No more typing reviews! Try our Samantha, our new voice AI agent.

Cybersixgill vs VulnCheck comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.0
Organizations benefit from Qualys TotalCloud with improved efficiency, enhanced security, and substantial savings in time and resources.
Sentiment score
6.7
Cybersixgill enhanced ROI with real-time intelligence, reducing staffing needs, investigation time, and costs while improving security and reputation.
Sentiment score
7.0
VulnCheck optimizes efficiency by reducing remediation time and critical vulnerabilities, saving time, money, and staffing resources.
We are able to scan all our assets with less human intervention and achieve overall effective outcomes.
Dns architect at a outsourcing company with 5,001-10,000 employees
It has saved about 90% of our time.
Senior Consultant at a consultancy with 10,001+ employees
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
Security Manager at a consultancy with 10,001+ employees
The return of investment was quick and easily seen within the first 90 days, and that is when an actual quarterly meeting, a QBR, would take place to be able to show that return on investment.
Global Director at a computer software company with 51-200 employees
VulnCheck detects exploitable vulnerabilities days to weeks earlier than alternatives, with customer detection averaging just under six and a half days sooner than most competing products.
Partner Account Manager at a wholesaler/distributor with 51-200 employees
VulnCheck reduces the time spent manually researching exploitability and threat context for individual CVEs, allowing the team to focus on the vulnerabilities that need immediate attention.
Soc Analyst at a manufacturing company with 10,001+ employees
Since using VulnCheck, we see a significant return on investment as we no longer spend excessive time on scanning, which was an issue with Rapid7.
SOC L2 Analyst at a tech services company with 51-200 employees
 

Customer Service

Sentiment score
6.8
Qualys TotalCloud delivers knowledgeable support with high ratings despite occasional delays, emphasizing personalized and effective problem-solving.
Sentiment score
6.3
Cybersixgill excels in prompt, attentive customer service with proactive communication, though some technical issues remain unresolved.
Sentiment score
7.3
VulnCheck offers responsive and helpful customer service with swift resolutions, knowledgeable assistance, and high satisfaction ratings.
They are helpful, respond to my queries, and can answer any question.
Developer at a consultancy with 10,001+ employees
Qualys's tech support is highly responsive, providing multiple ways to interact with them.
Service Manager, Security Operations at CDA IT SOLUTIONS
On a scale from one to ten, I would rate customer support a ten.
Head of IT at a insurance company with 201-500 employees
The customer support is top-notch and excellent.
Global Director at a computer software company with 51-200 employees
Cybersixgill's customer support replies within an hour or two or within the day.
Soc Analyst
I will give the customer support a rating of 10 out of 10.
MANAGER IT at Axis Bank
Support is also available through Slack or Teams, web meetings, and phone calls, which helps with integration, troubleshooting, and product-related queries.
Full Stack Developer at Sri Krishna Arts and Science
Support for VulnCheck is very responsive, active, and helpful.
Manager at Cyvogenix
 

Scalability Issues

Sentiment score
7.3
Qualys TotalCloud excels in scalability and multi-cloud support but faces occasional performance lags and management challenges.
Sentiment score
7.3
Cybersixgill offers flexible scalability and seamless integration, enhancing data management efficiency for organizations of all sizes, especially smaller companies.
Sentiment score
7.5
VulnCheck is API-driven and cloud-based, seamlessly integrating, scaling efficiently, and supporting growing security workloads and diverse needs.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
CIO at a venture capital & private equity firm with 11-50 employees
Our organization currently uses it to manage over 1200 web applications.
Analyst, Information Security at Infosys
It is absolutely scalable, and I would rate its scalability as nine out of ten.
retired at a consultancy with 10,001+ employees
As small or as large as I want to be, Cybersixgill is able to accommodate any organization.
Global Director at a computer software company with 51-200 employees
VulnCheck scales exceptionally in our organization, regardless of size.
SOC L2 Analyst at a tech services company with 51-200 employees
VulnCheck scales well because it is cloud-based and API-driven, so it can support growing volumes of vulnerability and threat intelligence data without requiring significant additional infrastructure.
Soc Analyst at a manufacturing company with 10,001+ employees
VulnCheck has good scalability, as it has handled an increasing number of assets and vulnerabilities as our organization is growing.
Soc Analyst at a manufacturing company with 10,001+ employees
 

Stability Issues

Sentiment score
8.2
Qualys TotalCloud is praised for high stability, reliability, minimal downtime, advanced scanning, prompt support, and seamless user experience.
Sentiment score
8.4
Cybersixgill is stable, reliable across time zones, easy to use, with minimal downtime, and praised for service stability.
Sentiment score
8.5
VulnCheck offers reliable, stable vulnerability management with strong performance, regular updates, and dependable support confirmed by user evaluations.
Overall, the support provided has been excellent.
Analyst, Information Security at Infosys
It has a lot of scanning mechanisms, which are agentless APIs, eBPF, and cloud agents, that are highly reliable.
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
It is a stable solution, which is why we chose it.
CIO at a venture capital & private equity firm with 11-50 employees
We haven't experienced any downtime or reliability issues.
Soc Analyst at a manufacturing company with 10,001+ employees
The platform has been consistent when accessing vulnerability and exploit intelligence.
Cybersecurity Executive at Gigabit Technologies Pvt Ltd
 

Room For Improvement

Qualys TotalCloud needs UI/UX improvements, enhanced automation, better integration, clearer licensing, and faster vulnerability detection for competitiveness.
Users seek improvements in data management, real-time updates, UI, training, dark web sources, and reduced false positives on Cybersixgill.
VulnCheck needs better UI, integration with systems, enhanced AI, and improved guidance for streamlined, insightful vulnerability management.
Ideally, the scanner should automatically detect and scan all subdomains, even if not explicitly defined, ensuring comprehensive vulnerability assessment.
Analyst, Information Security at Infosys
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Project Lead at Persistent Systems
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
Senior Information Security Engineer at a consultancy with 10,001+ employees
During the onboarding, that is the most crucial part to make sure that the organizations who purchase Cybersixgill ensure that they actually have the right person or persons to go through the onboarding.
Global Director at a computer software company with 51-200 employees
I hope that in the future, Cybersixgill can separate the leaked credentials by email and domain.
Soc Analyst
You will require other tools to act on the data that you find, which necessitates engineering time for API integration, data mapping, and tuning.
Partner Account Manager at a wholesaler/distributor with 51-200 employees
Improved reporting on vulnerability trends would also help teams prioritize risk faster and streamline remediation.
Cloud Infrastructure Engineer at Reg-X
If VulnCheck works on the inventory of the software my organization uses, it would be really helpful.
Sr Network and Security Engineer at a outsourcing company with 201-500 employees
 

Setup Cost

Qualys TotalCloud offers competitive pricing and flexibility, especially for large enterprises, with quick setup and comprehensive integration.
Cybersixgill offers competitive pricing, balancing affordability with market standards, though cost adjustments and currency exchange can affect value perception.
Enterprise buyers find VulnCheck's pricing reasonable, flexible, and transparent, though clearer pricing tiers could enhance budgeting.
In our case, replacing the tool will give us better functionalities without increasing the cost compared to what we pay today for the competitor.
Head of IT at a insurance company with 201-500 employees
Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive.
Senior Manager at a financial services firm with 10,001+ employees
Pricing is managed by our finance team; however, Qualys TotalCloud offers cost-effective licensing flexibility.
IT Manager at a consultancy with 10,001+ employees
Based on the needs of the customer, there was always a negotiation that could be done to get a slightly lower price.
Global Director at a computer software company with 51-200 employees
More transparent pricing tiers and predictable costs would make budgeting and scaling easier.
Cloud Infrastructure Engineer at Reg-X
Currently, I find the pricing of VulnCheck to be reasonable and not much expensive.
Sr Network and Security Engineer at a outsourcing company with 201-500 employees
The pricing is reasonable for the value VulnCheck provides, especially for threat intelligence.
Manager at Cyvogenix
 

Valuable Features

Qualys TotalCloud optimizes cloud security with AI, enhanced risk management, and efficient threat detection across multi-cloud environments.
Cybersixgill offers user-friendly threat intelligence features, tracking, and analysis from deep and dark web, enhancing security monitoring.
VulnCheck offers exploit intelligence, integration, and real-time updates for efficient vulnerability management and improved security prioritization.
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
Works at a consultancy with 10,001+ employees
It will help cybersecurity professionals monitor the cloud and find vulnerabilities.
Developer at a consultancy with 10,001+ employees
We are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs.
Senior Consultant at a consultancy with 10,001+ employees
The best feature that Cybersixgill offers with respect to dark web intelligence is that they provide very good screenshots of where the particular data has been taken, which allows for better visualization and understanding of the scenario, with the source being indicated through onion links that can be reverse-engineered for further investigation.
Associate at a financial services firm with 10,001+ employees
What specifically stands out to me about the cyber threat intelligence feature is the speed and the depth from the data lake.
Global Director at a computer software company with 51-200 employees
I appreciate that I can search in the dashboard for credentials by entering the domain directly rather than navigating through other sections, making it very easy to check the dashboard.
Soc Analyst
The main feature of VulnCheck is its ability to cut down all the noise and provide a scoring of how you are going to get attacked and breached.
Partner Account Manager at a wholesaler/distributor with 51-200 employees
VulnCheck helps us identify which vulnerabilities are being actively exploited or are listed as similar to known exploited vulnerabilities.
Manager at Cyvogenix
The detailed descriptions of all present vulnerabilities along with emerging threats, well-documented details, and frequent updates of threat intelligence contribute significantly to reducing the remediation workload by prioritizing the vulnerabilities that matter most.
SOC L2 Analyst at a tech services company with 51-200 employees
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
5th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
54
Ranking in other categories
Container Security (8th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (6th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
Cybersixgill
Ranking in Vulnerability Management
45th
Average Rating
8.8
Reviews Sentiment
6.8
Number of Reviews
7
Ranking in other categories
Threat Intelligence Platforms (TIP) (9th), Digital Risk Protection (8th), Attack Surface Management (ASM) (20th)
VulnCheck
Ranking in Vulnerability Management
15th
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
12
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.2%, up from 1.0% compared to the previous year. The mindshare of Cybersixgill is 0.7%, up from 0.3% compared to the previous year. The mindshare of VulnCheck is 0.5%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.2%
VulnCheck0.5%
Cybersixgill0.7%
Other97.6%
Vulnerability Management
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
DD
Global Director at a computer software company with 51-200 employees
Proactive dark web intelligence has reduced breach impact and protects organizations quietly
Cybersixgill has one of the largest data lakes around. I think the way they can be improved is to be able to initially during the onboarding, make sure that the false positives are correctly addressed to really do the tweaks that need to be done to filter through exactly what the organization is trying to accomplish and give them the outcomes they are looking for without all the extra noise or chatter. I just think during the onboarding, that is the most crucial part to make sure that the organizations who purchase Cybersixgill ensure that they actually have the right person or persons to go through the onboarding to make sure that the data lake feeds can be properly set up and organized so it can filter through the noise and the chatter.
Abdulmunafz Mct - PeerSpot reviewer
Full Stack Developer at Sri Krishna Arts and Science
Exploit intelligence has transformed how my team prioritizes and responds to vulnerabilities
The best features that VulnCheck offers in my opinion are exploit intelligence, vulnerability enrichment, exploitation timelines, and information about exploit maturity. These details provide content-based insights beyond a basic vulnerability score and help teams make better-informed prioritization decisions.The exploitation timelines and maturity information have been useful for understanding the status of known exploits. This content can help security teams prioritize vulnerabilities more effectively instead of relying on severity scores. The exploitation data provides useful content about exploit availability, maturity, and exploitation activity. This information can help security teams understand vulnerability risk and prioritize remediations, although some technical details may be required as cybersecurity knowledge to interpret correctly. VulnCheck provides useful exploit intelligence, which can help security teams identify vulnerabilities without any exploitation activity and prioritize urgent threats. Exploitation details and maturity information can support faster, more informed threat response decisions. I am not currently using the Canary Intelligence feature, but I understand its potential value in providing early visibility into emerging exploitation activity and helping security teams prioritize threats. VulnCheck's operational exploit artifacts can help security teams understand exploit behavior and improve detection and response planning. They may support the development and validation of detection rules and help analysts investigate suspicious activity more effectively. VulnCheck's scanless exposure insight feature provides visibility into potential external exposure without requiring active scanning in the environment. Its effectiveness depends on the accuracy and coverage of available data, so findings should be validated before making critical security decisions. VulnCheck's Initial Access Intelligence (IAI) artifacts provide useful context about vulnerabilities and exploitation techniques associated with initial access. This information helps security teams understand potential attack vectors, improve detection strategies, and prioritize defensive measures. VulnCheck's EVI (Exploit Validation Intelligence) Index adds valuable context to CVE records by providing information about exploit maturity and real-world exploitation evidence. This helps security teams distinguish vulnerabilities with a credible exploitation signal from those that may be less urgent, thereby supporting more informed prioritization and remediation decisions. VulnCheck's machine-readable intelligence supports security automation by making vulnerability exploit data easier to consume through integrations and APIs. This information helps automate vulnerability enrichment, prioritize findings, and support remediation workflows, with the actual impact depending on integration quality and how extensively the data is used in existing security processes.
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
11%
Manufacturing Company
11%
Financial Services Firm
10%
Financial Services Firm
12%
Comms Service Provider
10%
Outsourcing Company
9%
Manufacturing Company
8%
Outsourcing Company
30%
Construction Company
11%
Financial Services Firm
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise11
Large Enterprise38
No data available
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise2
Large Enterprise9
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...
What needs improvement with Qualys TotalCloud?
I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...
What is your experience regarding pricing and costs for Cybersixgill Investigative Portal?
My experience with pricing, setup cost, and licensing is that the pricing was very well priced. It was not the cheape...
What needs improvement with Cybersixgill Investigative Portal?
Cybersixgill has one of the largest data lakes around. I think the way they can be improved is to be able to initiall...
What is your primary use case for Cybersixgill Investigative Portal?
My main use case for Cybersixgill is dealing with cyber threat intelligence. When an organization's information was b...
What needs improvement with VulnCheck?
VulnCheck could be improved by making the interface even more intuitive and adding more customization around how info...
What is your primary use case for VulnCheck?
My main use case for VulnCheck is verifying and monitoring information efficiently as part of our day-to-day workflow...
What advice do you have for others considering VulnCheck?
I would recommend VulnCheck to teams that want more actionable vulnerability and exploit intelligence rather than rel...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
No data available
 

Overview

 

Sample Customers

Information Not Available
Current customers include large enterprises, financial services, manufacturing, GSIs, MSSPs, government and law enforcement entities.
Information Not Available
Find out what your peers are saying about Cybersixgill vs. VulnCheck and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.