No more typing reviews! Try our Samantha, our new voice AI agent.

Claroty Platform vs Zafran Security comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
10th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
46
Ranking in other categories
Container Security (11th), Cloud Workload Protection Platforms (CWPP) (9th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
Claroty Platform
Ranking in Vulnerability Management
35th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
18
Ranking in other categories
Remote Access (9th), Operational Technology (OT) Security (2nd), Cyber-Physical Systems Protection (2nd), Secure Remote Access (1st)
Zafran Security
Ranking in Vulnerability Management
22nd
Average Rating
9.6
Reviews Sentiment
5.8
Number of Reviews
6
Ranking in other categories
Continuous Threat Exposure Management (CTEM) (3rd)
 

Mindshare comparison

As of October 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.2%, up from 1.0% compared to the previous year. The mindshare of Claroty Platform is 0.7%, down from 0.7% compared to the previous year. The mindshare of Zafran Security is 1.0%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.2%
Zafran Security1.0%
Claroty Platform0.7%
Other97.1%
Vulnerability Management
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
TarunKumar11 - PeerSpot reviewer
Global Leadership Council at a tech company with 10,001+ employees
Improved industrial asset visibility has transformed risk management and compliance monitoring
I think there are some areas of weaknesses in Claroty Platform. The pricing could improve, as some of the features require licensing tiers and therefore the pricing could be higher. Claroty Platform could benefit from simpler licensing and pricing structures. The executive dashboard can improve as well, and they can expand their third-party integration. Additionally, their predictive AI-driven recommendations can be improved. I think it does provide for very good behavior analysis through AI capabilities and risk prioritization, which is generally quite trustworthy. As the capability of AI enhances, I think it can provide for better risk recommendations. Claroty Platform can have a better and simpler licensing arrangement. Their third-party integrations can expand. They can have better executive dashboards and more AI-driven predictive risk recommendations. I would rate them an eight for these reasons. Dashboards, licensing, integrations, and AI-driven recommendations are areas for improvement. Probably one more to add is that they can have better and more enhanced automated remediation workflows.
Reviewer6233 - PeerSpot reviewer
Information Security Vulnerability Management Executive Advisor at a healthcare company with 10,001+ employees
Has become an indispensable tool in our cybersecurity arsenal
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Qualys TotalCloud has helped us view our risk structure, vulnerabilities, and security posture."
"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."
"TotalCloud provides the easiest and the best approach for cloud infrastructure management."
"Qualys TotalCloud is an excellent platform, and the beauty of the platform is that we can get all the vulnerabilities, see all the reports in a single dashboard, view them segregated, and easily learn about critical, high, and medium findings with appropriately provided remediation steps."
"I highly recommend Qualys TotalCloud to other users."
"I appreciate TotalCloud's real-time protection and remediation features. The remediation options include automated one-click remedies and custom changes that help manage vulnerabilities efficiently."
"One of Qualys' best features is its categorization, which allows us to see the types of assets, their security postures, and the AI-powered version of the tool."
"With TotalCloud, we can scan through the API. If we are not able to deploy cloud agents on the machine, we can use the API."
"I have had a very good experience with the Claroty Platform."
"After implementation of Claroty Platform, the visibility goes up to one hundred percent, which otherwise was probably in the range of 60 to 70 percent, and this really has a lot of business impact on security, compliance, and operations."
"I believe the two main aspects where Claroty stands out are their ability to provide a complete platform and their OT-specific focus."
"Our different execution team is there to handle it, but overall, the product is pretty easy to deploy and integrate with the existing system."
"I like how the tool does passive and active discovery and threat detection and shows risks, recommendations, and vulnerabilities. It gives risk scores and gathers everything in one place - IP, device name, etc. We can integrate it with other tools for overall network mapping. It's useful for audits, compliance, and monitoring of all devices in the industry. It provides both monitoring and control. We also have SRA for incident response, which lets us search all alerts if we deploy the Claroty Platform."
"The tool's best feature was the UI and the simplicity it offers."
"The platform ensures security without imposing significant delays."
"Claroty provides continuous threat protection and identifies pre-empty stuff and false positives."
"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."
"Zafran is an excellent tool."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"We saw benefits from Zafran Security almost immediately after deploying it."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
 

Cons

"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."
"In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys TotalCloud."
"It has been working very well, but it would be helpful if the dashboard could generate reports tailored to specific compliance needs. For example, in India, we have to comply with RBI and SEBI guidelines. It w"
"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."
"To be honest, I would move out from this tool because it does not give a full view of vulnerability."
"TotalCloud could improve the classification of vulnerabilities. Specifically, it could enhance the categorization of what aspects fall under patches resolved by OS or software updates and what pertains to configuration adjustments."
"There is room for improvement in the support."
"I think the only issue is that the hardware Claroty uses is expensive."
"The Claroty Platform becomes too noisy when it gives numerous CVEs related to vendor match. Sometimes, these CVEs are not actually related to the device in the firmware at the site."
"Introducing an AI chatbot to assist you when you have doubts could be beneficial."
"There are a few protocols that Claroty doesn't currently support."
"For improvement, I think the training could be more practical. We have external training, but they're mostly theoretical. I want the solution to provide hands-on lab experience to help users learn better."
"Claroty Platform only gives the vulnerabilities based on the make and model of the devices, so it doesn't provide any resolution or any detailed explanation of how one can resolve such issues."
"More modularity would be helpful for Claroty Platform to improve its competitiveness."
"The graphical user interface is quite poor."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
 

Pricing and Cost Advice

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"Qualys TotalCloud is expensive."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"The tool is quite expensive."
"The licensing for physical devices is cheap, but the software version is expensive. The software version costs around 26-28 dollars. I was surprised and even double-checked. It was shocking."
"It's a bit expensive compared to other solutions."
Information not available
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
16%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Manufacturing Company
14%
Energy/Utilities Company
8%
Comms Service Provider
6%
Outsourcing Company
6%
Financial Services Firm
11%
Manufacturing Company
9%
Computer Software Company
8%
Outsourcing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise6
Large Enterprise35
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise13
By reviewers
Company SizeCount
Midsize Enterprise3
Large Enterprise5
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is regarding the cloud visibility that we were not having previously. Previous...
What needs improvement with Claroty Platform?
I think there are some areas of weaknesses in Claroty Platform. The pricing could improve, as some of the features re...
What is your primary use case for Claroty Platform?
I think a lack of visibility into industrial assets is the main use case for Claroty Platform. Claroty Platform is a ...
What advice do you have for others considering Claroty Platform?
Claroty Platform has impacted my organization positively by reducing cyber risk, by making the incident detection fas...
What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
No data available
 

Overview

 

Sample Customers

Information Not Available
Rockwell Automation
Information Not Available
Find out what your peers are saying about Claroty Platform vs. Zafran Security and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.