No more typing reviews! Try our Samantha, our new voice AI agent.

CloudAware vs Google Cloud Security Command Center comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Cloud Security Posture Management (CSPM)
8th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Vulnerability Management (11th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (8th), SaaS Security Posture Management (SSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (6th)
CloudAware
Ranking in Cloud Security Posture Management (CSPM)
28th
Average Rating
8.0
Reviews Sentiment
7.9
Number of Reviews
5
Ranking in other categories
Cloud Management (34th)
Google Cloud Security Comma...
Ranking in Cloud Security Posture Management (CSPM)
24th
Average Rating
7.6
Reviews Sentiment
5.0
Number of Reviews
4
Ranking in other categories
Cloud-Native Application Protection Platforms (CNAPP) (20th)
 

Mindshare comparison

As of June 2026, in the Cloud Security Posture Management (CSPM) category, the mindshare of Qualys TotalCloud is 1.6%, up from 1.2% compared to the previous year. The mindshare of CloudAware is 0.5%, up from 0.1% compared to the previous year. The mindshare of Google Cloud Security Command Center is 1.5%, down from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Security Posture Management (CSPM) Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.6%
Google Cloud Security Command Center1.5%
CloudAware0.5%
Other96.4%
Cloud Security Posture Management (CSPM)
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
PK
Project Manager at AGRICULTURE SKILL COUNCIL OF INDIA (ASCI)
Unified multi cloud visibility has simplified governance and strengthened security oversight
Our tech team has reported a few bugs in certain areas, such as cloud logs. Whenever there are new updates happening on the cloud system, the logs need to be updated regularly, but we sometimes feel there are lapses in terms of log accounts or traces. Once we report the issue, the ticket gets resolved, but a more streamlined cloud logs system would be helpful. Additionally, establishing a full-fledged audit control reporting structure is needed, especially since we conduct risk assessments. The team is working aggressively on these improvements, and I am in conversation with them on a fortnightly basis. For user experience, I would advise their team to organize more orientation workshops and feedback sessions on a weekly basis. Currently, they take place monthly, but aggressive training on navigation, data reading, and understanding matrices is essential for newcomers. Enhancing training and capacity building is crucial, and there are no significant issues with integration, but further enhancement of integration features could also be beneficial. I choose 8 out of 10 because while the functionalities and features are excellent, there are areas that need improvement in terms of capacity building, training, and developing new features. Additionally, addressing the downtime issues, especially on weekends when our operations often run, is crucial to avoiding data access disruptions during busy periods.
RaviUpadhyay - PeerSpot reviewer
Security Consultant at HCLSoftware
Security posture has improved with automated insights but reporting and integrations still need work
The best feature of Google Cloud Security Command Center is that it is flexible to integrate with several third-party tools or services, and it is more customized. For example, it is already giving a misconfiguration and the vulnerability, and if somebody wants to do some in-depth analysis for patterns such as metrics, they can export the continuous log on the spot with that tool. From an integration point of view, I would say it is more customized with different tools. The asset discovery feature of Google Cloud Security Command Center enhances my security strategy because, nowadays, data sensitivity and data privacy are very important, and using some DLP utility, I can classify and set up rules to generate reports based on the classification in their asset discovery. This can also include data classification on Google storage buckets, and overall, Google Cloud Security Command Center has that information, which can be used for various analyses or alerts. It is very important for compliance assessment because every business is global and connects with different geographical locations, meaning each country has its own regulatory systems and internal compliance policies. Google Cloud Security Command Center has the feature to set up security postures based on which resources or assets inside Google Cloud can be marked as compliant or non-compliant, giving a risk score for immediate reporting to higher management or CISO, making it very helpful in terms of security, risk, and compliance.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best part I like is the on-demand scans."
"It is a cloud-native app that integrates with both IaaS and SaaS. It seamlessly integrates with other platforms."
"If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."
"One of the most valuable features of Qualys TotalCloud is FlexScan, which is specifically for internet-facing VMs. We found this feature to be very useful. It was a key differentiator for us."
"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."
"Qualys TotalCloud has significantly improved our organization by automating our reporting processes, reducing the time spent on report creation from two hours to less than fifteen to twenty minutes."
"Its excellent graphical interface makes the scanning process simple."
"In my opinion, this is the best tool."
"CloudAware has positively impacted us by reducing costs by 10 to 15% and improving compliance reporting speed, saving several hours per audit."
"From the past three to four years, we have not found any cases of attacks because all risks and potential attacks are being proactively communicated by the software to our tech team, allowing us to take proactive and reactive measures to avoid such attacks."
"CloudAware serves as a centralized platform where we can monitor AWS, GCP, and Azure, allowing us to monitor all cloud environments in one place."
"CloudAware is helping us scale up our cloud integration activities by automating tasks that were once manually intensive and providing accurate and transparent service cataloging."
"I utilized it in one of the use cases for workload assessment and definitely it has brought in the value as a return of investment to us, because that was the assessment I was doing for one of our end customers."
"The compliance reporting feature helped us maintain a baseline of compliance within the information security policies."
"It simplifies compliance efforts."
"Most people use the threat detection dashboard."
"I would definitely recommend Google Cloud Security Command Center to others."
 

Cons

"The main area needing improvement is integration. Although the team is strengthening TotalCloud, integration can be enhanced with SIEM, SOAR, ITSM, and other sources."
"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."
"There is a lack of data segregation according to criticality or inventory."
"The vulnerability part is good, but the policy compliance module needs improvement because it involves a lot of manual work. Specifically, the remediation part of the controls requires enhancements."
"In TotalCloud, I would suggest improvements in policy checks to cater to various inventory types like VPCs, subnets, S3 buckets, or IAMs. There is a lack of data segregation according to criticality or inventory."
"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."
"The downside is only in container security, but it has not been a long time since they introduced these models."
"Although TotalCloud is a helpful tool, some of its advanced features are still under development."
"One improvement could be making the initial setup process more intuitive, especially for new users; otherwise, it has been a solid product."
"CloudAware can be improved by offering more free options or reducing pricing, as startups may find the cost high."
"I choose 8 out of 10 because while the functionalities and features are excellent, there are areas that need improvement in terms of capacity building, training, and developing new features."
"CloudAware has existed for ten to fifteen years, but it seems they have not come up with any solution for small organizations."
"I am looking forward for a positive contribution because as per the research I did so far, it is going to benefit us if we start utilizing it, but I am a little concerned of whether it will fit in all our requirements."
"The AI capabilities have been heavily promoted, but I haven't seen a significant impact."
"Visibility can be improved along with automation."
"There is definitely room for improvement in Google Cloud Security Command Center. While the functionality is very native, compared to third-party tools that offer a variety of features for easy integrations and custom KPIs, Google Cloud Security Command Center lacks some of these functionalities, requiring complex workarounds for custom reporting, and given that customers often use hybrid environments, having a broader perspective is necessary for integration."
 

Pricing and Cost Advice

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
Information not available
"Initially, it used to be relatively expensive, starting at around four or five hundred dollars."
report
Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
902,456 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
17%
Financial Services Firm
14%
Construction Company
8%
Comms Service Provider
7%
No data available
Financial Services Firm
14%
Computer Software Company
13%
Comms Service Provider
6%
Hospitality Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise29
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise8
No data available
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
What is your experience regarding pricing and costs for CloudAware?
The pricing was fair given the feature set, and setup required some initial time, but it is manageable, and licensing...
What needs improvement with CloudAware?
CloudAware can be improved by offering more free options or reducing pricing, as startups may find the cost high. For...
What is your primary use case for CloudAware?
CloudAware serves as a centralized platform where we can monitor AWS, GCP, and Azure, allowing us to monitor all clou...
What is your primary use case for Google Cloud Security Command Center?
I am primarily working with Google Cloud Security Command Center, which is their CSPM, and also with the next-generat...
What advice do you have for others considering Google Cloud Security Command Center?
I rate Google Cloud Security Command Center a seven and a half out of ten. While it is a ten from a security perspect...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
No data available
 

Overview

 

Sample Customers

Information Not Available
Sony, AOL, Thomson Reuters, Pearson
Information Not Available
Find out what your peers are saying about CloudAware vs. Google Cloud Security Command Center and other solutions. Updated: June 2026.
902,456 professionals have used our research since 2012.