No more typing reviews! Try our Samantha, our new voice AI agent.

Imperva Data Security Fabric vs Proofpoint Data Security Posture Management comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 21, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
53
Ranking in other categories
Vulnerability Management (10th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (9th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
Imperva Data Security Fabric
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
65
Ranking in other categories
Database Security (2nd), Data Security Posture Management (DSPM) (14th), Data Security Platforms (DSP) (5th)
Proofpoint Data Security Po...
Average Rating
9.0
Reviews Sentiment
3.6
Number of Reviews
1
Ranking in other categories
Data Security Posture Management (DSPM) (15th), Data Security Platforms (DSP) (6th)
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
GO
Group Head of Information Security at a financial services firm with 10,001+ employees
Automated monitoring and real-time alerts improve security incident response and compliance tasks while customizable controls need enhancements
The Imperva SecureSphere Database Security offers excellent functionalities, with numerous best features from my perspective.The simplicity of Imperva SecureSphere Database Security comes out of the box. I have utilized the detailed audit logs feature in the Imperva SecureSphere Database Security, and it has proven to be highly effective. The Imperva SecureSphere Database Security has significantly aided my organization in forensic investigations and compliance audits. The real-time alerts and remediation actions available in Imperva SecureSphere Database Security have helped me promptly address security incidents. Their customizable security controls in Imperva SecureSphere Database Security have tailored the protection level for my organization's specific needs. The automated monitoring and reporting features of the Imperva SecureSphere Database Security have contributed to simplifying compliance with regulatory standards for my organization.
EO
Senior Solutions Architect at Cyber Knight Technologies FZ LLC
AI classification has transformed data visibility and now simplifies policy‑driven protection
In my opinion, what should be improved about Proofpoint Data Security Posture Management is that it is quite advanced. I think they should ease it up a bit. When it comes to setting of policies, I wish there were a single policy that deals with multiple channels of exfiltration instead of having to do multiple policies to deal with maybe data exfiltration through web upload, data exfiltration through USB, data exfiltration through print, copy and paste, and so forth. It would have been much easier if I had one policy, and then I could turn on the light for all of these different exfiltration channels. A critical example is saying I want to put up a PII policy that will secure social security numbers. That is the condition, social security number. Then in the same policy, I should be able to state that I want this to block exfiltration through USB. However, I want it to allow uploads through web or uploads to a particular website or URL. I want it to allow that kind of granularity where you can flick around things on the same policy. Currently, with Proofpoint Data Security Posture Management, you have to build multiple policies for different channels. Most importantly, the Boolean logic in their policies is incomplete. It just has the AND function. Boolean should carry AND and OR. I am saying if this data contains PII data OR PCI data—either of them—it flags either PCI or PII. But what it has now is AND. For it to fire or trigger, both must be triggered. So if somebody puts only one, maybe PII, and does not put PCI, then it does not trigger. It should have an OR, so that I can have multiple policies and then differentiate them so that if this OR this OR this, either of these triggers. I have flagged that and raised that as a concern to the product team. I expect additional features from them in the next release, specifically the OR feature for the conditions. However, I am happy with the agent, the lightweight agent, the amount of activities it captures. Beyond just the DLP, it looks at the sites and URLs you are going to, it looks at the file renaming, it looks at the attempt to uninstall, and it looks really deep even though it is user mode. I am happy with that. The Boolean logic is what I think is incomplete at the moment.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The ability to identify cloud misconfigurations, prioritize security risks, and monitor cloud resources from a single platform is quite valuable."
"TotalCloud provides the easiest and the best approach for cloud infrastructure management."
"Qualys TotalCloud's most valuable feature is its agent versatility."
"The most valuable feature is extensibility."
"Qualys TotalCloud fulfills all these needs."
"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"
"My experience with using TruRisk to mitigate noise from raw CVEs has been great."
"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."
"The tool happens to be very intelligent when it comes to processing policies and sounding alerts. It allows us to implement policies and measure actions against them, raising alerts accordingly."
"Before SecureSphere was used, the native auditing tools were used, and now there is a segregation of duties when managing audit data from DBAs and DBS teams."
"It has a user-friendly interface. It is a stable and scalable product."
"Imperva SecureSphere Database Security is both completely scalable and stable."
"Our primary use for this product is as an application firewall."
"In terms of regulatory compliance, one of the key requirements is to ensure that our core databases are monitored, and SecureSphere allows us to generate details to prove that we're compliant with all requirements."
"I like almost everything about the solution, including sensitive data scanning, which is the most important, the data discovery is great as well, and I like the activity monitoring, which was the main reason we purchased the tool."
"The discovery module provides good visibility."
"It has helped my data security strategy very well because one thing is to set static DLP rules, however, how do you start setting rules when you have little or zero visibility as to where your critical or sensitive data resides?"
 

Cons

"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."
"It has been working very well, but it would be helpful if the dashboard could generate reports tailored to specific compliance needs. For example, in India, we have to comply with RBI and SEBI guidelines. It w"
"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."
"I didn't give it a ten because I would like to see simpler configuration, more customizable dashboards, and better automation and integration options."
"One thing that could be improved is the user experience and navigation."
"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."
"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."
"The areas in the solution that have room for improvement include the UI/UX design, which should be improved, and they should integrate more artificial intelligence into the product."
"SecureSphere activity log can be used with Imperva CounterBreach in an effort to protect enterprise data from theft and loss caused. Since such is core to its function, I would like to see future versions to integrate such options."
"The development mode on the platform needs improvement. For example, the archiving functionalities should be enhanced to allow easy conversion of archived logs into CSV or Excel formats for data analysis."
"It is quite expensive. We wanted it in my former organization, but the price was very high."
"I would like to see improvement in the integration part of the tool. This should be an easy process."
"Some cloud versions are not supported by the agent."
"I think the biggest challenge with their product is the management of it; it requires a lot of upkeep and deployment of a lot of servers that require regular updating, and if you want to make any changes it's a lot of work to get things moving."
"Integration with other databases or third-party products would be useful."
"Some cloud versions are not supported by the agent. For example, we had a client that wanted to move to the cloud and wanted to use AWS, however, it was not possible."
"In my opinion, what should be improved about Proofpoint Data Security Posture Management is that it is quite advanced."
 

Pricing and Cost Advice

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
"Qualys TotalCloud is expensive."
"The cost is high, but it meets our organizational needs."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"TotalCloud's price is about right where I would expect it to be."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Pricing is low and scalable to add features and volume."
"The pricing over-all depends on the entry level. For example, if support and maintenance are about $20,000 - $25,000, the initial cost can be five times more. It is less expensive for the company to maintain the client than to make the deployment."
"The pricing is reasonable and competitive."
"The price of the solution is reasonable and it requires a license."
"The setup and license are quite expensive."
"The product is expensive."
"Licensing fees are on a yearly basis, and it is a good value for the money."
"They have introduced new price models, which makes the product more affordable now."
Information not available
report
Use our free recommendation engine to learn which Data Security Posture Management (DSPM) solutions are best for your needs.
918,614 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Financial Services Firm
20%
Manufacturing Company
8%
Comms Service Provider
7%
Outsourcing Company
7%
Financial Services Firm
15%
Outsourcing Company
11%
Comms Service Provider
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise10
Large Enterprise38
By reviewers
Company SizeCount
Small Business28
Midsize Enterprise9
Large Enterprise32
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
I was not involved in pricing, setup cost, and licensing, but I can say that the setup was fast, within a quarter, an...
What needs improvement with Qualys TotalCloud?
In terms of improvements, the features we are using in Qualys TotalCloud are working in the best optimal way, and I d...
What is your primary use case for Qualys TotalCloud?
I have been using Qualys TotalCloud for the last eight months to scan the hardware and the virtual devices in our inf...
How does IBM Guardium Data Protection compare with Imperva SecureSphere Database Security?
IBM Security Guardium Data Protection is a solution for database security from IBM that gives complete visibility, co...
What needs improvement with Imperva SecureSphere Database Security?
There are several aspects of the Imperva SecureSphere Database Security that could be improved or enhanced.There are ...
What needs improvement with Proofpoint Data Security Posture Management?
In my opinion, what should be improved about Proofpoint Data Security Posture Management is that it is quite advanced...
What is your primary use case for Proofpoint Data Security Posture Management?
I have been dealing with Proofpoint Data Security Posture Management as a distributor. If you are speaking on the Pro...
What advice do you have for others considering Proofpoint Data Security Posture Management?
It has improved my compliance efforts absolutely because first and foremost, with the classification, it guides users...
 

Also Known As

Qualys TotalCloud with FlexScan
Imperva SecureSphere Database Security, jSonar, Imperva's Data Security Posture Management
No data available
 

Overview

 

Sample Customers

Information Not Available
BlueCross BlueShield, eHarmony, EMF Broadcasting, GE Healthcare, Metro Bank, The Motley Fool, Siemens
Information Not Available
Find out what your peers are saying about Wiz, Palo Alto Networks, Varonis and others in Data Security Posture Management (DSPM). Updated: September 2026.
918,614 professionals have used our research since 2012.