Google Cloud Security Command Center vs Sweet Security comparison

Google Cloud Security Command Center vs. Sweet Security

Download the complete report

Helped 914,394 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of September 2026, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of Qualys TotalCloud is 2.3%, up from 1.6% compared to the previous year. The mindshare of Google Cloud Security Command Center is 1.5%, down from 2.7% compared to the previous year. The mindshare of Sweet Security is 1.5%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud-Native Application Protection Platforms (CNAPP) Mindshare Distribution
Product	Mindshare (%)
Qualys TotalCloud	2.3%
Sweet Security	1.5%
Google Cloud Security Command Center	1.5%
Other	94.7%

Cloud-Native Application Protection Platforms (CNAPP)

Featured Reviews

reviewer2859021

Sr Security Engineer at a tech vendor with 5,001-10,000 employees

Risk-based triage has transformed container security and now prioritizes high-impact threats

The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.

Read full review

RaviUpadhyay

Security Consultant at HCLSoftware

Security posture has improved with automated insights but reporting and integrations still need work

The best feature of Google Cloud Security Command Center is that it is flexible to integrate with several third-party tools or services, and it is more customized. For example, it is already giving a misconfiguration and the vulnerability, and if somebody wants to do some in-depth analysis for patterns such as metrics, they can export the continuous log on the spot with that tool. From an integration point of view, I would say it is more customized with different tools. The asset discovery feature of Google Cloud Security Command Center enhances my security strategy because, nowadays, data sensitivity and data privacy are very important, and using some DLP utility, I can classify and set up rules to generate reports based on the classification in their asset discovery. This can also include data classification on Google storage buckets, and overall, Google Cloud Security Command Center has that information, which can be used for various analyses or alerts. It is very important for compliance assessment because every business is global and connects with different geographical locations, meaning each country has its own regulatory systems and internal compliance policies. Google Cloud Security Command Center has the feature to set up security postures based on which resources or assets inside Google Cloud can be marked as compliant or non-compliant, giving a risk score for immediate reporting to higher management or CISO, making it very helpful in terms of security, risk, and compliance.

Read full review

reviewer2805510

Partner Account Manager at a wholesaler/distributor with 51-200 employees

Runtime-first security has transformed real-time threat detection and reduced alert fatigue

Sweet Security can be improved in terms of product maturity and ecosystem. It has a smaller market presence, so we do not have as many large enterprise deployments. Sweet Security is less mature than competitors such as Wiz or Palo Alto Networks. Some competitors provide better integrations and workflow tooling. Additionally, as a new vendor, there is a new market perception and higher perceived risk, which relates to trust of the product. Some competitors are seen as safer and more established choices. Since Sweet Security operates in the production live environment, there have been a couple of problems reported where issues occurred in production environments. However, these have been resolved within about an hour or two. Having that risk is always going to be a negative. As a cloud-native platform solution, Sweet Security is really good overall. There are only a couple of areas for improvement, such as not being fully 100% production safe, and the reality that its competitors are global, well-known companies such as Palo Alto and Wiz.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I appreciate Qualys TotalCloud's ability to onboard any type of device with ease, including containers."

"I would recommend Qualys TotalCloud to other users because it is cost-efficient and has a good return on investment."

"With TotalCloud, we can scan through the API. If we are not able to deploy cloud agents on the machine, we can use the API."

"TotalCloud's best feature is the integration of cloud accounts. It helps with the risk and security posture management of our cloud infrastructure."

"Qualys TotalCloud provides a single, prioritized view based on requirements such as identifying the most vulnerable assets and calculating the average time to remediate vulnerabilities."

"Its excellent graphical interface makes the scanning process simple."

"Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."

"I depend heavily on the reports that I have from this tool."

More Qualys TotalCloud pros

"It simplifies compliance efforts."

"Most people use the threat detection dashboard."

"The compliance reporting feature helped us maintain a baseline of compliance within the information security policies."

"I would definitely recommend Google Cloud Security Command Center to others."

"The value of having real-time visibility in our cloud environment with Sweet Security changes everything because it differentiates between identifying and reacting to something that is not really a risk and something that is truly a risk that needs to be treated."

"The value we see from having real-time visibility into our cloud environment is significant, as Sweet Security serves as our eyes and ears inside AWS, telling us what we are doing wrong so we can fix it."

"Sweet Security is a better tool and provides layer-by-layer protected environments, and with Sweet Security for cloud, security is totally under control."

"Sweet Security represents the next generation of CNAPP that differentiates through a runtime-first approach and focuses on detecting and responding to real attacks in environments."

"We have seen an 80 to 90% reduction in vulnerability noise, a 60 to 80% reduction in triage and patching time, and managed to save 50% of costs because many things are handled by Sweet Security itself."

"Before we had Sweet Security, upon any type of detection of activity, we needed to conduct lots of investigations in different platforms and logs until we could build the larger picture, but once we inserted Sweet Security, we are able to actually see each and every request being made from the application level towards the infrastructure, making it much easier and reducing the time for an analyst to understand what's really happening."

"For the time I have been using Sweet Security, I feel a bit more safe in the sense that there is something that continuously scans my infrastructure for issues."

Cons

"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."

"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."

"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."

"TotalCloud could improve the classification of vulnerabilities. Specifically, it could enhance the categorization of what aspects fall under patches resolved by OS or software updates and what pertains to configuration adjustments."

"The cost of Qualys TotalCloud is high and could be more competitive."

"An area for improvement would be to focus on risks related to AI, such as large language models and potential data leakage."

"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."

"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."

More Qualys TotalCloud cons

"Visibility can be improved along with automation."

"The AI capabilities have been heavily promoted, but I haven't seen a significant impact."

"There is definitely room for improvement in Google Cloud Security Command Center. While the functionality is very native, compared to third-party tools that offer a variety of features for easy integrations and custom KPIs, Google Cloud Security Command Center lacks some of these functionalities, requiring complex workarounds for custom reporting, and given that customers often use hybrid environments, having a broader perspective is necessary for integration."

"I could see that cluster prevention and real-time blocking could be enhanced."

"There was something a year ago that caused a production issue in my company, but they fixed it within an hour."

"One area for improvement could be the alerts, as we have an issue with the alert time, the time it takes for the system to send the alert, but besides that, there is nothing special."

"Since Sweet Security operates in the production live environment, there have been a couple of problems reported where issues occurred in production environments."

"The option to run specific playbooks through Sweet Security platform would help us a lot, but these must be fully customizable."

"During the initial integration part, the platform sometimes flags anomalous problems when integrating with SIEM or SOAR solutions."

"One thing I think Sweet Security can definitely improve is that they have a lot of features, but the UI right now is not so well designed in my opinion."

Pricing and Cost Advice

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

"The cost is high, but it meets our organizational needs."

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."

More Qualys TotalCloud pricing and cost advice

"Initially, it used to be relatively expensive, starting at around four or five hundred dollars."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

914,394 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

16%

Outsourcing Company

12%

Manufacturing Company

11%

Financial Services Firm

10%

Financial Services Firm

14%

Computer Software Company

13%

Comms Service Provider

Marketing Services Firm

Financial Services Firm

11%

Outsourcing Company

Healthcare Company

Wellness & Fitness Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	6
Large Enterprise	34

No data available

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	3
Large Enterprise	11

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

What needs improvement with Qualys TotalCloud?

In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys...

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is regarding the cloud visibility that we were not having previously. Previous...

What is your primary use case for Google Cloud Security Command Center?

I am primarily working with Google Cloud Security Command Center, which is their CSPM, and also with the next-generat...

What advice do you have for others considering Google Cloud Security Command Center?

I rate Google Cloud Security Command Center a seven and a half out of ten. While it is a ten from a security perspect...

What needs improvement with Google Cloud Security Command Center?

There is definitely room for improvement in Google Cloud Security Command Center. While the functionality is very nat...

What is your experience regarding pricing and costs for Sweet Security?

My experience with pricing, setup cost, and licensing has been that Sweet Security's pricing is quite fair and cost-e...

What needs improvement with Sweet Security?

In terms of improvements, I do not belong to the security team, but most of it is handled by me. I could see that clu...

What is your primary use case for Sweet Security?

I have been using Sweet Security for approximately one and a half years. For our organization, Sweet Security blocks ...

Microsoft Defender for Cloud vs Qualys TotalCloud

Comparisons

Wiz vs Qualys TotalCloud

Compared 11% of the time

Compared 7% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Orca Security vs Qualys TotalCloud

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Wiz vs Google Cloud Security Command Center

Compared 18% of the time

Microsoft Defender for Cloud vs Google Cloud Security Command Center

Compared 15% of the time

AWS Security Hub vs Google Cloud Security Command Center

Compared 5% of the time

CrowdStrike Falcon Cloud Security vs Google Cloud Security Command Center

Compared 4% of the time

Orca Security vs Google Cloud Security Command Center

Compared 4% of the time

More Google Cloud Security Command Center Competitors

Wiz vs Sweet Security

Compared 15% of the time

Upwind vs Sweet Security

Compared 14% of the time

SentinelOne Singularity Identity vs Sweet Security

Compared 6% of the time

CrowdStrike Falcon vs Sweet Security

Compared 6% of the time

Stream.Security vs Sweet Security

Compared 4% of the time

More Sweet Security Competitors

Product Reports

Qualys TotalCloud

Download Qualys TotalCloud product report

Google Cloud Security Command Center

Download Google Cloud Security Command Center product report

Google Cloud Security Command Center report

Sweet Security

Download Sweet Security product report

Also Known As

Qualys TotalCloud with FlexScan

No data available

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Google Cloud Security Command Center streamlines security management by providing comprehensive visibility into asset security posture, empowering organizations to identify vulnerabilities and threats effectively.

Google Cloud Security Command Center offers a centralized platform for organizations to manage their security landscape, providing tools like threat detection and vulnerability scanning to protect cloud assets. Users benefit from its integration capabilities and detailed reporting, which enhance their ability to combat security challenges efficiently.

What are the key features of Google Cloud Security Command Center?

Asset Inventory: Centralizes information on all cloud assets, enabling tracking and management.
Security Posture: Provides insights into the security status and potential vulnerabilities of cloud resources.
Threat Detection: Identifies and alerts users about potential threats in real-time, facilitating prompt response.
Compliance Monitoring: Ensures resources meet regulatory requirements through continuous compliance checks.

What benefits should users consider when evaluating Google Cloud Security Command Center?

Enhanced Visibility: Offers comprehensive insights into cloud environments, enabling better asset management.
Proactive Security: Helps prevent security breaches by identifying potential vulnerabilities early on.
Cost Efficiency: Reduces the need for multiple standalone security tools, lowering overall security costs.
Integration Support: Seamlessly integrates with existing workflows, enhancing operational efficiency.

Industries such as finance and healthcare benefit significantly from Google Cloud Security Command Center, as it helps them maintain compliance with strict regulations. Its ability to provide detailed security assessments and support integration with other cloud services makes it an essential tool for protecting sensitive data and ensuring uninterrupted service to customers.

Google

Sweet Security offers advanced cybersecurity measures designed to protect enterprise-level networks from complex threats, providing efficient monitoring and robust protection capabilities.

Focused on sophisticated threat detection and network security, Sweet Security provides an enterprise-grade solution for cybersecurity challenges. It integrates seamlessly with existing systems, offering real-time analytics and threat intelligence. Its comprehensive approach ensures high-level data protection and security management, allowing organizations to focus on core functionalities.

What features make Sweet Security stand out?

Real-time Threat Monitoring: Ensures proactive identification and response to emerging threats.
Seamless Integration: Easily integrates with current systems for enhanced security without disrupting operations.
Advanced Analytics: Provides insightful data for efficient threat management and decision-making.
Threat Intelligence Capabilities: Robust mechanisms to enhance awareness and preparedness against attacks.

What benefits or ROI can users expect from Sweet Security?

Enhanced Security Posture: Offers improved protection for sensitive data and assets.
Cost Efficiency: Reduces potential loss from security breaches by preemptively protecting systems.
Productivity Improvement: Frees up resources by automating threat detection and response processes.
Scalability: Supports growth and expansion without the need for constant re-evaluation of security resources.

Implementation of Sweet Security across industries like finance, healthcare, and e-commerce demonstrates its versatility and effectiveness. In finance, it safeguards sensitive financial data; in healthcare, it ensures patient data privacy; and in e-commerce, it protects online transactions from fraud, making it an invaluable asset in today's digital landscape.

Sweet Security

Google Cloud Security Command Center vs. Sweet Security