No more typing reviews! Try our Samantha, our new voice AI agent.

ESET Cloud Apps Protection vs HackerOne comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
11th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Container Security (11th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (6th)
ESET Cloud Apps Protection
Ranking in Vulnerability Management
70th
Average Rating
9.6
Reviews Sentiment
7.4
Number of Reviews
2
Ranking in other categories
Email Security (44th), Patch Management (29th)
HackerOne
Ranking in Vulnerability Management
35th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
11
Ranking in other categories
Application Security Tools (18th), Bug Bounty Platforms (1st), Penetration Testing Services (2nd), Attack Surface Management (ASM) (6th), AI Observability (15th)
 

Mindshare comparison

As of July 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.1%, up from 1.0% compared to the previous year. The mindshare of ESET Cloud Apps Protection is 0.5%, up from 0.1% compared to the previous year. The mindshare of HackerOne is 0.8%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.1%
HackerOne0.8%
ESET Cloud Apps Protection0.5%
Other97.6%
Vulnerability Management
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
LA
Team Manager at JJ soluciones
Great protection, good privacy, and helpful support
The only thing I would like is a way to open the email that is going to quarantine. Based on the level of security, they cannot open the email to check the message. Even for the administrator, you have to create a security copy to be sent, which will lock the log support. It's not easy for an admin to check and decide if the email is good or not. That is the only thing that I'm seeing could be improved. Basically, ESET doesn't have the ability to let the administrator release an email showing the message on the email. It's not possible. If you want to have an email review, you have to select an option to send a copy. In the way that they designed the system, for security, they are not letting anyone even have the admin privileges to make this happen. Privacy is at a really high level.
NitishKumar - PeerSpot reviewer
Consultant at a manufacturing company with 10,001+ employees
Crowdsourced security has strengthened our bug discovery and improved vulnerability response
HackerOne is already doing well, although I believe implementing stricter SLAs for the time to first response and time to bounty would help prevent researchers' burnout, especially regarding duplicate submissions. I suggest systematic bug rewards because currently, if a researcher finds one bug in multiple places, they often only get paid for one. Improving the handling of systemic vulnerabilities would encourage deeper research. Additionally, improving multi-currency and crypto payout options would help make the platform more accessible globally.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Qualys TotalCloud's most valuable features are its security capabilities that help identify and mitigate risk factors."
"I highly recommend Qualys TotalCloud to other users."
"I appreciate Qualys TotalCloud's ability to onboard any type of device with ease, including containers."
"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"
"I would rate Qualys TotalCloud ten out of ten."
"The best features in Qualys TotalCloud include the total asset management of the cloud environment. It is very easy to export the report and see the vulnerabilities related to the cloud specifically."
"TotalCloud offers a comprehensive suite of features, including EDR, XDR, and TrueRisk, providing a centralized platform for managing vulnerabilities and security risks."
"With TotalCloud, we can scan through the API. If we are not able to deploy cloud agents on the machine, we can use the API."
"The most valuable features are the precision of detection and the level of customization of the policy."
"We are close to having 99% or 98% detection."
"It's a trustworthy solution that is easy to learn."
"Using HackerOne has definitely improved the security of my web application, identifying security gaps I didn't realize as a web developer."
"The fast verification process impacts my motivation significantly because a quick response keeps me motivated, and if I'm going to try and hunt bugs today, I would appreciate a response within the day or at least within a few days."
"If you have a very critical vulnerability, some good companies will acknowledge it and pay you accordingly based on severity."
"Apart from getting all the bug bounty opportunities, we also get the chance to practice in a safe environment, like a demo setup. These features are great for beginners who want to explore bug bounties in the future."
"HackerOne is a very good platform with the trust of different companies including Shopify, PayPal, and Uber, which creates a stronger brand perception and competitive market positioning."
"HackerOne is larger than WebCloud and has a better reputation than BugCloud, which results in a smoother process."
"The most valuable feature of HackerOne is its variety of programs. These programs provide depth into various areas, such as mobile, API, and websites."
"HackerOne has been the right fit for our current situation from both a functionality and cost-effectiveness perspective."
 

Cons

"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."
"There is a lack of data segregation according to criticality or inventory."
"The support process is inefficient due to the excessive number of replies required when submitting tickets."
"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."
"Qualys TotalCloud needs to enhance its scanning capabilities in the IP domain, as it currently lacks the functionality to resolve IPs to their corresponding domain names."
"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."
"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"We would like to see Windows-based sensors available in Qualys, as this would make the platform more versatile and support a broader range of environments."
"The specific domain file for Apache needs to be well-defined."
"It's not easy for an admin to check and decide if the email is good or not."
"HackerOne provides a "HackBot" which helps identify other relevant reports, including duplicates, public reports from other companies, etc. However, the functionality is limited and it would be nice to integrate it with broader services offered like auto responses, triggers, etc."
"Everything has become slower on HackerOne."
"Customer support can improve, as there are instances of ghosting that need to be addressed."
"One issue I've experienced is traffic. Many people try to participate when an opportunity with a bounty of around 1,000-15,000 dollars comes up. In this case, the first person to report the vulnerability gets the bounty. If a second person reports the same vulnerability, they are marked as duplicated instead of receiving some recognition. The second person also invested time finding the issue, so I think this can be improved."
"Triage response time is a significant issue. The response time and triage speed are not fast enough, and this is causing many people to leave HackerOne."
"The ability to view the conversation between the triagers and the programs will be really good."
"However, I reduced my rating by one mark because a proper internal triage team should be in place, not as a replacement for internal security controls."
"Sometimes new users don't receive invites just because they are new, despite potentially being very skilled hackers, so I feel new users should get more chances and opportunities."
 

Pricing and Cost Advice

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"TotalCloud's price is about right where I would expect it to be."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."
"The cost is high, but it meets our organizational needs."
"The solution provides affordable pricing for medium sized industries."
"The solution is free."
"The tool is open-source and free for bug bounty hunters."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
902,988 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
17%
Financial Services Firm
14%
Construction Company
8%
Comms Service Provider
7%
Construction Company
13%
Comms Service Provider
12%
Computer Software Company
10%
Financial Services Firm
8%
Manufacturing Company
12%
Comms Service Provider
12%
Financial Services Firm
10%
Computer Software Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise29
No data available
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise1
Large Enterprise7
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
Ask a question
Earn 20 points
What is your experience regarding pricing and costs for HackerOne?
I'm not very sure about pricing, setup costs, and licensing, as those are managed by our management team.
What needs improvement with HackerOne?
HackerOne can be improved, and the insights can be a little better. I chose a nine for my rating because it has very ...
What is your primary use case for HackerOne?
My main use case for HackerOne is bug bounties and getting paid through that platform. Companies like Fastify and Ora...
 

Also Known As

Qualys TotalCloud with FlexScan
ESET Mail Security
HackerOne Assets, HackerOne Pentesting Services, HackerOne Security Assessments, HackerOne Vulnerability Management
 

Overview

 

Sample Customers

Information Not Available
Information Not Available
Anthropic, Crypto.com, General Motors, GitHub, Goldman Sachs, Uber, and the U.S. Department of Defense
Find out what your peers are saying about ESET Cloud Apps Protection vs. HackerOne and other solutions. Updated: June 2026.
902,988 professionals have used our research since 2012.