up and destroy VMs at their own will."
"This is an expensive product and the high price is starting to become an issue for us."
"It made the provisioning of the virtual machines easier and faster. We can react more quickly to customers' demands."
report
Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
893,438 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
16%
Comms Service Provider
12%
Performing Arts
9%
Financial Services Firm
8%
Financial Services Firm
10%
Manufacturing Company
9%
Computer Software Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business33
Midsize Enterprise24
Large Enterprise131
 

Questions from the Community

Ask a question
Earn 20 points
What's the difference between VMware vRA (automation) and vROps (operations)?
vROP is a virtualization management solution from VMWare. It is efficient and easy to manage. You can find anything you need from the software interface. It provides complete visibility over applic...
Is there any way to try VMware Aria Automation for free?
When it comes to VMware Aria Automation, you have three choices for free runs: Hands-on Lab (HOL) Advanced lab A free trial I cannot describe in detail the second and third options as my company ...
Which sectors can benefit the most from VMware Aria Automation?
I was looking at VMware Aria Automation case studies recently and I got the impression that three main kinds of companies were using it most often: Social organizations Financial institutions and ...
 

Also Known As

TrueSight Cloud Security, SecOps Policy Service
VMware vRealize Automation, vRA, VMware DynamicOps Cloud Suite, SaltStack
 

Overview

 

Sample Customers

NHS, Vodafone, Kansas City Life, SKY Italia, Cybera
Rent-a-Center, Amway, Vistra Energy, Liberty Mutual
Find out what your peers are saying about BMC Helix Cloud Security vs. VMware Aria Automation and other solutions. Updated: April 2026.
893,438 professionals have used our research since 2012.