


Microsoft Defender for Cloud and Drata compete in the cloud security and compliance category. Microsoft Defender for Cloud seems to hold an advantage due to its robust threat management capabilities, while Drata is recommended for simplifying compliance management.
Features: Microsoft Defender for Cloud offers proactive threat detection, multi-cloud support, and deep integration with Microsoft products, enhancing security visibility and regulatory compliance. Drata specializes in automating compliance processes, offering integrations with various cloud services and security tools, alongside mechanisms for efficient audit evidence management.
Room for Improvement: Microsoft Defender for Cloud could improve its policy management centralization, third-party integrations, and antivirus reliability, with users pointing out its complex setup. Drata faces challenges with its UI intuitiveness and false positives, and its pricing model needs simplification to avoid confusion over framework-related costs.
Ease of Deployment and Customer Service: Microsoft Defender for Cloud is praised for its documentation but may require multiple support interactions, potentially burdening the user. Drata receives positive feedback for its responsive technical support, despite pricing complexity linked to its framework-based offerings.
Pricing and ROI: Microsoft Defender for Cloud is often seen as costly, with an ROI stemming from security enhancements and time savings. Drata, with costs tied to framework capabilities, still provides significant ROI by streamlining compliance processes, appealing to small and medium-sized businesses.
We are able to scan all our assets with less human intervention and achieve overall effective outcomes.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
Defender proactively indexes and analyzes documents, identifying potential threats even when inactive, enhancing preventative security.
Identifying potential vulnerabilities has helped us avoid costly data losses.
Compared to not having Microsoft Defender for Cloud in place, we definitely saw an advantage by not having downtime due to a security threat.
On a scale from one to ten, I would rate customer support a ten.
A more efficient solution would be to provide instant call options with engineers, comparable to features offered by other tools.
The technical support from Qualys is excellent, always available 24/7 for any urgent needs.
My experience with customer support was good; they were responsive.
The customer support is very reliable.
Since security is critical, we prefer a quicker response time.
The support team was very responsive to queries.
They understand their product, but much like us, they struggle with the finer details, especially with new features.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
I would rate its scalability a ten out of ten.
The scalability of Qualys TotalCloud is excellent, and I would rate it as ten out of ten.
As we have reduced our on-premises infrastructure, it is about how we can migrate workloads to the cloud to make it easier, and then having everything fully encompassed and secured within that area makes it much easier for us to scale as needed and grow.
We are using infrastructure as a code, so we do not have any scalability issues with Microsoft Defender for Cloud implementation because our cloud automatically does it.
It has multiple licenses and features, covering infrastructures from a hundred to five hundred virtual machines, without any issues.
It has a lot of scanning mechanisms, which are agentless APIs, eBPF, and cloud agents, that are highly reliable.
It is a stable solution, which is why we chose it.
It offers 99.9 percent uptime.
Drata has been an 8 in terms of stability and reliability for me so far.
Defender's stability has been flawless for us.
I have not experienced any crashes or downtime.
Microsoft Defender for Cloud is very stable.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
If we find a critical or high vulnerability on an IP or server, the remediation steps should be communicated clearly.
Drata could have an additional layer of agentic ownership in the sense that there could be more AI embedded into the product, not as a decision maker, but as a mechanism to provide suggestions, to summarize things in a way that is more robust than the actual summarization that exists these days.
Integrating it with AI where maybe with regards to evidence collection, I would not have to be collecting the evidence manually would be helpful.
I would say perhaps the customer service experience, meaning the availability from the CSM teams or CSM assigned person, as it would be nice to have more human contact throughout the membership process.
Microsoft, in general, could significantly improve its communication and support.
It would be beneficial to streamline recommendations to avoid unnecessary alerts and to refine the severity of alerts based on specific environments or environmental attributes.
The artificial intelligence features could be expanded to allow the system to autonomously manage security issues without needing intervention from admins.
In our case, replacing the tool will give us better functionalities without increasing the cost compared to what we pay today for the competitor.
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
Qualys TotalCloud offers good pricing that is affordable and competitive with the market.
From what I remember, the salesperson was not very pushy, and they were able to find a reasonable price for us since we had a tight budget.
Security has essentially no cost when compared to the cost of a breach.
Every time we consider expanding usage, we carefully evaluate the necessity due to cost concerns.
We appreciate the licensing approach based on employee count rather than a big enterprise license.
FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans.
This user-friendly platform provides a comprehensive inventory of all assets and allows for customized policy and control design.
Deploying a single agent provides comprehensive visibility across various cloud aspects, including workload protection, security posture management, and container security.
The best features Drata offers would be the controls list that is directly connected with the different services that we provide, so I am able to connect AWS and Microsoft, and Drata can easily track compliance for me.
The monitoring feature that allows me to monitor how my controls are performing and if there is any action needed from my part.
Drata has Audit Hub where you can actually do the audit and when a control has been audited and prepared, you can mark it as complete within the system.
The most valuable feature for me is the variety of APIs available.
This feature significantly aids in threat detection and enhances the user experience by streamlining security management.
The most valuable feature is the recommendations provided on how to improve security.

| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 11 |
| Large Enterprise | 38 |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 31 |
| Midsize Enterprise | 12 |
| Large Enterprise | 49 |
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
Drata is a powerful tool for automating compliance processes, effectively reducing audit preparation time and continuously monitoring security controls. It is highly valued for its ability to integrate seamlessly with existing tech stacks and manage security for remote teams, ensuring adherence to standards like SOC 2 and HIPAA. Drata enhances organizational efficiency, improves workflows, and supports real-time compliance monitoring, making compliance management less stressful and more accurate.
Microsoft Defender for Cloud is a comprehensive security platform offering integration with Microsoft services, multi-cloud capability, AI-driven threat detection, compliance, and unified visibility for improved security operations.
Microsoft Defender for Cloud manages security operations by integrating with Microsoft services and supporting multi-cloud environments. Its features include AI-driven threat detection, compliance oversight, and advanced threat protection. It simplifies processes with unified visibility, threat intelligence, and automated workflows, enhancing security posture across various workloads. Despite its robust capabilities, improvements are needed in third-party tool integration, comprehensive AI-driven remediation, and a more intuitive dashboard. Users report complexity in licensing, inadequate documentation, and high costs, with room for enhancements in compliance reporting and multi-cloud support.
What are the key features of Microsoft Defender for Cloud?
What benefits and ROI can users expect?
Organizations use Microsoft Defender for Cloud to secure applications from code to runtime across Azure, AWS, Google Cloud, and on-premises environments. Security teams use it to manage cloud security posture, protect servers, containers, and AI workloads, and investigate threats in the Microsoft Defender portal. It provides comprehensive security overviews by monitoring cloud vulnerabilities, limiting unauthorized access, and replacing existing tools with its extensive capabilities from network security to compliance checks, securing Azure infrastructure, and enhancing client security.
We monitor all Compliance Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.