No more typing reviews! Try our Samantha, our new voice AI agent.

Morphisec vs NinjaOne comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
10th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
46
Ranking in other categories
Container Security (11th), Cloud Workload Protection Platforms (CWPP) (9th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
Morphisec
Ranking in Vulnerability Management
56th
Average Rating
9.2
Reviews Sentiment
7.4
Number of Reviews
21
Ranking in other categories
Endpoint Protection Platform (EPP) (44th), Advanced Threat Protection (ATP) (29th), Endpoint Detection and Response (EDR) (60th), Cloud Workload Protection Platforms (CWPP) (34th), Threat Deception Platforms (13th)
NinjaOne
Ranking in Vulnerability Management
21st
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
25
Ranking in other categories
Help Desk Software (6th), Network Monitoring Software (11th), Server Monitoring (2nd), IT Service Management (ITSM) (6th), Remote Access (8th), Mobile Device Management (MDM) (4th), IT Alerting and Incident Management (8th), Remote Monitoring and Management (RMM) (1st), Patch Management (4th), MSP Backup (1st), Unified Endpoint Management (UEM) (6th), Autonomous Endpoint Management (3rd)
 

Mindshare comparison

As of October 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.2%, up from 1.0% compared to the previous year. The mindshare of Morphisec is 0.9%, up from 0.4% compared to the previous year. The mindshare of NinjaOne is 1.0%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.2%
NinjaOne1.0%
Morphisec0.9%
Other96.9%
Vulnerability Management
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Rick Schibler - PeerSpot reviewer
VP of Information Technology at Kentucky Trailer
Offers in-memory protection at a lower price than competitors
Morphisec's in-memory protection is probably the most valuable feature because it stops malicious activity from occurring. If something tries to install or act as a sleeper agent, Morphisec will detect and stop it. Morphisec's Moving Target Defense is critical to hardening our attack surface. If it detects something, it indicates whether it's valid. That means you've got a breach requiring investigation. It detects anomalies but doesn't necessarily point to what caused them. You still need to do that work. The solution is reasonably easy to administer. They made some changes last year, adding a cloud-based monitoring solution that makes deploying and monitoring our endpoints easy.
Not Joseph Pearson - PeerSpot reviewer
Assistant Vice President, Tech Solutions at LPL Financials
Has simplified remote software delivery and script management but needs improved reporting flexibility and better Mac support
NinjaOne's best features include ease of use regarding enablement and deployment, a broad selection and ability of software enablement, and API deliveries. Using CrowdStrike, we are able to tie in NinjaOne's API to have these automatically deliver to endpoints upon addition of those devices to a group with that policy deployed to it. NinjaOne has positively impacted our organization by making delivery easier for our end users and improving the ability to create scripts, manage scripts, and check status of devices and their compliance. This easier delivery with NinjaOne gives us oversight on devices without having to be on the call or remoted in directly to a device.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The biggest strengths of Qualys TotalCloud are that it is pretty good at cloud visibility, has easy integration, and also has multi-cloud compatibility."
"The dashboards are particularly valuable as they offer a comprehensive view of the environment, highlighting any misconfigurations."
"If I had to say something positive about the product that brings me the biggest benefit, I would say it has accurate reports, gets new update CVEs, zero-day attack detection, and is easy to manage with its GUI."
"One of the features I appreciate is the ability to generate daily reports without relying on anyone else."
"Qualys TotalCloud has significantly improved our organization by automating our reporting processes, reducing the time spent on report creation from two hours to less than fifteen to twenty minutes."
"Qualys TotalCloud is an excellent platform, and the beauty of the platform is that we can get all the vulnerabilities, see all the reports in a single dashboard, view them segregated, and easily learn about critical, high, and medium findings with appropriately provided remediation steps."
"Qualys TotalCloud has positively impacted our organization by helping us save time and manage all assets and remediation, allowing us to achieve quarterly and half-yearly goals."
"TotalCloud has been excellent in providing us with immediate access to all the products and features we need, such as CSPM, TruRisk Insights, and compliance reports, including CIS and HIPAA."
"Morphisec is quite an important tool for us in terms of security and InfoSec because of the malware protection."
"We have seen it successfully block attacks that a traditional antivirus did not pick up."
"Morphisec provides full visibility into security events from Microsoft Defender and Morphisec in one dashboard. Defender and Morphisec are integrated. It's important because it lowers the total cost of maintenance on the engineer's time, more or less. So the administrative time is dramatically reduced in maintaining the product. This saves an engineer around four to five hours a week."
"Since we started using Morphisec, that hasn't happened even once."
"It's simple, it's easy, and it works."
"If you have the ability to get Morphisec into their environment, it's going to be a hundred percent return on investment."
"All the alerts are on the dashboard, which is quite simple and useful for us. You can easily check all the alerts that are being blocked or allowed, or whatever the action is. You can easily see that and you can take the necessary actions. You can add a PowerShell extension or any activities for blocking at your network level or for endpoints."
"Morphisec makes it super easy for our IT team to prevent breaches of critical systems; it is a one-click install, then it takes care of the rest."
"The installation is easy, it only took two minutes."
"A significant feature of NinjaOne is its remote access capability, which is essential for my clients’ home office usage."
"NinjaOne has positively impacted our organization by making delivery easier for our end users and improving the ability to create scripts, manage scripts, and check status of devices and their compliance."
"NinjaOne's best feature is its monitoring."
"If you are new to the MSP space and need an easy-to-set-up that can grow with your business and licensing, NinjaOne is an excellent option."
"If you're looking for a simple and cost-effective remote management tool, NinjaRMM is a good choice."
"The most valuable feature we have found currently is probably patch management."
"It helps us to be able to have visibility into the overall performance of the servers, laptops, and desktops that we are managing currently."
 

Cons

"In TotalCloud, I would suggest improvements in policy checks to cater to various inventory types like VPCs, subnets, S3 buckets, or IAMs. There is a lack of data segregation according to criticality or inventory."
"The vulnerability part is good, but the policy compliance module needs improvement because it involves a lot of manual work. Specifically, the remediation part of the controls requires enhancements."
"One of the things that could be improved is the alerts. Qualys is a fantastic tool, especially with the TruRisk feature, but one challenge that most leaders face involves alert fatigue."
"I think Qualys TotalCloud needs to improve its handling of zero-day vulnerabilities and supply chain management because modern ransomware attacks not only target prime critical infrastructures but also the supply chain system."
"A feature improvement could be the inclusion of Windows OS support for container security, as it is currently only supported for Linux."
"In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys TotalCloud."
"An area for improvement would be to focus on risks related to AI, such as large language models and potential data leakage."
"TotalCloud could improve its scanning of niche devices like Wi-Fi dongles and USB modems because they are often untested. It covers everything else, like laptops, mobile devices, and Bluetooth IoT devices. They can improve on the small IoT devices because hackers and testers use these."
"It would be useful for them if they had some kind of network discovery."
"At this time, it is able to recognize vulnerabilities and reporting them to us, but it's not actually resolving them."
"Morphisec is a venture startup. They are still early in their growth stage. They need to get mature on their customer support and on how they interface with system tools. For example, they need to get multifactor in place and an API for the major multi-factor systems, e.g., Okta, Duo, Ping, and Microsoft. They don't have them built in yet. They are working on them. It is just not there yet. Also, their stability, customer support, and processes need improvement, which is just part of maturity."
"The only area that really needs improvement is the reporting functionality. Gathering the detailed information that is in the system for an executive, or for me as a director, could be better. Some of the interface and reporting aspects are a little bit dated. They're working on it."
"We have discovered some bugs in the new releases that they've had to fix, so I would like to see more testing and QA on their side before they release."
"In the Windows Defender integration, they have put in a report of computers that need Windows Defender updates. If those updates could be kicked off directly from the dashboard, instead of having to go to another system entirely, that would be good."
"Automating reports needs improvement. I would like to have better reporting capabilities within it or automated reporting to be a little bit more dynamic. That's something I know they're working on. We literally are in the process. We started the process a week and a half ago of going to their latest version, so I've not seen their latest one up and running yet."
"I haven't been able to get the cloud deployment to work. When there's an update, I'm supposed to be able to roll it out for the cloud solution, but right now I'm continuing to use our SCCM solution to update it."
"There was a lot of delay with NinjaOne's ticketing system. For example, when a user creates a ticket and raises an issue, it would take 30 to 40 minutes to appear on the IT side. So the time delay issue is the main point."
"I wish that they integrated it with more antivirus solutions. Currently, they only push Defender, but it doesn't really have integration with SentinelOne."
"Improvements could be made to reduce NinjaOne's functionalities to focus more on inventory or remote help tools."
"NinjaOne's reporting module is cumbersome."
"NinjaOne can be improved by making mobile usage on the system cheaper because it becomes an expensive commodity."
"I wish that they integrated it with more antivirus solutions. Currently, they only push Defender, but it doesn't really have integration with SentinelOne. It also didn't integrate with Trend Micro, which we were using previously. I would also like to have more control from the mobile app. As of now, I am able to see some performance values, but I can't see, for example, disk activity or disk performance values. If they can improve their app a little bit, it would help greatly. They can also improve the tech interface. If I assign certain techs to a bunch of specific machines, they only get those alerts that they're assigned to."
"One challenge I face with NinjaOne is that when remoting in, sometimes the end user has a resolution with very tiny text, making it necessary to zoom in to see what the other computer is displaying."
"NinjaOne's pricing and user interface needs improvement."
 

Pricing and Cost Advice

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Qualys TotalCloud is expensive."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"The cost is high, but it meets our organizational needs."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"Price-wise, it's on the higher side. A traditional antivirus solution is cheaper, but in terms of security and manageability, its ROI is better than a traditional antivirus. I would recommend it to anybody evaluating or considering an antivirus solution. If your system gets compromised, the cost of ransom would be a lot more. This way, it saves a lot of cost."
"The pricing is definitely fair for what it does."
"Compared to their competitors, the price of Morphisec is not that high. You can easily deploy it on a large-scale or small-scale network."
"It is a little bit more expensive than other security products that we use, but it does provide us good protection. So, it is a trade-off."
"Licenses are per endpoint, and that's true for the cloud version as well. The only difference is that there is a little extra charge for the cloud version."
"We are still using a separate tool. I know for our 600 or I think we're actually licensed for up to 700 users, it runs me 23 or $24,000 a year. When you're talking to that many users plus servers being protected, that's well worth the investment for that dollar amount."
"Our licensing is tied into our contract. Because we have a long-term contract, our pricing is a little bit lower. It is per year, so we don't get charged per endpoint, but we do have a cap. Our cap is 80 endpoints. If we were to go over 80, when we renewed our contract, which is not until three years are over. Then, they would reevaluate, and say, "Well, you have more than 80 devices active right now. This is going to be the price change." They know that we are installing and replacing computers, so the numbers will be all over the place depending on whether you archive or don't archive, which is the reason why we just have to keep up on that stuff."
"It is an annual subscription basis per device. For the devices that we have in scope right now, it is about $25,000 a year."
"The product's pricing depends on the number of PCs or devices."
"NinjaOne's price is fine since my workplace is an educational institution, so we get the product at a really good price considering that we do not pay taxes, making the prices very fair and worth the product."
"Its pricing is great."
"NinjaOne is a little expensive but is still cheaper than competitors like Acronis or Veeam."
"NinjaRMM uses a subscription model."
"We currently pay $1.20 per device on a monthly basis."
"We got a pretty good deal. It was fairly affordable."
"I rate the solution’s pricing a five out of ten, where one is the lowest and ten is the most expensive."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
16%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Outsourcing Company
15%
Manufacturing Company
13%
Construction Company
13%
Comms Service Provider
10%
Comms Service Provider
10%
Manufacturing Company
9%
Financial Services Firm
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise6
Large Enterprise35
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise8
Large Enterprise8
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise3
Large Enterprise4
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is regarding the cloud visibility that we were not having previously. Previous...
Ask a question
Earn 20 points
What is your experience regarding pricing and costs for NinjaOne?
My experience with pricing, setup cost, and licensing is that I think it is very reasonable for the product that we get.
What needs improvement with NinjaOne?
To improve NinjaOne, there should be better integration between multiple different software including Cisco and Meraki.
What is your primary use case for NinjaOne?
My main use case for NinjaOne is managing machines over multiple networks and locations. For managing machines across...
 

Also Known As

Qualys TotalCloud with FlexScan
Morphisec, Morphisec Moving Target Defense
No data available
 

Overview

 

Sample Customers

Information Not Available
Lenovo/Motorola, TruGreen, Covenant Health, Citizens Medical Center
Status Pros, Mitchell and Company
Find out what your peers are saying about Morphisec vs. NinjaOne and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.