No more typing reviews! Try our Samantha, our new voice AI agent.

FortiCNAPP vs Sysdig Monitor comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 5, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Vulnerability Management (11th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (8th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (6th)
FortiCNAPP
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
15
Ranking in other categories
Vulnerability Management (33rd), Container Security (26th), Cloud Workload Protection Platforms (CWPP) (17th), Cloud Security Posture Management (CSPM) (21st), Cloud-Native Application Protection Platforms (CNAPP) (17th), Compliance Management (9th)
Sysdig Monitor
Average Rating
8.0
Reviews Sentiment
6.2
Number of Reviews
4
Ranking in other categories
Container Monitoring (9th)
 

Mindshare comparison

Vulnerability Management Mindshare Distribution
ProductMindshare (%)
FortiCNAPP1.8%
Wiz4.5%
Qualys VMDR3.9%
Other89.8%
Vulnerability Management
Container Monitoring Mindshare Distribution
ProductMindshare (%)
Sysdig Monitor3.1%
Dynatrace23.3%
Datadog19.8%
Other53.8%
Container Monitoring
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
Mark Freeborough - PeerSpot reviewer
Client Manager at MLL Telecom Ltd
Network segmentation has strengthened access control and now streamlines automated threat response
The most valuable features in FortiCNAPP include robust network segmentation and restricting access to network assets. It also supports security measures by leveraging security fabrics for better enforcement and policy enforcement. FortiCNAPP integrates with SIEM solutions, and we offer different SIEM options that work with Fortinet and AlienVault, among others, providing multiple scenarios.FortiCNAPP's automated policy recommendations significantly help improve security measures as part of an overall service wrap. When deploying a Fortinet SD-WAN or network, these tools provide greater visibility to vulnerabilities and enhanced security on the network. It functions as a proactive tool, enabling me to identify threats quickly and automate responses.
Bharath Nadar - PeerSpot reviewer
Senior Staff Site Reliability Engineer at a tech vendor with 501-1,000 employees
Centralized host monitoring has reduced operational overhead and provides trusted dashboards
Sysdig Monitor could be improved, particularly regarding application monitoring. There are specific areas or features where improvement is needed, specifically in application-level monitoring. While other monitoring solutions provide APM capabilities, Sysdig Monitor does not and targets only host-based monitoring. Many applications require APM support, and we want to introduce OpenTelemetry into some applications to gain more insights, but with Sysdig Monitor, we could not implement this functionality, so we have to opt for solutions from other vendors for those applications. Beyond the APM and OpenTelemetry support limitations, I would appreciate seeing Sysdig Monitor offer a unified solution for all monitoring needs, including logging as well, eventually bringing whole observability under one roof. That would be ideal.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"TotalCloud provides the easiest and the best approach for cloud infrastructure management."
"I appreciate TotalCloud's real-time protection and remediation features. The remediation options include automated one-click remedies and custom changes that help manage vulnerabilities efficiently."
"I would definitely recommend Qualys TotalCloud to other customers."
"The best part I like is the on-demand scans."
"TruRisk Insights is the most important innovation they've released this year."
"The best features in Qualys TotalCloud include the total asset management of the cloud environment. It is very easy to export the report and see the vulnerabilities related to the cloud specifically."
"Qualys TotalCloud's most valuable feature is its agent versatility."
"Qualys TotalCloud has significantly reduced our workload in terms of managing risks, helping us to be more efficient and save substantial resources."
"The machine learning capability in Lacework FortiCNAPP is used for threat detection, and automated policy recommendation helps to improve my security measures in general."
"I find the cloud configuration compliance scanning mature. It generates a lot of data and supports major frameworks like ISO 27001 or SOC 2, providing reports and datasets. Another feature I appreciate is setting custom alerts for specific events. Additionally, I value the agent-based monitoring and scanning for compute nodes. It gives us deeper insights into our workloads and helps identify vulnerabilities across our deployed assets."
"What I personally appreciate about FortiCNAPP is that I think it is a good product and a good firewall because it usually offers many options for the company."
"FortiCNAPP is a competitive and robust solution, the only one in the IT sphere that addresses all quadrants in the Gartner Quadrants."
"The most valuable feature, from a compliance perspective, is the ability to use Lacework as a platform for multiple compliance standards. We have to meet multiple standards like PCI, SOC 2, CIS, and whatever else is out there. The ability to have reports generated, per security standard, is one of the best features for me."
"FortiCNAPP has positively impacted my organization by providing centralized visibility and consolidating our cloud security posture management, helping us identify misconfigurations and public accessibility issues, which allowed us to enhance IAM governance and visibility on vulnerabilities."
"The most valuable feature is Lacework's ability to distill all the security and audit logs. I recommend it to my customers. Normally, when I consult for other customers that are getting into the cloud, we use native security tools. It's more of a rule-based engine."
"For the most part, out-of-the-box, it tells you right away about the things you need to work on. I like the fact that it prioritizes alerts based on severity, so that you can focus your efforts on anything that would be critical/high first, moderate second, and work your way down, trying to continue to improve your security posture."
"Sysdig Monitor has positively impacted my organization by significantly reducing operational costs and improving our ability to monitor our systems effectively."
"The ability to stop/pause and capture logs when something happens is the most valuable feature."
"Docker containers are completely supported, kind of like "first class citizens"."
"Sysdig Monitor impressed me with its in-depth visibility into my infrastructure."
 

Cons

"The vulnerability part is good, but the policy compliance module needs improvement because it involves a lot of manual work. Specifically, the remediation part of the controls requires enhancements."
"We would like to see Windows-based sensors available in Qualys, as this would make the platform more versatile and support a broader range of environments."
"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."
"It has been working very well, but it would be helpful if the dashboard could generate reports tailored to specific compliance needs. For example, in India, we have to comply with RBI and SEBI guidelines. It w"
"The response part of the Cloud Detection and Response (CDR) module can be improved."
"An area for improvement would be to focus on risks related to AI, such as large language models and potential data leakage."
"The downside is only in container security, but it has not been a long time since they introduced these models."
"The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly."
"Visibility is lacking, and both compliance-related metrics and IAM security control could be improved."
"There are a couple of the difficulties we encounter in the realm of cybersecurity, or security as a whole, that relate to potentially limited clarity. Having the capacity to perceive the configuration aspect and having the ability to contribute to it holds substantial advantages, in my view. It ranks high, primarily due to its role in guaranteeing compliance and the potential to uncover vulnerabilities, which could infiltrate the system and introduce potential risks. I had been exploring a specific feature that captured my interest. However, just yesterday, I participated in a product update session that announced the imminent arrival of this feature. The feature involves real-time alerting. This was something I had been anticipating, and it seems that this capability is now being integrated, possibly as part of threat intelligence. While anomaly events consistently and promptly appear in the console, certain alerts tend to experience delays before being displayed. Yet, with the recent product update, this issue is expected to be resolved. Currently, a comprehensive view of all policies is available within the console. However, I want a more tailored display of my compliance posture, focusing specifically on policies relevant to me. For instance, if I'm not subject to HIPAA regulations, I'd prefer not to see the HIPAA compliance details. It's worth noting that even with this request, there exists a filtering mechanism to control the type of compliance information visible. This flexibility provides a workaround to my preference, which is why it's challenging for me to definitively state my exact request."
"Its integrations with third-party SIEMs can be better. That is one of the things that we discussed with them."
"However, the solution could be more user-friendly and intuitive."
"The configuration and setup of alerts should be easier. They should make it easier to integrate with systems like Slack and Datadog. I didn't spend too much time on it, but to me, it wasn't as simple as the alerting that I've seen on other systems."
"I would like to see a remote access assistance feature. And the threat-hunting platform could be better."
"Policy implementation is quite complex, and the stability will take more time for the solutions."
"It is needs to automate the actions to take when an alert is triggered."
""Events" reporting (errors, crashes, etc.) is not clear at all in a Mesos environment (i.e., it's not clear what specific container is the one that went down). In a Docker Compose environment, it may be way better."
"I had difficulty installing Sysdig Monitor on Windows."
"Sysdig Monitor could be improved, particularly regarding application monitoring."
 

Pricing and Cost Advice

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"The cost is high, but it meets our organizational needs."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"The licensing fee was approximately $80,000 USD, per year."
"The pricing has gotten better. That scenario was somewhat unstable. They have a rather interesting licensing structure. I believe you get 200 resources per "Lacework unit." It was difficult, in the beginning, to figure out exactly what a "resource" was... That was a problem until about a year or so ago. They have improved it and it has stabilized quite a bit."
"It is slightly expensive. It depends on how big your environment is, but it is expensive. Right now, we are spending a lot of money. We have covered all of the cloud providers and most of our colocation facilities as well, so we cannot complain, but it is slightly expensive. It is not super expensive."
"My smaller deployments cost around 200,000 a year, which is probably not as expensive as Wiz."
"Sysdig Monitor is not expensive."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
900,125 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
19%
Financial Services Firm
13%
Construction Company
7%
Comms Service Provider
6%
Financial Services Firm
10%
Computer Software Company
9%
Construction Company
8%
University
7%
Financial Services Firm
14%
Outsourcing Company
12%
Construction Company
11%
Manufacturing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise29
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise5
No data available
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
What is your experience regarding pricing and costs for Lacework?
The pricing is a mediator compared to other products; it is not that much higher and not much lower than other produc...
What needs improvement with Lacework?
Policy implementation is quite complex, and the stability will take more time for the solutions. There is definitely ...
What is your primary use case for Lacework?
FortiCNAPP is mainly used from a security point of view. Some VPNs charge for their solutions, but Fortinet provides ...
What is your experience regarding pricing and costs for Sysdig Monitor?
My experience with pricing, setup cost, and licensing was good. Before moving forward with Sysdig Monitor, we analyze...
What needs improvement with Sysdig Monitor?
Sysdig Monitor could be improved, particularly regarding application monitoring. There are specific areas or features...
What is your primary use case for Sysdig Monitor?
Sysdig Monitor has become essential for overseeing a vast array of hosts and EC2 instances across our environment. We...
 

Also Known As

Qualys TotalCloud with FlexScan
Polygraph, FortiCNP, Lacework
No data available
 

Overview

 

Sample Customers

Information Not Available
J.Crew, AdRoll, Snowflake, VMWare, Iterable, Pure Storage, TrueCar, NerdWallet, and more.
SAP Concur, Goldman Sachs, Worldpay by FIS, Cisco, Experian, Home Office, Societe Generale, Sunrun. More here: https://sysdig.com/customers/
Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: June 2026.
900,125 professionals have used our research since 2012.