Chainguard Containers vs Prisma Cloud by Palo Alto Networks comparison

Chainguard Containers vs. Prisma Cloud by Palo Alto Networks

Download the complete report

Helped 911,602 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of September 2026, in the Container Security category, the mindshare of Qualys TotalCloud is 1.7%, up from 1.1% compared to the previous year. The mindshare of Chainguard Containers is 1.0%, up from 0.8% compared to the previous year. The mindshare of Prisma Cloud by Palo Alto Networks is 7.4%, down from 10.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Mindshare Distribution
Product	Mindshare (%)
Prisma Cloud by Palo Alto Networks	7.4%
Qualys TotalCloud	1.7%
Chainguard Containers	1.0%
Other	89.9%

Container Security

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

ParthasarathyT

Senior Infrastructure Engineer at Publicis Sapient

Secures container builds, has simplified compliance audits and reduced vulnerabilities dramatically

The benefit of Chainguard Containers is that it makes development simpler. It makes the development team confident there will not be any bugs or vulnerabilities in the image they are using. It is mainly needed for vulnerabilities, SLAs, security audits, and SOC 2, ISO, and PCI compliance. The image includes SBOM, signature, and provenance metadata, which makes audits much easier. The best features Chainguard Containers offers include a reduced image size. It removes the shell and the package manager, resulting in a significantly smaller image size compared with a normal image. We can deploy production workloads directly without worrying about security concerns. If we want a strong supply chain for security, we will be using it. Many users are already tired of scanning alerts, so this will be a great thing. Removing the shell and package manager has positively impacted my team's workflow and deployment speed by making it quite user-friendly, where the developer can touch it without any hesitation. Chainguard Containers are built and pushed from non-patched binaries, with the packages compiled directly from the source. No dependencies or pre-built distro packages like Debian or Alpine are required, so there are no hidden vulnerabilities. The developer gains full control over what goes inside, and the image size is smaller with fewer vulnerabilities, in fact, zero. It has built-in processes like SBOM, which is Software Bill of Material generated. The image is cryptographically signed, and provenance is tracked, leading to faster patching, minimal footprint, and best supply chain control. Chainguard Containers has positively impacted my organization by reducing constant CVE fixing, resolving security versus DevOps conflicts, and minimizing compliance headaches. After implementing secured-by-default containers, there is less effort on fixing vulnerabilities, faster delivery, and better compliance. The impact on security teams includes a lower risk of attack, less panic during audits, and significantly fewer security noises. A specific outcome we have noted since implementing Chainguard Containers is that for a client who uses more than 200 containers, they previously received vulnerability warnings for every deployment. Once we implemented Chainguard Containers, the vulnerability ratio drastically decreased, from 100 to 30. Nearly 70% of the vulnerability checks have passed. Chainguard Containers are CVE-resistant, which is significant as CVEs represent Common Vulnerabilities and Exposures.

Read full review

reviewer2776578

Cyber Security Architect at a comms service provider with 10,001+ employees

Image scanning has supported consistent security practices during cloud deployment

On a scale of ten, we would say people are happy with Prisma Cloud by Palo Alto Networks for the part we use. People are okay with it. We probably would give an eight. We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view. We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts. People have other tools and in the end, we don't use the full capabilities of a product that we pay for. It's partially related to the difficulty to integrate Prisma Cloud by Palo Alto Networks runtime in our company's support process. We don't use the real-time monitoring part of Prisma Cloud by Palo Alto Networks. We don't know about the automated remediation feature of Prisma Cloud by Palo Alto Networks.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Qualys TotalCloud is an excellent platform, and the beauty of the platform is that we can get all the vulnerabilities, see all the reports in a single dashboard, view them segregated, and easily learn about critical, high, and medium findings with appropriately provided remediation steps."

"Qualys TotalCloud's most valuable features are its security capabilities that help identify and mitigate risk factors."

"If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."

"Qualys TotalCloud's most valuable feature is its ability to link clusters of assets, providing a clear model of deployments, vulnerabilities, and statuses."

"One of the most valuable features of Qualys TotalCloud is FlexScan, which is specifically for internet-facing VMs. We found this feature to be very useful. It was a key differentiator for us."

"The agent and agentless scanning in TotalCloud, particularly the FlexScan method, is incredibly valuable. With traditional scanning approaches, we had to give IP ranges and whitelist IPs. All that is now simplified. FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans."

"TotalCloud offers a comprehensive suite of features, including EDR, XDR, and TrueRisk, providing a centralized platform for managing vulnerabilities and security risks."

"Its dashboards are brilliant. It provides in-depth insights."

More Qualys TotalCloud pros

"The best feature of Chainguard Containers is being distroless, and the main thing I liked about it is that they follow the SBOM process and the continuous rebuilds they were doing, and they were helping me to rapidly remediate the failures which were happening."

"Chainguard Containers has positively impacted my organization by reducing constant CVE fixing, resolving security versus DevOps conflicts, and minimizing compliance headaches."

"Chainguard Containers has positively impacted my organization even during the proof of concept phase by improving our security posture."

"Specific outcomes and metrics show that before this, every month there would be 15 to 20 vulnerabilities, but after switching to Chainguard Containers, there are now only one or maybe two vulnerabilities."

"The solution gives us a lot of visibility across all of our cloud solutions."

"The first aspect that is important is the fact that Prisma Cloud is cloud-agnostic. It's actually available for the five top cloud providers: AWS, GCP, Azure, Oracle, and Alibaba Cloud. The second aspect is the fact that we can write our own rules to try to detect misconfigurations in those environments."

"What I like most about Prisma Cloud is its zero-day signatures, maximum security, minimal downtime, cloud visibility, control, and ease of deployment."

"Syslog CLIs are the best feature."

"The solution's dashboard looks very user-friendly."

"It is user-friendly. It has a good look and feel and reporting structure. It provides a single pane of glass. These are the things that I like."

"Configuration monitoring and alerting is the most valuable feature; it happens at the cloud's speed, allowing our development team to respond quickly. If a configuration goes against our security best practices, we're alerted promptly and can act to resolve the issue. As cloud security staff, we're not staring at the cloud all the time, and we want to let the developers do their jobs so that our company is protected and work is proceeding within our security controls."

"Prisma Cloud's inventory reporting is pretty good."

More Prisma Cloud by Palo Alto Networks pros

Cons

"There is a lack of data segregation according to criticality or inventory."

"There is room for improvement in the support."

"The patching process with Qualys Patch Management, which is part of TotalCloud, does not cover installing certain prerequisites on the servers or workstations. This shortcoming means we must rely on SCCM when any service stack updates or additional prerequisites are needed."

"Their customer support needs improvement."

"TotalCloud could improve its scanning of niche devices like Wi-Fi dongles and USB modems because they are often untested. It covers everything else, like laptops, mobile devices, and Bluetooth IoT devices. They can improve on the small IoT devices because hackers and testers use these."

"The response part of the Cloud Detection and Response (CDR) module can be improved."

"Regarding technical support from Qualys, they respond, but the response time can be too long. Sometimes we need to wait weeks for solutions to simple questions."

"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."

More Qualys TotalCloud cons

"The biggest challenge in Chainguard Containers is that they provide minimal images, which can make troubleshooting difficult because common debugging tools are also not included."

"The accuracy and reliability of the output from Chainguard Containers are below average, but I still give it an average rating of 6.5 to 7 because of its capabilities and its functionality for a developer-friendly approach."

"Sometimes there are backend errors which we come across again and again, and there is a resolution, but there are pending tickets for it. That sucks sometimes."

"The only limitation or challenge that stood out during my evaluation of Chainguard Containers was the fact that it is primarily based on Alpine, which can be tricky to use in native Kubernetes environments, as we use Tecton primarily, which is a CI/CD pipeline that runs on native Kubernetes."

"It does not provide runtime security or protection for Windows Server. It is currently lacking in terms of Windows environment."

"We had some teething issues with Prisma Cloud by Palo Alto Networks, but overall, it did what we expected."

"There are hundreds of built-in policies for AWS and Azure, but GCP and Oracle are not covered as much as AWS. There is a lot of work to do on that part. There is, obviously, a tiny bit of favoritism towards AWS because it has the most market share."

"Palo Alto needs to add more support staff to improve their response time."

"The dashboard can be created at the user level instead of the cloud account level, which will help save time."

"Prisma Cloud's dashboards should be customizable. That's very important. Other similar solutions are more elastic so you have the power to create customized dashboards. In Prisma Cloud, you cannot do that."

"The UI is good, however, they could improve the experience."

"While Prisma provides a lot of visibility, it also creates a ton of work. Most customers that implement Prisma Cloud have thousands of alerts that are urgent."

More Prisma Cloud by Palo Alto Networks cons

Pricing and Cost Advice

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

"Qualys TotalCloud is expensive."

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

"The cost is high, but it meets our organizational needs."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."

More Qualys TotalCloud pricing and cost advice

Information not available

"The pricing for Prisma Cloud is high. Providing a pay-as-you-go model or pricing options tailored for medium and small enterprises could help attract more clients."

"I don't know a better way to do it, but their licensing is a little confusing. That's due to the breadth of different types of technologies they are trying to cover. The way you license depends on where you're securing. When they were Twistlock it was a simple licensing scheme and you could tell what you were doing. Now that they've changed that scheme with Palo Alto, it is quite confusing. It's very difficult to predict what your costs are going to be as you try to expand coverage."

"The Prisma Cloud pricing is good."

"Prisma Cloud is a high-end enterprise solution, making it quite expensive."

"Prisma Cloud is more expensive than some other solutions, but when we consider all of its use cases, the cost averages out."

"Prisma Cloud Enterprise is a costly solution. You need a license for all the components. At the same time, you have everything under one roof, so I think it's still justified."

"The cost depends on the pricing model. Compared to other solutions, the cost isn't that bad."

"The product is very expensive, but the cost is a necessary evil; I don't know how we could have any kind of cloud presence without this type of monitoring. The pricing is calculated by module and resource usage. Ultimately, it saves us money in the amount of time we would spend uncovering what it uncovers, and we might not make the required discoveries without it anyway. Prisma offers incredible value, though I wish it were cheaper."

More Prisma Cloud by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

911,602 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

14%

Manufacturing Company

12%

Outsourcing Company

12%

Financial Services Firm

10%

Manufacturing Company

16%

Outsourcing Company

Financial Services Firm

Healthcare Company

Financial Services Firm

13%

Computer Software Company

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	5
Large Enterprise	32

No data available

By reviewers
Company Size	Count
Small Business	37
Midsize Enterprise	21
Large Enterprise	58

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

What needs improvement with Qualys TotalCloud?

To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...

What is your experience regarding pricing and costs for Chainguard Containers?

My experience with pricing, setup cost, and licensing is that while I work on implementation and do not manage billin...

What needs improvement with Chainguard Containers?

The only limitation or challenge that stood out during my evaluation of Chainguard Containers was the fact that it is...

What is your primary use case for Chainguard Containers?

Chainguard Containers was a tool brought into my enterprise as a proof of concept that we evaluated, but we have not ...

What is your primary use case for Prisma Cloud by Palo Alto Networks?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

Microsoft Defender for Cloud vs Qualys TotalCloud

Comparisons

Wiz vs Qualys TotalCloud

Compared 10% of the time

Compared 8% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Orca Security vs Qualys TotalCloud

Compared 5% of the time

AWS Security Hub vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Minimus vs Chainguard Containers

Compared 12% of the time

Wiz vs Chainguard Containers

Compared 10% of the time

Root.io vs Chainguard Containers

Compared 8% of the time

Snyk vs Chainguard Containers

Compared 8% of the time

Aikido Security vs Chainguard Containers

Compared 5% of the time

More Chainguard Containers Competitors

Wiz vs Prisma Cloud by Palo Alto Networks

Compared 11% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Prisma Cloud by Palo Alto Networks

Compared 8% of the time

SentinelOne Singularity Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 4% of the time

TrendAI Vision One – Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 3% of the time

Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks

Compared 3% of the time

More Prisma Cloud by Palo Alto Networks Competitors

Product Reports

Qualys TotalCloud

Download Qualys TotalCloud product report

Chainguard Containers

Download Chainguard Containers product report

Prisma Cloud by Palo Alto Networks

Download Prisma Cloud by Palo Alto Networks product report

Prisma Cloud by Palo Alto Networks report

Also Known As

Qualys TotalCloud with FlexScan

No data available

Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Chainguard Containers provide security-focused container solutions designed to address modern application challenges. Its use enhances system integrity and ensures robust protection against vulnerabilities.

Chainguard Containers stand out by offering an innovative approach to container security. Expertly crafted to ensure only verified code runs, it emphasizes reducing attack surfaces and enhancing overall workload security. Its utility is crucial for maintaining a secure software pipeline, minimizing risks in application deployments.

What are the standout features of Chainguard Containers?

Secure by Default: Incorporates security best practices automatically to protect system deployments.
Minimal Base Images: Ensures a smaller attack surface by using minimalistic container bases.
Supply Chain Security: Enhanced visibility and control over the software supply chain to mitigate threats.
Automatic Updates: Regularly updates containers to address new vulnerabilities promptly.
Compliance Tools: Facilitates meeting regulatory requirements with built-in compliance features.

What benefits should users consider in reviews?

Increased Security: Enhances overall security posture with reinforced protection measures.
Faster Deployment: Streamlines deployment processes, boosting operational efficiency.
Cost Efficiency: Reduces the overhead of manual security checks, saving time and money.
Regulatory Compliance: Assists in adhering to industry regulations, reducing legal risks.
Operational Stability: Improves system stability through a more secure infrastructure.

Chainguard Containers find significant application in industries like finance and healthcare, where data security is paramount. By integrating seamlessly into existing IT frameworks, they bolster security without disrupting operational workflows, a critical advantage in sectors with stringent compliance demands.

Chainguard

Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.

Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.

What are the important features of Prisma Cloud?

Dynamic Workload Identity: Enables unique workload identities for security purposes.
Automated Forensics: Offers detailed insights into threats and incidents automatically.
Runtime Protection: Provides ongoing detection and blocking of suspicious activities.
Multi-Cloud Security: Protects environments on AWS, Azure, and GCP simultaneously.
Compliance Management: Assists in meeting regulatory standards across cloud platforms.

What benefits or ROI should users consider in reviews?

Enhanced Security Posture: Strengthens cloud defense lines with proactive monitoring.
Centralized Dashboard: Offers unified oversight of multiple cloud environments.
Efficient Misconfiguration Handling: Quickly identifies and addresses security lapses.
Seamless CI/CD Integration: Integrates security within development workflows.
Improved Visibility: Provides transparent insights into security operations and alerts.

Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.

Palo Alto Networks

Sample Customers

Information Not Available

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

Chainguard Containers vs. Prisma Cloud by Palo Alto Networks