Google Cloud Security Command Center vs Qualys TotalCloud comparison

Google Cloud Security Command Center vs. Qualys TotalCloud

Download the complete report

Helped 879,711 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of January 2026, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of SentinelOne Singularity Cloud Security is 5.3%, up from 2.7% compared to the previous year. The mindshare of Google Cloud Security Command Center is 2.8%, up from 1.5% compared to the previous year. The mindshare of Qualys TotalCloud is 1.6%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
Product	Market Share (%)
SentinelOne Singularity Cloud Security	5.3%
Qualys TotalCloud	1.6%
Google Cloud Security Command Center	2.8%
Other	90.3%

Cloud-Native Application Protection Platforms (CNAPP)

Featured Reviews

Satyavijay Chavan

Information Security Engineer at DataVigilant Infotech

Enables us to prioritize and effectively address critical security issues

Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.

Read full review

RaviUpadhyay

Security Consultant at HCLSoftware

Security posture has improved with automated insights but reporting and integrations still need work

The best feature of Google Cloud Security Command Center is that it is flexible to integrate with several third-party tools or services, and it is more customized. For example, it is already giving a misconfiguration and the vulnerability, and if somebody wants to do some in-depth analysis for patterns such as metrics, they can export the continuous log on the spot with that tool. From an integration point of view, I would say it is more customized with different tools. The asset discovery feature of Google Cloud Security Command Center enhances my security strategy because, nowadays, data sensitivity and data privacy are very important, and using some DLP utility, I can classify and set up rules to generate reports based on the classification in their asset discovery. This can also include data classification on Google storage buckets, and overall, Google Cloud Security Command Center has that information, which can be used for various analyses or alerts. It is very important for compliance assessment because every business is global and connects with different geographical locations, meaning each country has its own regulatory systems and internal compliance policies. Google Cloud Security Command Center has the feature to set up security postures based on which resources or assets inside Google Cloud can be marked as compliant or non-compliant, giving a risk score for immediate reporting to higher management or CISO, making it very helpful in terms of security, risk, and compliance.

Read full review

Arshad N. R.

Cyber Security Specialist at UBS Financial

A centralized tool for vulnerability and misconfiguration management in a multiple cloud environment

Qualys TotalCloud provides written explanations to help guide the remediation paths and eliminate cyber risk. We are using TruRisk for the remediations. The TruRisk shows anything critical, and we can then focus on that. We also assess manually whether an asset is a critical target or not. Qualys TotalCloud provides a single, prioritized view of risk. We are using CIS-CAT standards to harden our clouds, such as AWS, Google Cloud, and Azure. We are able to analyze the scans and identify which policies have failed and how we can remediate them. We can customize policies as per our organization's requirements. That is very helpful for us. With the TruRisk Insights feature, security has significantly improved. In six months of using it, we see that everything is under control. We've solved many problems related to asset management, cloud configuration, and the new asset identification. If an application team has onboarded any cloud asset, we can see that. We have that information now.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Its performance impact on the systems is low, which means there is a minimal impact on system performance compared to traditional antivirus solutions."

"Singularity Cloud Workload Security provides us with better security detection and more visibility. It is another resource that we can use to detect vulnerabilities in our company's systems. For example, it can help us detect new file processes that we are not familiar with, which could be used by attackers to exploit our systems. Singularity Cloud Workload Security can also help us diagnose and analyze data to determine whether it is malicious or not. Singularity Cloud Workload Security is like another pair of eyes that can help us protect our systems from cyberattacks."

"The agentless vulnerability scanning is great."

"Singularity Cloud Native Security provides us with a platform to scan instances when they are getting created, and the dashboard helps us to identify the critical issues."

"SentinelOne Singularity Cloud Security improved our risk posture significantly, helped reduce our mean time to detect and mean time to remediate, and enabled collaboration across cloud security, development, and AppSec teams, saving engineering time by approximately three to four hours."

"It's positively affected the communication between cloud security, application developers, and AppSec teams."

"As a frequently audited company, we value SentinelOne Singularity Cloud Security's compliance monitoring features. They give us a report with a compliance score for how well we meet certain regulatory standards, like HIPAA. We can show our compliance as a percentage. It's also a way to show that we are serious about security."

"The visibility provided by SentinelOne Singularity Cloud Security around infrastructure was very valuable."

More SentinelOne Singularity Cloud Security pros

"It simplifies compliance efforts."

"Most people use the threat detection dashboard."

"I would definitely recommend Google Cloud Security Command Center to others."

"The compliance reporting feature helped us maintain a baseline of compliance within the information security policies."

"I appreciate Qualys TotalCloud's ability to onboard any type of device with ease, including containers."

"TotalCloud offers a comprehensive suite of features, including EDR, XDR, and TrueRisk, providing a centralized platform for managing vulnerabilities and security risks."

"Qualys TotalCloud provides a single, prioritized view based on requirements such as identifying the most vulnerable assets and calculating the average time to remediate vulnerabilities."

"TotalCloud's best feature is the integration of cloud accounts. It helps with the risk and security posture management of our cloud infrastructure."

"Qualys TotalCloud's most valuable feature is its agent versatility."

"I found the initial setup user-friendly."

"One of the most valuable features of Qualys TotalCloud is FlexScan, which is specifically for internet-facing VMs. We found this feature to be very useful. It was a key differentiator for us."

"I would definitely recommend Qualys TotalCloud to other customers."

More Qualys TotalCloud pros

Cons

"In version 2, a lot of rules have been deployed for Kubernetes security and CDR, which makes a lot of issues of critical severity, whereas they are not critical or of high severity. There is a mismatch of severities. They need to work on severity management."

"Crafting customized policies can be tricky."

"We use SentinelOne Singularity Cloud Security and also SentinelOne. If SentinelOne Singularity Cloud Security integrated some of the endpoint security features of SentinelOne, it would be the perfect one-stop solution for everything. We wouldn't need to switch between the products. At my organization, I am responsible for endpoint security and vulnerability management. Integrating both functions into one application would be ideal because I could see all the alerts, heat maps, and reports in one console."

"The documentation could be better."

"I personally use the SentinelOne Singularity Cloud Security daily, and I have noticed that the dashboard occasionally gets stuck, potentially due to internet issues. It could benefit from enhancements to be more robust and smoother."

"I would like additional integrations."

"There is scope for more application security posture management features. Additionally, the runtime protection needs attention."

"here is a bit of a learning curve. However, you only need two to three days to identify options and get accustomed."

More SentinelOne Singularity Cloud Security cons

"There is definitely room for improvement in Google Cloud Security Command Center. While the functionality is very native, compared to third-party tools that offer a variety of features for easy integrations and custom KPIs, Google Cloud Security Command Center lacks some of these functionalities, requiring complex workarounds for custom reporting, and given that customers often use hybrid environments, having a broader perspective is necessary for integration."

"The AI capabilities have been heavily promoted, but I haven't seen a significant impact."

"Visibility can be improved along with automation."

"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."

"Their customer support needs improvement."

"There is room for improvement in the support."

"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."

"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."

"Their support could be improved."

"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."

"Although TotalCloud is a helpful tool, some of its advanced features are still under development."

More Qualys TotalCloud cons

Pricing and Cost Advice

"While I'm slightly out of touch with pricing, I know SentinelOne is much cheaper than other products."

"We found it to be fine for us. Its price was competitive. It was something we were happy with. We are not a Fortune 500 company, so I do not know how pricing scales at the top end, but for our cloud environment, it works very well."

"The cost for PingSafe is average when compared to other CSPM tools."

"The pricing tends to be high."

"The features included in PingSafe justify its price point."

"PingSafe is less expensive than other options."

"SentinelOne Singularity Cloud Security is on the costlier side."

"SentinelOne provided competitive pricing compared to other vendors, and we are satisfied with the deal."

More SentinelOne Singularity Cloud Security pricing and cost advice

"Initially, it used to be relatively expensive, starting at around four or five hundred dollars."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

"Qualys TotalCloud offers cost-effective licensing flexibility."

"The cost is high, but it meets our organizational needs."

More Qualys TotalCloud pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

879,711 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

14%

Manufacturing Company

10%

Government

Computer Software Company

15%

Financial Services Firm

15%

Comms Service Provider

Retailer

Financial Services Firm

15%

Computer Software Company

12%

Manufacturing Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	20
Large Enterprise	53

No data available

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	2
Large Enterprise	23

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

What is your experience regarding pricing and costs for PingSafe?

I think the pricing of SentinelOne Singularity Cloud Security is a bit high.

What needs improvement with PingSafe?

We did not try to use the threat investigations feature from SentinelOne Singularity Cloud Security.Drift detection w...

What do you like most about Google Cloud Security Command Center?

The compliance reporting feature helped us maintain a baseline of compliance within the information security policies.

What is your experience regarding pricing and costs for Google Cloud Security Command Center?

For tier-one customers, it comes for free.

What is your primary use case for Google Cloud Security Command Center?

I am primarily working with Google Cloud Security Command Center, which is their CSPM, and also with the next-generat...

What is your experience regarding pricing and costs for Qualys TotalCloud?

Qualys TotalCloud's pricing is fair. It is not expensive and is affordable.

What needs improvement with Qualys TotalCloud?

I sometimes have difficulty detecting or uninstalling certain versions of applications, which I have to do manually. ...

What is your primary use case for Qualys TotalCloud?

I use Qualys TotalCloud for vulnerability as a service, vulnerability management as a service. I use it to check my d...

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Comparisons

Compared 11% of the time

Wiz vs SentinelOne Singularity Cloud Security

Compared 10% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 7% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 6% of the time

CrowdStrike Falcon Cloud Security vs SentinelOne Singularity Cloud Security

Compared 4% of the time

More SentinelOne Singularity Cloud Security Competitors

Wiz vs Google Cloud Security Command Center

Compared 31% of the time

Microsoft Defender for Cloud vs Google Cloud Security Command Center

Compared 18% of the time

AWS Security Hub vs Google Cloud Security Command Center

Compared 10% of the time

CrowdStrike Falcon Cloud Security vs Google Cloud Security Command Center

Compared 7% of the time

Check Point CloudGuard CNAPP vs Google Cloud Security Command Center

Compared 3% of the time

More Google Cloud Security Command Center Competitors

Wiz vs Qualys TotalCloud

Compared 24% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 11% of the time

AWS Security Hub vs Qualys TotalCloud

Compared 9% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 8% of the time

Qualys VMDR vs Qualys TotalCloud

Compared 6% of the time

More Qualys TotalCloud Competitors

Product Reports

SentinelOne Singularity Cloud Security

Download SentinelOne Singularity Cloud Security product report

SentinelOne Singularity Cloud Security report

Google Cloud Security Command Center

Download Google Cloud Security Command Center product report

Google Cloud Security Command Center report

Qualys TotalCloud

Download Qualys TotalCloud product report

Also Known As

PingSafe

No data available

Qualys TotalCloud with FlexScan

Overview

SentinelOne Singularity Cloud Security offers a streamlined approach to cloud security with intuitive operation and strong integration capabilities for heightened threat detection and remediation efficiency.

Singularity Cloud Security stands out for its real-time detection and response, effectively minimizing detection and remediation timelines. Its automated remediation integrates smoothly with third-party tools enhancing operational efficiency. The comprehensive console ensures visibility and support for forensic investigations. Seamless platform integration and robust support for innovation are notable advantages. Areas for development include improved search functionality, affordability, better firewall capabilities for remote users, stable agents, comprehensive reporting, and efficient third-party integrations. Clarity in the interface, responsive support, and real-time alerting need enhancement, with a call for more automation and customization. Better scalability and cost-effective integration without compromising capabilities are desired.

What are SentinelOne Singularity Cloud Security's standout features?

Ease of Use: Intuitive operation simplifies navigation across platforms.
Real-Time Detection: Quick identification and response to threats.
Automated Remediation: Streamlines recovery processes with integration capabilities.
Forensic Visibility: Aids in thorough threat analysis and prevention strategies.
Comprehensive Console: Offers full visibility and historical data tracking.
Platform Integration: Supports seamless operation across cloud and hybrid environments.

What benefits should users expect from SentinelOne Singularity Cloud Security?

Enhanced Efficiency: Automation and third-party integration improve threat response.
Improved Detection: Reduces mean time to detect and respond to threats.
Operational Support: Comprehensive visibility and forensic tools aid operational decisions.
Cost Efficiency: Affordable integration with scaling capabilities without high overhead.

SentinelOne Singularity Cloud Security is deployed in industries needing robust cloud security posture management, endpoint protection, and threat hunting. Utilized frequently across AWS and Azure, it assists in monitoring, threat detection, and maintaining compliance in diverse environments while providing real-time alerts and recommendations for proactive threat management.

SentinelOne

Google Cloud Security Command Center streamlines security management by providing comprehensive visibility into asset security posture, empowering organizations to identify vulnerabilities and threats effectively.

Google Cloud Security Command Center offers a centralized platform for organizations to manage their security landscape, providing tools like threat detection and vulnerability scanning to protect cloud assets. Users benefit from its integration capabilities and detailed reporting, which enhance their ability to combat security challenges efficiently.

What are the key features of Google Cloud Security Command Center?

Asset Inventory: Centralizes information on all cloud assets, enabling tracking and management.
Security Posture: Provides insights into the security status and potential vulnerabilities of cloud resources.
Threat Detection: Identifies and alerts users about potential threats in real-time, facilitating prompt response.
Compliance Monitoring: Ensures resources meet regulatory requirements through continuous compliance checks.

What benefits should users consider when evaluating Google Cloud Security Command Center?

Enhanced Visibility: Offers comprehensive insights into cloud environments, enabling better asset management.
Proactive Security: Helps prevent security breaches by identifying potential vulnerabilities early on.
Cost Efficiency: Reduces the need for multiple standalone security tools, lowering overall security costs.
Integration Support: Seamlessly integrates with existing workflows, enhancing operational efficiency.

Industries such as finance and healthcare benefit significantly from Google Cloud Security Command Center, as it helps them maintain compliance with strict regulations. Its ability to provide detailed security assessments and support integration with other cloud services makes it an essential tool for protecting sensitive data and ensuring uninterrupted service to customers.

Google

TotalCloud is the Qualys approach to Cloud Native Application Protection Platform (CNAPP) for cloud infrastructure and SaaS environments. With TotalCloud, customers extend TruRisk insights (transparent cyber risk scoring methodology) from the Qualys Enterprise TruRisk Platform to their cloud environments allowing for a seamless unified view of cyber risk across on-prem, hybrid, and multi-cloud environments.

Features and capabilities of Qualys TotalCloud include, but are not limited to:

Discover: Complete visibility and insights into cyber-risk exposure across multi-cloud. Continuously discover and monitor all your workloads across a multi-cloud environment for a 360-degree view of your cloud footprint. Identify known and previously unknown internet-facing assets for 100% visibility and tracking of risks.

Assess: Comprehensive cloud-native assessments with FlexScanTM. Extensive scanning capabilities with Qualys FlexScan, including no-touch, agentless, API- and snapshot-based scanning, along with agent- and network-based scanning for in-depth assessment. Use these multiple scanning methods to scan a workload to get a unified and comprehensive view of vulnerabilities and misconfigurations.

Prioritize: Unified security view to prioritize cloud risk with TruRiskTM. Experience a unified risk-based view of cloud security with insights across workloads, services, and resources. Qualys TruRisk quantifies security risk by workload criticality and vulnerabilities; it correlates with ransomware, malware, and exploitation threat intelligence to prioritize, trace, and reduce risk.

Defend: Real-time protection against evolving and unknown threats with InstaProtectTM. Qualys enables continuous monitoring of all cloud assets to ensure they are protected against threats and attacks at runtime. Qualys keeps your cloud runtime safe by detecting known and unknown threats across the entire kill chain in near real-time across a multi-cloud environment.

Remediate: Fast remediation with QFlow – no code, drag-and-drop workflows. The integration of QFlow technology into Qualys TotalCloud saves security and DevOps teams valuable time and resources. Automation and no-code, drag-and-drop workflows help simplify the time-consuming operational tasks of assessing vulnerabilities on ephemeral cloud assets, alerting on high-priority threats, remediating misconfigurations, and quarantining high-risk assets.

Qualys

Google Cloud Security Command Center vs. Qualys TotalCloud