Fortra Tripwire IP360 vs The NodeZero Platform by Horizon3.ai comparison

Fortra Tripwire IP360 vs. The NodeZero Platform by Horizon3.ai

Download the complete report

Helped 902,988 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of July 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.1%, up from 1.0% compared to the previous year. The mindshare of Fortra Tripwire IP360 is 0.7%, up from 0.4% compared to the previous year. The mindshare of The NodeZero Platform by Horizon3.ai is 1.3%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management Mindshare Distribution
Product	Mindshare (%)
The NodeZero Platform by Horizon3.ai	1.3%
Qualys TotalCloud	1.1%
Fortra Tripwire IP360	0.7%
Other	96.9%

Vulnerability Management

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

Corey Cole

Service Coordinator - Technology Security at a government with 10,001+ employees

The solution helps users to manage their entire IP range, but it's unreliable and very expensive to maintain

Only the administrator was using the product. He used it to read reports as part of our compliance programs. It wasn't heavily used by a lot of users. The tool comes in at a large scale, and we tried to scale it down. The scaling did not apply to us. It was neither difficult nor easy. I rate the scalability a five out of ten. We had some challenges while scaling it down. It could do 10,000 devices, and we wanted to use it for ten devices. The process was difficult and expensive. We did not need the product anymore.

Read full review

Brent Hamlin

Infrastructure Manager at a construction company with 501-1,000 employees

Continuous threat scanning has improved remediation time and strengthened executive reporting

The best features that The NodeZero Platform by Horizon3.ai offers include the automated scans, which are great to use; you set it, scope it, and let it go, which works really well. The executive reporting feature is impactful for me as a manager, providing a strong foundation to give quarterly and yearly reports to our executives and board to see the state of our infrastructure from a security standpoint. The level of detail and clarity in the executive reports from The NodeZero Platform by Horizon3.ai absolutely helps me communicate effectively with leadership. They are detailed enough for me to extract the necessary information tailored for the executives and to provide a broader perspective on our mitigation efforts or accepted risk stance and where additional controls exist. The NodeZero Platform by Horizon3.ai has positively impacted my organization by giving us a better continuous picture of our security posture, what's exploitable, and what can be used against the organization. It allows us to run scans whenever needed, unlike a single third-party system that only provides a snapshot in time; our processes must be ongoing as the security landscape is dynamic. NodeZero's endpoint security effectiveness feature impacts my understanding of potential security threats by providing a clear picture of both the external and internal landscapes within my organization, enabling me to prioritize and adjust as needed for vulnerabilities such as WordPress plugin issues or user enumerations and software code version assessments. I have built The NodeZero Platform by Horizon3.ai into our weekly and monthly workflows for security CI/CD, and we scan our externally accessible assets every week to address anything quickly if it comes up. That includes our firewalls, websites, and anything that is an external web server, which we scan weekly, while the monthly scans are for internal systems that feed our security CI/CD pipeline, enabling us to action across and prioritize any vulnerabilities caught by The NodeZero Platform by Horizon3.ai.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."

"Its dashboards are brilliant. It provides in-depth insights."

"The most valuable feature of Qualys TotalCloud is the visibility it provides."

"With TotalCloud, we can scan through the API. If we are not able to deploy cloud agents on the machine, we can use the API."

"Qualys TotalCloud has significantly reduced our workload in terms of managing risks, helping us to be more efficient and save substantial resources."

"While automatic inventory detection upon connection is a helpful feature, a truly valuable capability would be assessing an environment's security posture against Azure and CIS best practices."

"I would definitely recommend Qualys TotalCloud to other users."

"One of Qualys' best features is its categorization, which allows us to see the types of assets, their security postures, and the AI-powered version of the tool."

More Qualys TotalCloud pros

"We could manage our entire IP range with the solution."

"Tripwire is one of the most mature in terms of companies, suites, support, everything, much more than any other product."

"It's become the pinnacle point for anything that enters the network or anything that's passing through to production to first be affected by IP360, hardened, and up to standard. For our integrity management, one was deployed in the bank about two years ago and that's still going to expand the usage and the product itself. That will go hand in hand with training and expanding the product as for where it's deployed."

"The company probably chose this solution because they thought that they would be getting the best bang for their buck."

"This product detects vulnerabilities which exist in the environment, and provides enough information that allows for remediation, thereby securing the environment."

"Tripwire IP360 is a very stable solution."

"It has enhanced the security program by ensuring that all external-facing systems are scanned on a routine basis."

"Tripwire IP360 helps me to discover most of the vulnerabilities, and I like the way that it prioritizes these vulnerabilities, as it allows me to focus on the most important ones first and then follow up with the rest."

"The NodeZero Platform by Horizon3.ai has positively impacted my organization by catching vulnerabilities and exploits that we wouldn't otherwise be able to find as easily or as quickly, so I'd say it helps better our cybersecurity posture."

"Honestly, it's one of the most transformational technologies we've implemented in our company."

"The NodeZero Platform by Horizon3.ai has positively impacted our organization by definitely increasing our security posture significantly."

"Right now, using it for networks is great, and you could really do a lot with their continuous testing, which I thought was a great feature."

"My favorite feature about The NodeZero Platform is that it's autonomous, and it truly delivers on that promise—it can be set and forgotten while it performs its tasks, and it does exactly what it claims to do."

"Otherwise, the solution itself is very fine and I would recommend it as an MSP partner or as a user of the tool to pretty much any company."

"I rate the stability of the NodeZero Platform a ten out of ten."

"We experienced a threat that could have severely crippled us, but we were able to shut it down before it escalated, thanks to internal vulnerability testing and addressing critical vulnerabilities using their tool."

More The NodeZero Platform by Horizon3.ai pros

Cons

"Qualys TotalCloud needs to enhance its scanning capabilities in the IP domain, as it currently lacks the functionality to resolve IPs to their corresponding domain names."

"Regarding technical support from Qualys, they respond, but the response time can be too long. Sometimes we need to wait weeks for solutions to simple questions."

"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."

"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."

"Although TotalCloud is a helpful tool, some of its advanced features are still under development."

"The support process is inefficient due to the excessive number of replies required when submitting tickets."

"To improve the user experience, reporting could be simplified for better comprehension by end users and project managers, facilitating issue resolution."

"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."

More Qualys TotalCloud cons

"We would like to have better reporting capabilities and for them to be more granular."

"The reporting functions can use improvement."

"For IP360, unfortunately, scans for certain vulnerabilities often cause issues, as they are mainly false positive."

"We need to dedicate time and resources to keep it running."

"If you are looking for better reporting capabilities and vulnerability tracking over time for remediation purposes, then this is not the best solution."

"The reporting functions can use improvement. There is room for growth because reporting functions differ a lot depending on what you're going to output. It depends on whether it's for technical or senior management and how it's interpreted. There could be growth within the reporting functionality side."

"I am not very impressed by the technical support."

"The NodeZero Platform by Horizon3.ai can be improved in some ways, particularly regarding the test scan sometimes."

"One of the areas where improvement is needed is in the visibility and reporting for large enterprises."

"I think customizability is one area of The NodeZero Platform by Horizon3.ai that could be improved or enhanced."

"Sometimes even their support doesn't know why we're seeing certain issues."

"The NodeZero Platform by Horizon3.ai could be improved by reducing the elapsed time from identifying a zero-day vulnerability from their QA environment to their production environment."

"They've added a chatbot which isn't particularly useful, but when it can't answer questions, it forwards messages to human support."

"If we have had problems, that is with the actual licensing style they are using."

"However, my team struggles with the onboarding side of our engagement, which should have been more robust; having a statement of work and a clear definition of success would have been beneficial."

More The NodeZero Platform by Horizon3.ai cons

Pricing and Cost Advice

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

More Qualys TotalCloud pricing and cost advice

"The product was expensive for us."

"I believe the price compares well within the market."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

902,988 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

17%

Financial Services Firm

14%

Construction Company

Comms Service Provider

Construction Company

12%

Manufacturing Company

12%

Comms Service Provider

10%

Financial Services Firm

Comms Service Provider

Manufacturing Company

Government

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	4
Large Enterprise	29

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	1
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	4
Large Enterprise	8

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

What needs improvement with Qualys TotalCloud?

Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...

What is your primary use case for Qualys TotalCloud?

Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...

What needs improvement with Horizon3.ai?

Ask a question

Earn 20 points

The NodeZero Platform by Horizon3.ai could be improved by speeding up the time from initializing a test to actually s...

What is your primary use case for Horizon3.ai?

My main use case for The NodeZero Platform by Horizon3.ai is autonomous and continuous penetration testing. A specifi...

What advice do you have for others considering Horizon3.ai?

My advice to others looking into using The NodeZero Platform by Horizon3.ai is to use it to its full potential, as it...

Microsoft Defender for Cloud vs Qualys TotalCloud

Comparisons

Wiz vs Qualys TotalCloud

Compared 11% of the time

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

JupiterOne vs Qualys TotalCloud

Compared 5% of the time

Nucleus Security vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Tenable Nessus vs Fortra Tripwire IP360

Compared 13% of the time

Tenable Security Center vs Fortra Tripwire IP360

Compared 10% of the time

Checkmarx One vs Fortra Tripwire IP360

Compared 9% of the time

IBM Guardium Vulnerability Assessment vs Fortra Tripwire IP360

Compared 6% of the time

BMC Helix Automation Console vs Fortra Tripwire IP360

Compared 5% of the time

More Fortra Tripwire IP360 Competitors

Pentera vs The NodeZero Platform by Horizon3.ai

Compared 14% of the time

Cymulate vs The NodeZero Platform by Horizon3.ai

Compared 5% of the time

Tenable Security Center vs The NodeZero Platform by Horizon3.ai

Compared 5% of the time

Rapid7 Metasploit vs The NodeZero Platform by Horizon3.ai

Compared 4% of the time

RidgeBot vs The NodeZero Platform by Horizon3.ai

Compared 4% of the time

More The NodeZero Platform by Horizon3.ai Competitors

Product Reports

Qualys TotalCloud

Download Qualys TotalCloud product report

Fortra Tripwire IP360

Download Fortra Tripwire IP360 product report

The NodeZero Platform by Horizon3.ai

Download The NodeZero Platform by Horizon3.ai product report

The NodeZero Platform by Horizon3.ai report

Also Known As

Qualys TotalCloud with FlexScan

IP360

Horizon3.ai

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Tripwire IP360 is a powerful vulnerability management solution that identifies and prioritizes network vulnerabilities for remediation. It is highly effective in scanning devices and applications, improving security posture, ensuring compliance, and managing risks.

Users value its detailed reporting, user-friendly interface, and seamless integration with other security tools for efficient security management.

Fortra

NodeZero by Horizon3.ai is an offensive security platform that enables users to adopt an attacker’s perspective, reveal vulnerabilities, and verify defense effectiveness with evidence-backed insights.

NodeZero provides autonomous pentesting, showing how attackers exploit misconfigurations, credentials, and exposures into attack paths. It helps focus on real risks rather than hypothetical ones, integrating seamlessly into existing IT and security workflows to streamline processes. The platform drives risk-based vulnerability management and CTEM by validating vulnerabilities and measuring resilience.

What standout features improve your security?

Autonomous Pentesting at Scale: Executes extensive pentests across broad IT landscapes swiftly.
Hybrid Cloud Coverage: Navigates on-premises and cloud domains to find attack paths.
Proof of Exploitation: Offers evidence for every finding.
Fix Validation: Allows quick retesting to ensure vulnerabilities are resolved.
NodeZero Tripwires: Uses deception tokens for real adversary detection.

What benefits should you expect from reviews?

Reduced Vulnerability Noise: Prioritizes exploitable risks with ServiceNow integration.
Automated Workflows: MCP Server automates processes, reducing bottlenecks and enhancing efficiency.
Immediate Fix Validation: Ensures defenses work during attacks.
Real-Time Resilience Measurement: Helps schedule routine assessments without external help.

NodeZero assists in automated penetration testing and vulnerability management in industries like finance and healthcare. It enhances security processes by complementing or replacing existing solutions, enabling efficient testing, feedback, and control validation.

Horizon3.ai

Sample Customers

Information Not Available

1. Aetna 2. Accenture 3. Adidas 4. AIG 5. Airbus 6. Akamai 7. Amazon 8. American Express 9. Aon 10. Apple 11. ATT 12. Autodesk 13. Bank of America 14. Barclays 15. Bayer 16. Bechtel 17. BlackRock 18. Boeing 19. BNP Paribas 20. Cisco 21. CocaCola 22. Comcast 23. Dell 24. Deutsche Bank 25. eBay 26. ExxonMobil 27. FedEx 28. Ford 29. General Electric 30. Google 31. HP 32. IBM

Government agencies, Defense Industrial Base organizations, and enterprises in regulated industries such as finance, healthcare, manufacturing, and criticalinfrastructure rely on NodeZero to meet rigorous security and compliance requirements with continuous, scheduled, and on-demand testing.

Fortra Tripwire IP360 vs. The NodeZero Platform by Horizon3.ai