ExtraHop Reveal(x) 360 vs Tenable Cloud Security comparison

ExtraHop Reveal(x) 360 vs. Tenable Cloud Security

Download the complete report

Helped 902,988 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of July 2026, in the Container Security category, the mindshare of Qualys TotalCloud is 1.5%, up from 0.9% compared to the previous year. The mindshare of ExtraHop Reveal(x) 360 is 0.5%, up from 0.2% compared to the previous year. The mindshare of Tenable Cloud Security is 1.9%, up from 1.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Mindshare Distribution
Product	Mindshare (%)
Qualys TotalCloud	1.5%
Tenable Cloud Security	1.9%
ExtraHop Reveal(x) 360	0.5%
Other	96.1%

Container Security

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

reviewer2857197

Lead IT Service Analyst at a manufacturing company with 10,001+ employees

Cloud-native threat detection has improved incident investigations and now reduces breach risk

We have covered most of the features over the past three years and look forward to discovering more as we work closely with the ExtraHop technical team, who are open to sharing what they have developed. Pricing is on the higher side, typically based on load, volume of traffic, and deployment scale. The advanced detection capabilities provide significant value in reducing investigation time, making the licensing and pricing acceptable for larger organizations. ExtraHop Reveal(x) 360 has undeniably improved our security posture, reduced manual investigation efforts, and facilitated fast threat detection mechanisms, which all help prevent costly potential breaches in enterprise environments. ExtraHop Reveal(x) 360's SaaS environment is well-suited for cloud, on-premises, and hybrid environments, effectively addressing real-life scenarios involving east-west and north-south traffic. The platform is recommended for large organizations in need of comprehensive detection capabilities. I would rate this product overall as an 8 out of 10.

Read full review

DragosCernat

Information Security Architect at WSP

Has significantly improved proactive monitoring through automated asset discovery and seamless integration with cloud environments

Making the system smarter would be beneficial. Adding modules for integration with AWS and Azure would be helpful. Adding capabilities for the scanner to automatically pick up changes and add assets automatically would be valuable. When discussing a big company, it is mandatory to have tools that will assist us rather than waiting for manual input to add hosts. Adding assets manually is prone to mistakes. Humans might forget to add an asset or make errors when adding multiple assets. Taking the human element out of the context and making it more streamlined is the future for security. The human should be involved where expertise is needed, such as analysis and decision-making. Currently, with resource constraints, we need tools to collect and aggregate data, eliminate false positives as much as possible, and present relevant information to employees for action.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Qualys TotalCloud's most valuable features are its cloud security posture management, Kubernetes, and container security capabilities."

"The best features in Qualys TotalCloud include the total asset management of the cloud environment. It is very easy to export the report and see the vulnerabilities related to the cloud specifically."

"The dashboards are particularly valuable as they offer a comprehensive view of the environment, highlighting any misconfigurations."

"The most valuable feature is the consolidated information that it provides from various platforms."

"If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."

"I would definitely recommend Qualys TotalCloud to other customers."

"I found the initial setup user-friendly."

"TruRisk Insights is the most important innovation they've released this year."

More Qualys TotalCloud pros

"It is very easy to collect and handle data in ExtraHop Reveal(X) Cloud. Integration with Big Data is also easy. Many of our customers integrate it with Big Data platforms like Splunk or Elastic. It is also easy to handle and easy to understand."

"Their technical support is more effective and of better quality than other competitors."

"ExtraHop Reveal(x) 360 has positively impacted my organization by helping us detect abnormal activity on our network that we could not detect through our SIEM or XDR platform."

"It stands out for its intuitive and efficient user interface, robust detection capabilities with minimal false positives, and the ability to handle encrypted traffic, making it a valuable asset for network security and management."

"ExtraHop Reveal(x) 360 has undeniably improved our security posture, reduced manual investigation efforts, and facilitated fast threat detection mechanisms, which all help prevent costly potential breaches in enterprise environments."

"It is scalable."

"If you have multi-cloud tenancy using AWS and Azure, you can have a single dashboard where you can onboard all the cloud infrastructure and have visibility into it."

"Tenable Cloud Security has positively impacted my organization with risk reduction and compliance."

"The product's visibility and remediation work fine for me."

"The tool alerts us on depreciating performance or deficiencies of our web application. It helps us react on time."

"Scanning and reporting are the most valuable features of Tenable Cloud Security"

"The solution’s vulnerability management feature has helped us identify and mitigate risks well."

"Ermetic can provide super visibility for our cloud environment (we are using AWS), the dashboard is simple to use, the findings provide all of the information you require, it provides detection and remediation, and creating a Jira ticket from a finding is just one click away."

"Tenable Cloud Security excels in vulnerability detection, one of its strongest features. Another valuable feature is software composition analysis, which highlights and automates the detection of security flaws. Additionally, their knowledge base is excellent; if anything goes wrong, they provide clear guidance on what needs to be done to address specific vulnerabilities."

More Tenable Cloud Security pros

Cons

"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."

"It has been working very well, but it would be helpful if the dashboard could generate reports tailored to specific compliance needs. For example, in India, we have to comply with RBI and SEBI guidelines. It w"

"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."

"To improve the user experience, reporting could be simplified for better comprehension by end users and project managers, facilitating issue resolution."

"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."

"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."

"Two areas for improvement in Qualys TotalCloud are the speed of the public cloud platform and vulnerability detection."

"Qualys TotalCloud has the potential to improve by integrating a hybrid platform for comprehensive management of both on-premises and cloud infrastructures."

More Qualys TotalCloud cons

"They can include integration with SAP. Currently, no vendor provides network performance monitoring in the SAP market. It is a very big market. We have around 400 customers for SAP in Korea. In the USA, there are more than 10,000 customers."

"There needs to be more support."

"I would like to see ExtraHop Reveal(x) 360 improved by integrating XDR features with NDR."

"One challenge with ExtraHop Reveal(x) 360 is its pricing, which tends to be comparatively high in the marketplace."

"Their professional service can be improved."

"A drawback includes bucket storage limitations for payload data, necessitating timely extraction for thorough investigations."

"I do think there might be room for more integrations. This could allow for further customization and flexibility, essentially offering different functionality options to accommodate various budgets."

"Ermetic needs to improve its security scanning. I would like to see more dynamic graphical forms."

"The product must provide more features."

"We still maintain Tenable Cloud Security but have reduced the number of licenses. We now use it occasionally to validate specific items rather than monitoring the entire surface, for which we use Element."

"I have faced several bug incidents with the solution"

"Tenable needs to offer a patch-based solution since it is an area where the tool lacks a bit."

"If Tenable Cloud Security offers a complete Cnapp solution with CWP, CIEM, and Waap security, it will be able to compete with other competitors."

"There is a need for the support team to improve their response time since it is one of the areas where the product's technical team has certain shortcomings."

More Tenable Cloud Security cons

Pricing and Cost Advice

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"The cost is high, but it meets our organizational needs."

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

"Qualys TotalCloud is expensive."

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

More Qualys TotalCloud pricing and cost advice

"When compared to other solutions, it aligns with the market average, indicating a competitive pricing level."

"The tool's pricing is fair."

"The tool's price is good compared to other brands. The tool's subscription is for a year."

"There is a need to opt for a subscription-based pricing model to use Tenable Cloud Security. I rate the product price an eight on a scale of one to ten, where one is low price and ten is high price."

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

902,988 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

17%

Financial Services Firm

14%

Construction Company

Comms Service Provider

Financial Services Firm

13%

Construction Company

Manufacturing Company

Comms Service Provider

Government

11%

Financial Services Firm

10%

Manufacturing Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	4
Large Enterprise	29

No data available

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	2
Large Enterprise	5

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

What needs improvement with Qualys TotalCloud?

Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...

What is your primary use case for Qualys TotalCloud?

Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...

What needs improvement with Tenable Cloud Security?

Ask a question

Earn 20 points

Making the system smarter would be beneficial. Adding modules for integration with AWS and Azure would be helpful. Ad...

What is your primary use case for Tenable Cloud Security?

We had other solutions that we used. One solution was that we did not have something exactly similar to what Element ...

What is your experience regarding pricing and costs for Ermetic CSPM?

I wasn't involved with the pricing, setup cost and licensing for Tenable Cloud Security.

Microsoft Defender for Cloud vs Qualys TotalCloud

Comparisons

Wiz vs Qualys TotalCloud

Compared 11% of the time

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

JupiterOne vs Qualys TotalCloud

Compared 5% of the time

Nucleus Security vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Vectra AI vs ExtraHop Reveal(x) 360

Compared 11% of the time

Fortinet FortiGate vs ExtraHop Reveal(x) 360

Compared 7% of the time

NetWitness NDR vs ExtraHop Reveal(x) 360

Compared 7% of the time

ExtraHop Reveal(x) vs ExtraHop Reveal(x) 360

Compared 6% of the time

TrendAI Vision One – Cloud Security vs ExtraHop Reveal(x) 360

Compared 6% of the time

More ExtraHop Reveal(x) 360 Competitors

Wiz vs Tenable Cloud Security

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs Tenable Cloud Security

Compared 6% of the time

Orca Security vs Tenable Cloud Security

Compared 5% of the time

FortiCNAPP vs Tenable Cloud Security

Compared 5% of the time

Plerion vs Tenable Cloud Security

Compared 5% of the time

More Tenable Cloud Security Competitors

Product Reports

Qualys TotalCloud

Download Qualys TotalCloud product report

Intrusion Detection and Prevention Software (IDPS)

Download ExtraHop Reveal(x) 360 product report

Tenable Cloud Security

Download Tenable Cloud Security product report

Also Known As

Qualys TotalCloud with FlexScan

ExtraHop Reveal(X) Cloud, Reveal(X) Cloud

Ermetic, Ermetic Identity Governance for AWS

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

ExtraHop Reveal(x) 360 offers advanced network detection and response capabilities, designed to provide real-time situational awareness and threat detection across hybrid and multi-cloud environments.

Built to meet the demands of modern enterprises, ExtraHop Reveal(x) 360 enhances visibility into network activities, delivering comprehensive security insights. It uses high-speed data analysis to identify anomalous behaviors and potential threats, helping security teams respond effectively. With centralized visibility, it ensures quick detection and thorough investigation of threats within complex infrastructures, including cloud, edge, and on-premises environments.

What key features does ExtraHop Reveal(x) 360 offer?

Real-Time Threat Detection: Monitors network traffic in real-time for immediate threat identification.
Centralized Visibility: Offers a unified dashboard for observing activities across diverse environments.
Automated Response: Enables predefined actions to mitigate threats swiftly without manual intervention.
Integration Capabilities: Seamlessly integrates with tools for enhanced incident management.
Advanced Analytics: Utilizes machine learning to detect sophisticated threats promptly.

What benefits should users look for in reviews of ExtraHop Reveal(x) 360?

Improved Security Posture: Evidence of enhanced organizational security through faster threat detection and response.
Operational Efficiency: Reduction in time and effort for IT teams due to automated processes.
Scalability: Flexibility to expand with organizational growth and technology changes.
Cost-Effectiveness: Attractive pricing compared to functionality and outcomes offered.

ExtraHop Reveal(x) 360 is implemented across industries such as financial services, healthcare, and retail, where robust security measures are paramount. In these sectors, the capabilities of ExtraHop Reveal(x) 360 align with the need for secure handling of sensitive data and compliance with industry regulations, providing valuable protection and detection capabilities.

ExtraHop Networks

Tenable Cloud Security is a comprehensive solution designed to help organizations secure their cloud environments across various platforms, including AWS, Azure, and Google Cloud. It offers continuous visibility, compliance management, and threat detection to ensure that cloud infrastructure and applications are protected from vulnerabilities and misconfigurations.

Tenable Cloud Security exemplifies a comprehensive Cloud-Native Application Protection Platform (CNAPP) by providing a unified solution that covers the entire cloud security lifecycle, from development to runtime. This platform is designed to address vulnerabilities, misconfigurations, threats, and compliance risks across multi-cloud environments, making it an essential tool for organizations adopting cloud-native architectures. In practice, Tenable Cloud Security integrates security into the development process through its shift-left approach, particularly with Infrastructure as Code (IaC) security. This ensures that security measures are embedded early in the development lifecycle, allowing teams to identify and mitigate vulnerabilities before they reach production. Once in production, the platform continues to provide real-time visibility into cloud environments, enabling continuous monitoring and proactive threat detection.

The solution's comprehensive protection spans various aspects of cloud security, including the identification and remediation of misconfigurations, automated compliance management, and advanced threat intelligence. By automating these processes, Tenable Cloud Security reduces the manual effort required to manage cloud security, freeing up resources for more strategic initiatives.

What are the key features of Tenable Cloud Security?

Unified Platform: Covers the entire cloud security lifecycle, from development to runtime, providing comprehensive protection.
Shift-Left Approach with IaC Security: Integrates security early in the development process, ensuring that vulnerabilities are caught and remediated before deployment.
Continuous Monitoring: Offers real-time visibility and monitoring of cloud environments, enabling proactive threat detection and response.
Automation: Streamlines security operations, reducing the need for manual intervention and increasing operational efficiency.
Comprehensive Threat and Compliance Management: Identifies and mitigates vulnerabilities, misconfigurations, and compliance risks across multi-cloud environments.

What are the benefits of using Tenable Cloud Security?

Improved Security Posture: Early detection and remediation of vulnerabilities lead to a stronger overall security posture.
Operational Efficiency: Automation reduces the workload on security teams, allowing them to focus on higher-priority tasks.
Risk Reduction: Proactively identifies and addresses risks before they impact production environments.
Simplified Compliance: Helps organizations meet and maintain compliance with industry standards, reducing the complexity and cost of audits.

Tenable Cloud Security is particularly valuable in industries with stringent regulatory requirements, such as finance, healthcare, and retail. For example, in the financial sector, it helps organizations ensure compliance with regulations like PCI-DSS while safeguarding sensitive data across cloud environments.

In summary, Tenable Cloud Security is a robust CNAPP solution that integrates security throughout the cloud lifecycle, providing comprehensive protection and operational efficiency for cloud-native environments.

Tenable

Sample Customers

Information Not Available

Wizards of the Coast

Tyler Technologies, Bilfinger, BarkBox, MongoDB, airSlate, Adama, Latch, Cloudinary, Riskified, AppsFlyer, IntelyCare, Aidoc, 42Dot, and more.

ExtraHop Reveal(x) 360 vs. Tenable Cloud Security