Google Cloud Security Command Center vs Prevasio comparison

Google Cloud Security Command Center vs. Prevasio

Download the complete report

Helped 902,495 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of June 2026, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of Qualys TotalCloud is 2.0%, up from 1.4% compared to the previous year. The mindshare of Google Cloud Security Command Center is 1.8%, down from 2.3% compared to the previous year. The mindshare of Prevasio is 1.1%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud-Native Application Protection Platforms (CNAPP) Mindshare Distribution
Product	Mindshare (%)
Qualys TotalCloud	2.0%
Google Cloud Security Command Center	1.8%
Prevasio	1.1%
Other	95.1%

Cloud-Native Application Protection Platforms (CNAPP)

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

RaviUpadhyay

Security Consultant at HCLSoftware

Security posture has improved with automated insights but reporting and integrations still need work

The best feature of Google Cloud Security Command Center is that it is flexible to integrate with several third-party tools or services, and it is more customized. For example, it is already giving a misconfiguration and the vulnerability, and if somebody wants to do some in-depth analysis for patterns such as metrics, they can export the continuous log on the spot with that tool. From an integration point of view, I would say it is more customized with different tools. The asset discovery feature of Google Cloud Security Command Center enhances my security strategy because, nowadays, data sensitivity and data privacy are very important, and using some DLP utility, I can classify and set up rules to generate reports based on the classification in their asset discovery. This can also include data classification on Google storage buckets, and overall, Google Cloud Security Command Center has that information, which can be used for various analyses or alerts. It is very important for compliance assessment because every business is global and connects with different geographical locations, meaning each country has its own regulatory systems and internal compliance policies. Google Cloud Security Command Center has the feature to set up security postures based on which resources or assets inside Google Cloud can be marked as compliant or non-compliant, giving a risk score for immediate reporting to higher management or CISO, making it very helpful in terms of security, risk, and compliance.

Read full review

Juan Tolosa

Production Manager at Assertiva S.A.

Automation helps reduce human error, and platform suggests the best configuration to apply

The optimizations are the most useful aspect because most customers have a very unmanaged network with a lot of rules. We use a lot of the optimizations in our reports for improving firewall rules. It also provides our clients with full visibility into the risks involved in firewall change requests and that is very important because our clients are often banks that must be in compliance with PCI. And when it comes to preparing for audits and ensuring that firewalls are in compliance, the solution is very useful. We are able to do it very fast. We can do a lot of iterations and get better policy rules all the time. Although not many of our clients are migrating to the cloud, for those that are, AlgoSec is useful. The part of the process that takes a long time is the human part. We must have gap committees and approvals that take a long time. But the integration itself is very easy with AlgoSec. We have all the information in our hands about the traffic we must enable on the cloud and for making new rules. All that is automated.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution."

"The most valuable feature of Qualys TotalCloud is the visibility it provides."

"TotalCloud has been excellent in providing us with immediate access to all the products and features we need, such as CSPM, TruRisk Insights, and compliance reports, including CIS and HIPAA."

"Qualys TotalCloud has improved our security posture."

"Qualys TotalCloud's most valuable feature is its agent versatility."

"The best feature would be the ability to create policies. It is easy to control and update policies as required."

"TotalCloud offers a comprehensive suite of features, including EDR, XDR, and TrueRisk, providing a centralized platform for managing vulnerabilities and security risks."

"The best features in Qualys TotalCloud include the total asset management of the cloud environment. It is very easy to export the report and see the vulnerabilities related to the cloud specifically."

More Qualys TotalCloud pros

"The compliance reporting feature helped us maintain a baseline of compliance within the information security policies."

"It simplifies compliance efforts."

"I would definitely recommend Google Cloud Security Command Center to others."

"Most people use the threat detection dashboard."

"If you look at it that way, AlgoSec has saved the business maybe a couple of years of salary."

"Overall, my experience with this tool and its technologies have been very good."

"It provides full visibility into the risk involved in firewall change requests."

"Because we get about 60 to 70 rules to deploy a week during the firewall maintenance window, we might create some duplicate rules or open duplicate ports. AlgoSec has become very helpful whenever we need to find out the nodes or subnets that have already been created, then we don't need to create the duplicate subnet of that particular IP address."

"AlgoSec has good tools to manage policies and devices. Many administrators like how it helps you monitor and clean up the policy for the on-premise firewall."

"We have used the solution to implement and manage microsegmentation initiatives. That is the whole point of modeling towards, "Hey, how will this work for a specific situation in the end?" I think it's a great solution because a lot of companies are not just going to the cloud, but microsegmentation and service-delivered products. So, I feel like it is very capable and comparatively better than its peers, if not equal."

"AlgoSec has reduced the time to implement firewall rules in my customers' organizations by about 17%."

"AlgoBot is a Slack chatbot that they've designed to help people identify if the firewalls are going to allow or block specific network traffic. We leveraged this to allow our staff to check themselves if the firewalls are going to be blocking traffic or not. That saves us logging into the firewalls and running the query off the host. We give them the power to use it and it saves us time."

More Prevasio pros

Cons

"Qualys TotalCloud needs to improve its accuracy for non-Windows operating systems."

"We would like to see Windows-based sensors available in Qualys, as this would make the platform more versatile and support a broader range of environments."

"It has been working very well, but it would be helpful if the dashboard could generate reports tailored to specific compliance needs. For example, in India, we have to comply with RBI and SEBI guidelines. It w"

"Their customer support needs improvement."

"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."

"Some major banks and insurance companies require an on-premises solution for comprehensive vulnerability management, which TotalCloud does not offer."

"The cost of Qualys TotalCloud is high and could be more competitive."

"Areas that need improvement in every solution include the remediation part. The remediation steps should be simple enough for everyone to understand."

More Qualys TotalCloud cons

"There is definitely room for improvement in Google Cloud Security Command Center. While the functionality is very native, compared to third-party tools that offer a variety of features for easy integrations and custom KPIs, Google Cloud Security Command Center lacks some of these functionalities, requiring complex workarounds for custom reporting, and given that customers often use hybrid environments, having a broader perspective is necessary for integration."

"The AI capabilities have been heavily promoted, but I haven't seen a significant impact."

"Visibility can be improved along with automation."

"Now that we've moved to the VM it is more stable and independent of hardware."

"AlgoSec cannot be integrated with solutions that require two-step or multi-factor authentication. Embedding multi-factor authentication capability into the solution would be a valuable feature."

"Integration with Oracle on the cloud is not supported. I would also like to see integrations with network devices in Layer 2."

"The technical support response time is low. This might be due to the coronavirus pandemic situation, but I am not getting full support when working with them."

"There is a little bit of scope for improvement in the risk profiles that come with the AlgoSec Firewall Analyzer module."

"The analysis part can be improved when I make a flow request. There should be a clear analysis of which metric part needs to be opened and which firewalls will be opened. It should give you a bit more graphical visibility about these."

"Rather than talking about simplifying the installation, it should be standardized."

"There is a little bit of scope for improvement in the risk profiles that come with the AlgoSec Firewall Analyzer module. Currently, AlgoSec provides only three standard zones within a risk profile. These standard zones are external, internal, and DMZ. Everybody's network is divided into different zones within a data center, but AlgoSec only provides three zones. This is a limitation that I see for the risk profile analysis. If there was an option to customize these zones, it would be great."

More Prevasio cons

Pricing and Cost Advice

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"TotalCloud's price is about right where I would expect it to be."

"Qualys TotalCloud is expensive."

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

More Qualys TotalCloud pricing and cost advice

"Initially, it used to be relatively expensive, starting at around four or five hundred dollars."

"For the South American market, the prices are very high."

"I heard that the licensing was around $100,000 a year."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

902,495 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

17%

Financial Services Firm

14%

Construction Company

Comms Service Provider

Financial Services Firm

14%

Computer Software Company

13%

Comms Service Provider

Hospitality Company

Construction Company

18%

Financial Services Firm

14%

Religious Institution

Transportation Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	4
Large Enterprise	29

No data available

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	2
Large Enterprise	6

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

What needs improvement with Qualys TotalCloud?

Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...

What is your primary use case for Qualys TotalCloud?

Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...

What is your experience regarding pricing and costs for Google Cloud Security Command Center?

For tier-one customers, it comes for free.

What is your primary use case for Google Cloud Security Command Center?

I am primarily working with Google Cloud Security Command Center, which is their CSPM, and also with the next-generat...

What advice do you have for others considering Google Cloud Security Command Center?

I rate Google Cloud Security Command Center a seven and a half out of ten. While it is a ten from a security perspect...

Microsoft Defender for Cloud vs Qualys TotalCloud

Ask a question

Earn 20 points

Comparisons

Wiz vs Qualys TotalCloud

Compared 11% of the time

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

JupiterOne vs Qualys TotalCloud

Compared 5% of the time

Nucleus Security vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Wiz vs Google Cloud Security Command Center

Compared 18% of the time

Microsoft Defender for Cloud vs Google Cloud Security Command Center

Compared 14% of the time

CrowdStrike Falcon Cloud Security vs Google Cloud Security Command Center

Compared 6% of the time

AWS Security Hub vs Google Cloud Security Command Center

Compared 6% of the time

Orca Security vs Google Cloud Security Command Center

Compared 4% of the time

More Google Cloud Security Command Center Competitors

FortiCNAPP vs Prevasio

Compared 15% of the time

Prisma Cloud by Palo Alto Networks vs Prevasio

Compared 13% of the time

Microsoft Defender for Cloud vs Prevasio

Compared 7% of the time

Sysdig Secure vs Prevasio

Compared 5% of the time

Darktrace vs Prevasio

Compared 4% of the time

More Prevasio Competitors

Product Reports

Qualys TotalCloud

Download Qualys TotalCloud product report

Google Cloud Security Command Center

Download Google Cloud Security Command Center product report

Google Cloud Security Command Center report

Prevasio

Download Prevasio product report

Also Known As

Qualys TotalCloud with FlexScan

No data available

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Google Cloud Security Command Center streamlines security management by providing comprehensive visibility into asset security posture, empowering organizations to identify vulnerabilities and threats effectively.

Google Cloud Security Command Center offers a centralized platform for organizations to manage their security landscape, providing tools like threat detection and vulnerability scanning to protect cloud assets. Users benefit from its integration capabilities and detailed reporting, which enhance their ability to combat security challenges efficiently.

What are the key features of Google Cloud Security Command Center?

Asset Inventory: Centralizes information on all cloud assets, enabling tracking and management.
Security Posture: Provides insights into the security status and potential vulnerabilities of cloud resources.
Threat Detection: Identifies and alerts users about potential threats in real-time, facilitating prompt response.
Compliance Monitoring: Ensures resources meet regulatory requirements through continuous compliance checks.

What benefits should users consider when evaluating Google Cloud Security Command Center?

Enhanced Visibility: Offers comprehensive insights into cloud environments, enabling better asset management.
Proactive Security: Helps prevent security breaches by identifying potential vulnerabilities early on.
Cost Efficiency: Reduces the need for multiple standalone security tools, lowering overall security costs.
Integration Support: Seamlessly integrates with existing workflows, enhancing operational efficiency.

Industries such as finance and healthcare benefit significantly from Google Cloud Security Command Center, as it helps them maintain compliance with strict regulations. Its ability to provide detailed security assessments and support integration with other cloud services makes it an essential tool for protecting sensitive data and ensuring uninterrupted service to customers.

Google

Prevasio automates firewall management with advanced algorithms, enhancing rule efficiency and reducing errors. It offers comprehensive policy analysis and seamless integration with devices from Cisco and Palo Alto, providing full visibility into network risks and supporting compliance with regulations such as GP, GDPR, and HIPAA.

Prevasio is designed to streamline firewall management by automating rule optimization and reducing manual errors. It integrates smoothly with systems like Cisco and Palo Alto, ensuring effective assessments and audits. The solution offers robust monitoring capabilities, providing detailed insights into firewall policies while facilitating compliance with regulations. Its user console is recognized for its security management capabilities, offering clarity on network traffic risks and aiding in the maintenance of app connectivity. Despite its strengths, areas such as setup complexity, integration with vendors and API platforms, and risk profile flexibility could benefit from enhancement.

What are the key features of Prevasio?

Automation with Algorithms: Optimizes firewall rules and minimizes human error.
Policy Analysis: Provides detailed insights for enforcing compliance.
Seamless Integration: Connects with Cisco, Palo Alto, and similar devices effortlessly.
User-Friendly Console: Streamlines security management for network visibility.
Comprehensive Risk Assessment: Improves visibility into network traffic risks.

What are the benefits and ROI of using Prevasio?

Time Efficiency: Automates management tasks, reducing manual interventions.
Regulatory Compliance: Ensures adherence to GP, GDPR, HIPAA.
Enhanced Network Security: Offers full visibility into potential threats.
Effective Audits: Supports thorough examinations and minimizes security risks.
Streamlined Management: Facilitates governance across on-premise and cloud networks.

Prevasio is extensively used in industries where improving firewall rule quality and managing ruleset changes are crucial. Organizations implement FireFlow for automated firewall changes to stay compliant. The AlgoSec Firewall Analyzer is utilized to identify risks, optimize rules, and maintain visibility across cloud platforms. Prevasio aids in managing multiple firewall architectures, beneficial in sectors requiring stringent compliance and security measures.

AlgoSec

Google Cloud Security Command Center vs. Prevasio