Try our new research platform with insights from 80,000+ expert users

FortiCNAPP vs Qualys TotalCloud comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 18, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.6
SentinelOne Singularity Cloud boosts efficiency and saves costs by automating tasks, reducing vulnerabilities, and improving security compliance.
Sentiment score
6.1
FortiCNAPP enhances security, saves time and costs by automating alerts and reducing manual efforts, justifying its investment.
Sentiment score
6.8
Qualys TotalCloud enhances efficiency, reducing manual effort and costs, while improving workflow, ROI, and proactive vulnerability management.
The detailed information PingSafe gives about how to fix vulnerabilities reduces the time spent on remediation by about 70 to 80 percent.
Security and Compliance Manager at Bidgely
After implementing SentinelOne, it takes about five to seven minutes.
Cloud engineer at a construction company with 5,001-10,000 employees
Our ability to get in and review our vulnerability stance, whether daily, monthly, weekly, or whatever it might be, has drastically improved over our prior provider.
IT Support Specialist at a non-tech company with 201-500 employees
It has saved about 90% of our time.
Senior Consultant at a consultancy with 10,001+ employees
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
Security Manager at a consultancy with 10,001+ employees
CallStream helps us integrate and automate tasks.
Senior Security Consultant at CyberNxt Solutions LLP
 

Customer Service

Sentiment score
7.8
SentinelOne Singularity Cloud Security's service is praised for support, insights, and staff, though response times and knowledge vary.
Sentiment score
7.9
FortiCNAPP’s customer service is praised for responsiveness, proactive communication, and efficient issue resolution via Slack and email.
Sentiment score
7.4
Qualys TotalCloud's customer service is mostly praised for responsiveness, though some users report delays and varying staff expertise.
When we send an email, they respond quickly and proactively provide solutions.
Security and Compliance Manager at Bidgely
They took direct responsibility for the system and could solve queries quickly.
Senior DevOps Engineer at a tech services company with 501-1,000 employees
Having a reliable team ready and willing to assist with any issues is essential.
Director, DevOps at Relay Network
Technical support from Fortinet is good; I get feedback and responses quickly.
Software Engineer at a university with 5,001-10,000 employees
They are helpful, respond to my queries, and can answer any question.
Developer at a consultancy with 10,001+ employees
Qualys's tech support is highly responsive, providing multiple ways to interact with them.
Service Manager, Security Operations at CDA IT SOLUTIONS
Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA.
Works at a consultancy with 10,001+ employees
 

Scalability Issues

Sentiment score
8.2
SentinelOne Singularity Cloud Security is scalable, user-friendly, effective, and integrates well, though improvements in manual processes are needed.
Sentiment score
7.5
FortiCNAPP is praised for scalability and adaptability, with positive integration across environments, but challenges include high-traffic scenarios.
Sentiment score
8.1
Qualys TotalCloud offers seamless scalability for businesses, effectively supporting growth, complex environments, and diverse use cases efficiently.
I would rate it a 10 out of 10 for scalability.
IT Engineer at a venture capital & private equity firm with 1,001-5,000 employees
Scalability is no longer a concern because Cloud Native Security is a fully cloud-based resource.
CISO at a computer software company with 201-500 employees
I would rate the scalability of PingSafe 10 out of 10.
Sr DevOps Engineer at a media company with 51-200 employees
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
CIO at a venture capital & private equity firm with 11-50 employees
Our organization currently uses it to manage over 1200 web applications.
Analyst, Information Security at Infosys
It is absolutely scalable, and I would rate its scalability as nine out of ten.
retired at a consultancy with 10,001+ employees
 

Stability Issues

Sentiment score
8.2
SentinelOne Singularity Cloud Security is stable with occasional minor UI glitches, seamlessly integrates with AWS, and is highly rated.
Sentiment score
7.4
FortiCNAPP is stable, with occasional minor detection issues and lags, yet frequent updates maintain steady performance.
Sentiment score
8.4
Qualys TotalCloud offers highly stable service with minimal downtime, swift bug fixes, and continuous performance both online and offline.
SentinelOne Singularity Cloud is incredibly reliable.
Security Analyst at Intersistemi Italia s.p.a.
We contacted Cloud Native Security, and they addressed it in a day.
DevSecOps Engineer at a tech company with 1,001-5,000 employees
The only downtime we had was when switching from V1 to V2 but it was smooth.
Cloud Security Specialist at a insurance company with 10,001+ employees
Overall, the support provided has been excellent.
Analyst, Information Security at Infosys
It is a stable solution, which is why we chose it.
CIO at a venture capital & private equity firm with 11-50 employees
Continuous monitoring is crucial to ensure system stability and avoid vulnerabilities or threats.
Developer at a consultancy with 10,001+ employees
 

Room For Improvement

SentinelOne Singularity Cloud needs improvements in search, cost, integration, user experience, and security features to enhance usability.
FortiCNAPP requires improvements in integration, security features, user interface, alert management, and data visibility for enhanced user experience.
Qualys TotalCloud faces challenges in usability, security features, and enhancement of integration, compliance, and vulnerability management capabilities.
If they can merge Kubernetes Security with other modules related to Kubernetes, that would help us to get more modules in the current subscription.
IT Engineer at a venture capital & private equity firm with 1,001-5,000 employees
As organizations move to the cloud, a cloud posture management tool that offers complete cloud visibility becomes crucial for maintaining compliance.
CISO at a computer software company with 201-500 employees
I would also like to see Cloud Native Security offer APIs that allow us to directly build dashboards within the platform.
Senior Cybersecurity Engineer at a computer software company with 11-50 employees
The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly.
Software Engineer at a university with 5,001-10,000 employees
Ideally, the scanner should automatically detect and scan all subdomains, even if not explicitly defined, ensuring comprehensive vulnerability assessment.
Analyst, Information Security at Infosys
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Project Lead at Persistent Systems
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
Senior Information Security Engineer at a consultancy with 10,001+ employees
 

Setup Cost

SentinelOne Singularity Cloud Security offers flexible, modular pricing, deemed fair and competitive, with discounts enhancing affordability and value.
FortiCNAPP pricing is flexible and stable, with costs ranging from $80,000 to $200,000 annually, not seen as prohibitive.
Qualys TotalCloud offers competitive pricing with valuable features, appealing to enterprises but less accessible to smaller businesses.
With very little negotiation involved, we just let them know what we could pay and they were willing to meet us at slightly above what we paid with Sophos, which was still very fair for what we were looking at.
IT Support Specialist at a non-tech company with 201-500 employees
There are some tools that are double the cost of Cloud Native Security.
IT Engineer at a venture capital & private equity firm with 1,001-5,000 employees
I recall Cloud Native Security charging a slightly higher premium previously.
Senior Cybersecurity Engineer at a computer software company with 11-50 employees
Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive.
Senior Manager at a financial services firm with 10,001+ employees
Pricing is managed by our finance team; however, Qualys TotalCloud offers cost-effective licensing flexibility.
IT Manager at a consultancy with 10,001+ employees
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
Vice President at Inspira Enterprise
 

Valuable Features

SentinelOne Singularity Cloud offers easy usability, automation, and integrations, enhancing security with real-time detection and response capabilities.
FortiCNAPP excels in compliance, threat detection, integration, and automation, enhancing security and efficiency in multi-cloud environments.
Qualys TotalCloud offers robust vulnerability management, real-time protection, and efficient automation for streamlined security and compliance processes.
This helps visualize potential attack paths and even suggests attack paths a malicious actor might take.
Security Engineer-DevSecOps at a computer software company with 51-200 employees
The infrastructure-as-code feature is helpful for discovering open ports in some of the modules.
DevSecOps Engineer at a tech company with 1,001-5,000 employees
This tool has been helpful for us. It allows us to search for vulnerabilities and provides evidence directly on the screen.
Cloud Security Specialist at a insurance company with 10,001+ employees
The machine learning capability in Lacework FortiCNAPP is used for threat detection.
Software Engineer at a university with 5,001-10,000 employees
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
Works at a consultancy with 10,001+ employees
It will help cybersecurity professionals monitor the cloud and find vulnerabilities.
Developer at a consultancy with 10,001+ employees
We are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs.
Senior Consultant at a consultancy with 10,001+ employees
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Vulnerability Management
4th
Ranking in Container Security
3rd
Ranking in Cloud Workload Protection Platforms (CWPP)
4th
Ranking in Cloud Security Posture Management (CSPM)
3rd
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
3rd
Average Rating
8.6
Reviews Sentiment
7.7
Number of Reviews
114
Ranking in other categories
Cloud and Data Center Security (3rd), Compliance Management (2nd), AI Software Development (4th), AI Observability (3rd)
FortiCNAPP
Ranking in Vulnerability Management
44th
Ranking in Container Security
31st
Ranking in Cloud Workload Protection Platforms (CWPP)
20th
Ranking in Cloud Security Posture Management (CSPM)
27th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
18th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
11
Ranking in other categories
Compliance Management (10th)
Qualys TotalCloud
Ranking in Vulnerability Management
10th
Ranking in Container Security
12th
Ranking in Cloud Workload Protection Platforms (CWPP)
8th
Ranking in Cloud Security Posture Management (CSPM)
8th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
7th
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
33
Ranking in other categories
SaaS Security Posture Management (SSPM) (1st)
 

Mindshare comparison

As of December 2025, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of SentinelOne Singularity Cloud Security is 4.7%, up from 2.5% compared to the previous year. The mindshare of FortiCNAPP is 3.0%, up from 2.8% compared to the previous year. The mindshare of Qualys TotalCloud is 1.6%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Cloud Security4.7%
Qualys TotalCloud1.6%
FortiCNAPP3.0%
Other90.7%
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

SC
Information Security Engineer at DataVigilant Infotech
Enables us to prioritize and effectively address critical security issues
Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.
SK
Software Engineer at a university with 5,001-10,000 employees
Improving security insights has been helpful but inconsistent vulnerability tracking needs attention
The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly. Regarding improvements, the vulnerability part, recent changes with user management, and Fortinet IM coming into place, which is not helpful at all because it cuts out the automation part, are the most important things. Lacework FortiCNAPP should have a new clean UI and ease of access for the users as that should be the main concern. There are limitations regarding the scalability of Lacework FortiCNAPP. There are also more limitations with integrations like GitHub or any other pipeline, CI/CD, or ISD. It is glitchy and works well only sometimes, and most of the time, the reports or other things are not properly calculated or circulated with the teams.
AN
Cyber Security Specialist at UBS Financial
A centralized tool for vulnerability and misconfiguration management in a multiple cloud environment
Qualys TotalCloud provides written explanations to help guide the remediation paths and eliminate cyber risk. We are using TruRisk for the remediations. The TruRisk shows anything critical, and we can then focus on that. We also assess manually whether an asset is a critical target or not. Qualys TotalCloud provides a single, prioritized view of risk. We are using CIS-CAT standards to harden our clouds, such as AWS, Google Cloud, and Azure. We are able to analyze the scans and identify which policies have failed and how we can remediate them. We can customize policies as per our organization's requirements. That is very helpful for us. With the TruRisk Insights feature, security has significantly improved. In six months of using it, we see that everything is under control. We've solved many problems related to asset management, cloud configuration, and the new asset identification. If an application team has onboarded any cloud asset, we can see that. We have that information now.
report
Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
14%
Manufacturing Company
10%
Government
5%
Computer Software Company
13%
Financial Services Firm
13%
Manufacturing Company
7%
University
5%
Financial Services Firm
16%
Computer Software Company
12%
Manufacturing Company
11%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise20
Large Enterprise53
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise4
Large Enterprise4
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise2
Large Enterprise23
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
I think the pricing of SentinelOne Singularity Cloud Security is a bit high.
What needs improvement with PingSafe?
One area that could be improved in SentinelOne Singularity Cloud Security is their policies; the way they have config...
What is your experience regarding pricing and costs for Lacework?
My smaller deployments cost around 200,000 a year, which is probably not as expensive as Wiz.
What needs improvement with Lacework?
The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly. ...
What is your primary use case for Lacework?
The major use case for Lacework FortiCNAPP is for security. I'm using it for security internally for my company.
What is your experience regarding pricing and costs for Qualys TotalCloud?
Qualys TotalCloud's pricing is fair. It is not expensive and is affordable.
What needs improvement with Qualys TotalCloud?
I sometimes have difficulty detecting or uninstalling certain versions of applications, which I have to do manually. ...
What is your primary use case for Qualys TotalCloud?
I use Qualys TotalCloud for vulnerability as a service, vulnerability management as a service. I use it to check my d...
 

Also Known As

PingSafe
Polygraph, FortiCNP, Lacework
Qualys TotalCloud with FlexScan
 

Overview

 

Sample Customers

Information Not Available
J.Crew, AdRoll, Snowflake, VMWare, Iterable, Pure Storage, TrueCar, NerdWallet, and more.
Information Not Available
Find out what your peers are saying about FortiCNAPP vs. Qualys TotalCloud and other solutions. Updated: December 2025.
879,259 professionals have used our research since 2012.