Try our new research platform with insights from 80,000+ expert users

Google Cloud Security Command Center vs Qualys Enterprise TruRisk Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
3rd
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
118
Ranking in other categories
Vulnerability Management (4th), Cloud and Data Center Security (3rd), Container Security (3rd), Cloud Workload Protection Platforms (CWPP) (4th), Cloud Security Posture Management (CSPM) (3rd), Compliance Management (2nd), AI Software Development (1st), AI Observability (2nd)
Google Cloud Security Comma...
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
18th
Average Rating
7.6
Reviews Sentiment
5.0
Number of Reviews
4
Ranking in other categories
Cloud Security Posture Management (CSPM) (23rd)
Qualys Enterprise TruRisk P...
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
20th
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
4
Ranking in other categories
Cloud and Data Center Security (11th)
 

Mindshare comparison

As of February 2026, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of SentinelOne Singularity Cloud Security is 5.7%, up from 3.0% compared to the previous year. The mindshare of Google Cloud Security Command Center is 2.6%, up from 1.6% compared to the previous year. The mindshare of Qualys Enterprise TruRisk Platform is 0.6%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Cloud Security5.7%
Google Cloud Security Command Center2.6%
Qualys Enterprise TruRisk Platform0.6%
Other91.1%
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

SC
Information Security Engineer at DataVigilant Infotech
Enables us to prioritize and effectively address critical security issues
Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.
RaviUpadhyay - PeerSpot reviewer
Security Consultant at HCLSoftware
Security posture has improved with automated insights but reporting and integrations still need work
The best feature of Google Cloud Security Command Center is that it is flexible to integrate with several third-party tools or services, and it is more customized. For example, it is already giving a misconfiguration and the vulnerability, and if somebody wants to do some in-depth analysis for patterns such as metrics, they can export the continuous log on the spot with that tool. From an integration point of view, I would say it is more customized with different tools. The asset discovery feature of Google Cloud Security Command Center enhances my security strategy because, nowadays, data sensitivity and data privacy are very important, and using some DLP utility, I can classify and set up rules to generate reports based on the classification in their asset discovery. This can also include data classification on Google storage buckets, and overall, Google Cloud Security Command Center has that information, which can be used for various analyses or alerts. It is very important for compliance assessment because every business is global and connects with different geographical locations, meaning each country has its own regulatory systems and internal compliance policies. Google Cloud Security Command Center has the feature to set up security postures based on which resources or assets inside Google Cloud can be marked as compliant or non-compliant, giving a risk score for immediate reporting to higher management or CISO, making it very helpful in terms of security, risk, and compliance.
MH
Mediation Specialist III at a tech vendor with 201-500 employees
Has enabled efficient internal network scanning and provides detailed vulnerability insights
One thing which I really want Qualys Enterprise TruRisk Platform to improve is the UI. While it might not be the case for everyone and it's subjective, in my team, most people agree on that part. The UI should be more user-friendly. If you have uploaded a file containing many IP addresses, you don't have a straightforward option to check what the IP addresses were. If we want to search an IP address from the list, we need to check it one by one. Also, when we download something, the feature should be upfront. When we get the result of the scan, it should be 'download this file'. In many scanners, when you go to the download option, you get the options for particular formats immediately. However, in this case, when you click on download, it loads another page before giving you the output options for PDF or CSV. This feature should be upfront.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It gives me the information I need."
"SentinelOne Singularity Cloud Security offers security solutions for both Kubernetes and CI/CD pipelines."
"SentinelOne Singularity Cloud Security offers an intuitive user interface that lets us navigate quickly and easily."
"The remediation process is good."
"The most valuable features are automated threat response, AI detection, and static and dynamic detection."
"The solution saves 40% of my time."
"Cloud Native Security's best feature is its ability to identify hard-coded secrets during pull request reviews."
"The real-time detection and response capabilities overall are great."
"The compliance reporting feature helped us maintain a baseline of compliance within the information security policies."
"I would definitely recommend Google Cloud Security Command Center to others."
"It simplifies compliance efforts."
"Most people use the threat detection dashboard."
"Qualys Enterprise TruRisk Platform was helpful with threat prioritization features for resource allocation, and it played a good role in our analysis and day-to-day monitoring."
"The favorite feature of Qualys Enterprise TruRisk Platform is that it provides the whole information of a particular vulnerability, including a comprehensive summary, related CVEs and CVSS score, which helps understand potential risks and allows the output to be exported in various formats like CSV, PDF, or JSON."
"Qualys Enterprise TruRisk Platform is considered a good leader in its field."
"Qualys offers versatility. It can function both with and without agents, offering flexibility in deployment. Furthermore, it provides comprehensive support for various systems such as Windows Server, Unix servers, and databases, including SQL, Oracle, and others for development."
"The favorite feature of Qualys Enterprise TruRisk Platform is that it provides the whole information of a particular vulnerability, including a comprehensive summary, related CVEs and CVSS score, which helps understand potential risks and allows the output to be exported in various formats like CSV, PDF, or JSON."
 

Cons

"A beneficial improvement for SentinelOne Singularity Cloud Security would be integration with Jira, allowing for a more streamlined ticketing system."
"In the Analytics section, there is a tab for showing the severity of open issues by day. There are three options: by week, by month, and for more than thirty days. However, despite being aware of many issues open for more than thirty days, it shows no data available."
"There is room for improvement in application security posture management features, and SentinelOne Singularity Cloud Security is on the costlier side."
"The area of improvement is the cost, which is high compared to other traditional endpoint protections."
"We are experiencing problems with Cloud Native Security reporting."
"In some cases, the rules are strictly enforced but do not align with real-world use cases."
"The Kubernetes scanning on the Oracle Cloud needs to be improved. It's on the roadmap. AWS has this capability, but it's unavailable for Oracle Cloud."
"I have noticed that the dashboard occasionally gets stuck, potentially due to internet issues. It could benefit from enhancements to be more robust and smoother."
"There is definitely room for improvement in Google Cloud Security Command Center. While the functionality is very native, compared to third-party tools that offer a variety of features for easy integrations and custom KPIs, Google Cloud Security Command Center lacks some of these functionalities, requiring complex workarounds for custom reporting, and given that customers often use hybrid environments, having a broader perspective is necessary for integration."
"Visibility can be improved along with automation."
"The AI capabilities have been heavily promoted, but I haven't seen a significant impact."
"Once we supplied 130 URLs to it for scanning one by one, and it crashed in between. We did not have any clue what happened, so we had to reach out to support."
"Once we supplied 130 URLs to it for scanning one by one, and it crashed in between. We did not have any clue what happened, so we had to reach out to support."
"Compared to Microsoft, there were already advanced tools, so I had seen some drawbacks compared to licensing or technical side."
"The report sometimes inaccurately identifies the corresponding operating system version."
 

Pricing and Cost Advice

"We found it to be fine for us. Its price was competitive. It was something we were happy with. We are not a Fortune 500 company, so I do not know how pricing scales at the top end, but for our cloud environment, it works very well."
"SentinelOne Singularity Cloud Security is costly."
"PingSafe is priced reasonably for our workload."
"PingSafe is not very expensive compared to Prisma Cloud, but it's also not that cheap. However, because of its features, it makes sense to us as a company. It's fairly priced."
"Singularity Cloud Workload Security's licensing and price were cheaper than the other solutions we looked at."
"It is cost-effective compared to other solutions in the market."
"Their pricing appears to be based simply on the number of accounts we have, which is common for cloud-based products."
"For pricing, it currently seems to be in line with market rates."
"Initially, it used to be relatively expensive, starting at around four or five hundred dollars."
Information not available
report
Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
12%
Manufacturing Company
10%
Government
6%
Financial Services Firm
14%
Computer Software Company
14%
Comms Service Provider
7%
Retailer
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business48
Midsize Enterprise22
Large Enterprise54
No data available
No data available
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
Regarding the pricing for SentinelOne Singularity Cloud Security, I do not think it is something I can compare.
What needs improvement with PingSafe?
Regarding the downsides of cloud security, I do not have much negative to discuss about cloud security, because it is...
What do you like most about Google Cloud Security Command Center?
The compliance reporting feature helped us maintain a baseline of compliance within the information security policies.
What is your primary use case for Google Cloud Security Command Center?
I am primarily working with Google Cloud Security Command Center, which is their CSPM, and also with the next-generat...
What is your experience regarding pricing and costs for Qualys Enterprise TruRisk Platform?
Qualys Enterprise TruRisk Platform was not expensive regarding the pricing point. We made a purchase choice that was ...
What needs improvement with Qualys Enterprise TruRisk Platform?
I have not been working with real-time threat intelligence updates. Back then, AI integration was not there with the ...
What is your primary use case for Qualys Enterprise TruRisk Platform?
My main reasons to use Qualys Enterprise TruRisk Platform were vulnerability severity assessment for assets like serv...
 

Also Known As

PingSafe
No data available
Qualys Cloud Platform
 

Overview

Find out what your peers are saying about Google Cloud Security Command Center vs. Qualys Enterprise TruRisk Platform and other solutions. Updated: December 2025.
881,733 professionals have used our research since 2012.