


Microsoft Defender for Cloud and Qualys Enterprise TruRisk Platform compete in the enterprise security market, focusing on threat management and risk assessment. Microsoft Defender for Cloud may have an advantage due to its seamless integration with other Microsoft products and robust security features, while Qualys excels in detailed reporting and risk management.
Features: Microsoft Defender for Cloud integrates well with other Microsoft solutions like Microsoft Sentinel, providing comprehensive threat visibility and excellent multicloud capability, making it highly scalable. It also benefits from a robust security policy feature. Qualys Enterprise TruRisk Platform provides comprehensive reports and metrics, facilitates easy third-party tool integration, and covers a broad range of vulnerabilities, making it ideal for detailed risk management.
Room for Improvement: Microsoft Defender for Cloud could improve centralized policy management, detailed reporting capabilities, and integration with third-party products. There is also a need for faster status update refreshment post-remediation. Qualys could enhance OS version identification, user interface customization, AI integration, and support response times. It would also benefit from requiring less compute resources and improved handling of integration with external AI agents.
Ease of Deployment and Customer Service: Both Microsoft and Qualys handle multiple cloud environments efficiently. Microsoft support receives mixed reviews, with some users desiring clearer documentation and faster resolution times. Qualys support is noted for responsiveness, yet there are calls for more technical expertise and faster solutions.
Pricing and ROI: Microsoft Defender for Cloud is perceived as expensive due to its complex pricing structure based on workloads, yet it offers significant ROI with improved security and reduced compliance costs. Qualys is considered moderately priced with a competitive edge, offering good value through its capability for detailed risk management and effective vulnerability assessments.
We are able to scan all our assets with less human intervention and achieve overall effective outcomes.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
Defender proactively indexes and analyzes documents, identifying potential threats even when inactive, enhancing preventative security.
Identifying potential vulnerabilities has helped us avoid costly data losses.
Compared to not having Microsoft Defender for Cloud in place, we definitely saw an advantage by not having downtime due to a security threat.
I have definitely seen a return on investment; we save a lot of time on a day-to-day basis, during audits, and we need fewer employees because the platform has a lot of capabilities that do not require manual effort.
In case of any attack and compromise, there is a big value return on investment.
I estimate that I have managed to save about thirty percent time since I started using the platform.
On a scale from one to ten, I would rate customer support a ten.
The technical support from Qualys is excellent, always available 24/7 for any urgent needs.
The technical support team is strong and helpful in solving issues promptly.
Since security is critical, we prefer a quicker response time.
The support team was very responsive to queries.
They understand their product, but much like us, they struggle with the finer details, especially with new features.
I have seen replies in less than two or three hours.
When we reach the support team, they do not seem to have the skills to handle our questions and instead return with basic scripted questions rather than understanding what we are asking for and providing proper answers.
They provide detailed explanations or instructions when needed, making it easy to resolve specific problems.
I would rate its scalability a ten out of ten.
The scalability of Qualys TotalCloud is excellent, and I would rate it as ten out of ten.
For scalability, I would rate it a ten out of ten.
As we have reduced our on-premises infrastructure, it is about how we can migrate workloads to the cloud to make it easier, and then having everything fully encompassed and secured within that area makes it much easier for us to scale as needed and grow.
We are using infrastructure as a code, so we do not have any scalability issues with Microsoft Defender for Cloud implementation because our cloud automatically does it.
It has multiple licenses and features, covering infrastructures from a hundred to five hundred virtual machines, without any issues.
Once we supplied 130 URLs to it for scanning one by one, and it crashed in between.
Qualys is fairly elastic.
The use cases that we have handled have not presented much of a challenge on the scalability part.
It has a lot of scanning mechanisms, which are agentless APIs, eBPF, and cloud agents, that are highly reliable.
I would rate it a ten out of ten for stability.
We have not encountered any lagging or crashing from the tool.
Defender's stability has been flawless for us.
I have not experienced any crashes or downtime.
Microsoft Defender for Cloud is very stable.
I would describe Qualys Enterprise TruRisk Platform as stable regarding crashes or downtimes ever happening.
It is not critical in the way that we have for Cortex XDR where if it fails, then the organization basically ceases to function.
In terms of stability, I would rate it somewhere around seven.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
If we find a critical or high vulnerability on an IP or server, the remediation steps should be communicated clearly.
Microsoft, in general, could significantly improve its communication and support.
It would be beneficial to streamline recommendations to avoid unnecessary alerts and to refine the severity of alerts based on specific environments or environmental attributes.
The artificial intelligence features could be expanded to allow the system to autonomously manage security issues without needing intervention from admins.
We need to export data to external tools to perform the work that is supposed to be done in the tool itself, so we do not have any real return on investment using this tool.
It would be beneficial if the solution could correctly identify the exact OS version, potentially requiring code adjustments.
If you have uploaded a file containing many IP addresses, you don't have a straightforward option to check what the IP addresses were.
In our case, replacing the tool will give us better functionalities without increasing the cost compared to what we pay today for the competitor.
Qualys TotalCloud offers good pricing that is affordable and competitive with the market.
Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform.
Security has essentially no cost when compared to the cost of a breach.
Every time we consider expanding usage, we carefully evaluate the necessity due to cost concerns.
We appreciate the licensing approach based on employee count rather than a big enterprise license.
Qualys Enterprise TruRisk Platform was not expensive regarding the pricing point.
The experience with pricing, setup cost, and licensing for Qualys Enterprise TruRisk Platform is expensive.
The pricing, setup cost, and licensing of Qualys Enterprise TruRisk Platform are as per our budgets, and we found it to be economical.
The AI enhancements simplify vulnerability management by eliminating the need for SQL queries to create policies.
For example, if some machines have open vulnerabilities and the remediation team resolves them, the on-demand feature allows us to verify vulnerability resolution promptly.
Qualys TotalCloud is also used to provide unified vulnerability and threat assessment across both IaaS and SaaS.
The most valuable feature for me is the variety of APIs available.
This feature significantly aids in threat detection and enhances the user experience by streamlining security management.
The most valuable feature is the recommendations provided on how to improve security.
The platform scans the entire environment and IP range, providing comprehensive vulnerability reports along with solutions to address these vulnerabilities.
It will also provide the information of the CVEs related to it, CVSS score related to it, and the CVEs will help you to understand more about how bad it can get.
It identified trust distributions amongst our assets, what are high risk items, what are critical things, vulnerabilities that can be exploited, and what are critical priorities for us.
| Product | Mindshare (%) |
|---|---|
| Microsoft Defender for Cloud | 6.5% |
| Qualys TotalCloud | 2.4% |
| Qualys Enterprise TruRisk Platform | 0.9% |
| Other | 90.2% |
| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 11 |
| Large Enterprise | 38 |
| Company Size | Count |
|---|---|
| Small Business | 31 |
| Midsize Enterprise | 12 |
| Large Enterprise | 49 |
| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 5 |
| Large Enterprise | 12 |
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
Microsoft Defender for Cloud is a comprehensive security platform offering integration with Microsoft services, multi-cloud capability, AI-driven threat detection, compliance, and unified visibility for improved security operations.
Microsoft Defender for Cloud manages security operations by integrating with Microsoft services and supporting multi-cloud environments. Its features include AI-driven threat detection, compliance oversight, and advanced threat protection. It simplifies processes with unified visibility, threat intelligence, and automated workflows, enhancing security posture across various workloads. Despite its robust capabilities, improvements are needed in third-party tool integration, comprehensive AI-driven remediation, and a more intuitive dashboard. Users report complexity in licensing, inadequate documentation, and high costs, with room for enhancements in compliance reporting and multi-cloud support.
What are the key features of Microsoft Defender for Cloud?
What benefits and ROI can users expect?
Organizations use Microsoft Defender for Cloud to secure applications from code to runtime across Azure, AWS, Google Cloud, and on-premises environments. Security teams use it to manage cloud security posture, protect servers, containers, and AI workloads, and investigate threats in the Microsoft Defender portal. It provides comprehensive security overviews by monitoring cloud vulnerabilities, limiting unauthorized access, and replacing existing tools with its extensive capabilities from network security to compliance checks, securing Azure infrastructure, and enhancing client security.
Qualys Enterprise TruRisk Platform provides robust risk management, supporting both agent-based and agentless deployments, scanning environments, categorizing risks, and prioritizing threats with machine learning capabilities.
Qualys Enterprise TruRisk Platform enhances vulnerability management across diverse systems, including Windows Server, databases, and network devices. It assigns CVE and CVSS scores, delivers detailed reports, and guides threat prioritization. Machine learning enables precise risk assessment and prioritization, suggesting remediation for security improvements. Users have noted support efficiency and UI improvements needed for customized checks and downloads, with AI integration highlighted as lacking compared to competitors.
What are the key features of Qualys Enterprise TruRisk Platform?Qualys Enterprise TruRisk Platform is leveraged in industries for vulnerability scans across internal networks, URLs, and IP addresses, especially within cloud and hybrid environments. It supports businesses in securing Windows, Linux, and Kubernetes clusters, offering internal asset and vulnerability assessments, and aiding in zero-trust security strategies.
We monitor all Cloud-Native Application Protection Platforms (CNAPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.