No more typing reviews! Try our Samantha, our new voice AI agent.

Morphisec vs Trellix Cloud Workload Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Cloud Workload Protection Platforms (CWPP)
8th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
43
Ranking in other categories
Vulnerability Management (11th), Container Security (12th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
Morphisec
Ranking in Cloud Workload Protection Platforms (CWPP)
36th
Average Rating
9.2
Reviews Sentiment
7.4
Number of Reviews
21
Ranking in other categories
Vulnerability Management (59th), Endpoint Protection Platform (EPP) (47th), Advanced Threat Protection (ATP) (29th), Endpoint Detection and Response (EDR) (61st), Threat Deception Platforms (13th)
Trellix Cloud Workload Secu...
Ranking in Cloud Workload Protection Platforms (CWPP)
17th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
9
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Cloud Workload Protection Platforms (CWPP) category, the mindshare of Qualys TotalCloud is 1.7%, up from 1.3% compared to the previous year. The mindshare of Morphisec is 0.8%, up from 0.2% compared to the previous year. The mindshare of Trellix Cloud Workload Security is 0.7%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Workload Protection Platforms (CWPP) Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.7%
Trellix Cloud Workload Security0.7%
Morphisec0.8%
Other96.8%
Cloud Workload Protection Platforms (CWPP)
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
Rick Schibler - PeerSpot reviewer
VP of Information Technology at Kentucky Trailer
Offers in-memory protection at a lower price than competitors
Morphisec's in-memory protection is probably the most valuable feature because it stops malicious activity from occurring. If something tries to install or act as a sleeper agent, Morphisec will detect and stop it. Morphisec's Moving Target Defense is critical to hardening our attack surface. If it detects something, it indicates whether it's valid. That means you've got a breach requiring investigation. It detects anomalies but doesn't necessarily point to what caused them. You still need to do that work. The solution is reasonably easy to administer. They made some changes last year, adding a cloud-based monitoring solution that makes deploying and monitoring our endpoints easy.
Krishnakumar Mahadevan - PeerSpot reviewer
CISO at Spink Solutions Private Limited
Centralized visibility has improved cloud posture management and automated threat response
The disadvantages of Trellix Cloud Workload Security include some global aspects where minor improvements could be done. When doing pairwise comparisons between products on the same topic, such as posture management and how it is managed in Palo Alto, Check Point, Symantec, and Trellix, certain gaps emerge. One key limitation is that Trellix Cloud Workload Security will not provide support for China and Russia based cloud vendors. If a customer is an enterprise or global enterprise customer, this product cannot be suggested because the company does not deal with China's cloud providers. China has very good cloud options such as Alibaba Cloud and Tencent, and Trellix Cloud Workload Security does not support these platforms. Another limitation is related to CNAPP capabilities. In comparison with other CNAPP vendors, Trellix Cloud Workload Security has some drawbacks. The product does not provide full-fledged CNAPP like others do. It provides only top-level or top-layer information and lacks in-depth CNAPP capabilities, which is a key limitation. Regarding SIEM functionality, Trellix Cloud Workload Security has a native SIEM component, but it appears to be using a third-party SIEM functionality. The company is not providing their own SIEM tools but rather receiving a third-party tool and managing it. This is a disadvantage because the integration will not be as perfect as it would be with a native solution. The SIEM tool integration presents a problem. Pricing is another significant disadvantage, especially for small and medium-sized enterprises. SMEs will likely not choose Trellix Cloud Workload Security because it is very expensive. The product is not prominent in the Gartner market share rankings, and the numbers are very small. Trellix Cloud Workload Security is not competing with market leaders such as SentinelOne, which has a 5% market share. The company claims CWPP, which stands for Cloud Workload Platform Protection, but the market share is very small. The reason market share is less is because service-oriented companies with service-oriented mindsets look at who is providing the best services. They consult Gartner reports or Forrester reports, and if Trellix Cloud Workload Security is not present in those reports, they may not suggest this product to customers. Additionally, the product is expensive for SMEs, although enterprise customers can afford it. The minimum 25 user bundle requirement means licensing is sold in basic tiers of 25 users at a time.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Vulnerability and threat detection and assessment of the criticality of the vulnerabilities exposed are most valuable."
"The best features in Qualys TotalCloud include the total asset management of the cloud environment. It is very easy to export the report and see the vulnerabilities related to the cloud specifically."
"Qualys TotalCloud's most valuable feature is its ability to link clusters of assets, providing a clear model of deployments, vulnerabilities, and statuses."
"TotalCloud has been excellent in providing us with immediate access to all the products and features we need, such as CSPM, TruRisk Insights, and compliance reports, including CIS and HIPAA."
"I would definitely recommend Qualys TotalCloud to other customers."
"Qualys TotalCloud has significantly reduced our workload in terms of managing risks, helping us to be more efficient and save substantial resources."
"Qualys TotalCloud has positively impacted our organization by helping us save time and manage all assets and remediation, allowing us to achieve quarterly and half-yearly goals."
"The vulnerability management feature is the one I like the most because it provides a clear picture of all vulnerabilities."
"We don't have to do anything as a user or as an admin. It does everything by default with its coding and inbuilt AI-based intelligence. We don't have to instruct it about what to do. It automatically takes corrective actions and quarantines or deletes a virus, malware, etc. That is the best part that I like about it."
"Morphisec is quite an important tool for us in terms of security and InfoSec because of the malware protection."
"It's simple, it's easy, and it works."
"What's valuable is really the whole kit and caboodle of the Morphisec agent."
"Morphisec provides full visibility into security events from Microsoft Defender and Morphisec in one dashboard. Defender and Morphisec are integrated. It's important because it lowers the total cost of maintenance on the engineer's time, more or less. So the administrative time is dramatically reduced in maintaining the product. This saves an engineer around four to five hours a week."
"Morphisec has absolutely helped save money on our security stack. The ransomware at the end of the day can cost organizations millions upon millions of dollars. Investing in tools like Morphisec is a great reduction in that cost. If I can spend $10,000 in a year to protect assets that could be ransomed for $20,000,000, that's definitely a bet that one should pursue. Morphisec absolutely it's worth the investment."
"The biggest feature is that it hides everything from your operating system that's running in-memory from anything to try to run against it. That's the most unique thing that's on the market. There's nothing else out there that's quite like that. That's a big selling point and why we went with it. It does exactly what the design does. If you can't find it, you can't execute against it."
"We haven't had any cybersecurity incidents on machines running Morphisec."
"We have seen great outcomes with Trellix Cloud Workload Security, such as a clear drop in the time it takes to spot and deal with security issues in our cloud environment since we started using this product, so overall it is saving our time and having a positive impact."
"Trellix Cloud Workload Security has positively impacted my organization by providing prominent visibility concerning detection, threat, risk, and vulnerabilities across the cloud environment, helping us to be proactive in risk mitigation before any disaster happens."
"The discovery feature is the most valuable. After you integrate your cloud environment, maybe an Azure or AWS, or a private environment hosted on VMware, it automatically starts discovering the number of servers that are running on that cloud and the number of services that you have done. It is a beautiful feature because, from a security standpoint, it is difficult to identify which VM is compliant or not when you keep on provisioning a number of VMs in the cloud. It also checks for compliance. It checks whether a system is compliant and whether antivirus is installed on a VM. If an antivirus is installed, it checks whether the antivirus is updated to the latest signature package or not. All these things are beautifully done by McAfee Cloud Workload Security. For communicating with the McAfee server, you need to install an agent on the VM. McAfee Cloud Workload Security gives you a direct opportunity to install an agent on a Windows machine. If you have a Windows cloud, you can directly push that agent onto the VM through your McAfee portal. It provides you a single dashboard view of all servers present in the cloud. It shows the servers on which the antivirus is already installed as well as the servers for which the antivirus installation is still pending. This dashboard view is a much-needed thing. It also has a centralized management, which makes it easy to use."
"Trellix Cloud Workload Security has positively impacted our organization by improving our visibility across cloud and infrastructure, showing how many workloads we have and what is occurring with those workloads."
"Trellix Cloud Workload Security has positively impacted my organization because it has strengthened cloud security control, improved workload visibility, and reduced risk."
"All these things are beautifully done by McAfee Cloud Workload Security."
"The installation process of Trellix Cloud Workload Security is very easy because the ePolicy Orchestrator is integrated."
"The intuitive dashboard does not cause any time loss."
 

Cons

"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."
"I think Qualys TotalCloud needs to improve its handling of zero-day vulnerabilities and supply chain management because modern ransomware attacks not only target prime critical infrastructures but also the supply chain system."
"The areas in the solution that have room for improvement include the UI/UX design, which should be improved, and they should integrate more artificial intelligence into the product."
"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."
"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."
"There is room for improvement in the support."
"It has been working very well, but it would be helpful if the dashboard could generate reports tailored to specific compliance needs. For example, in India, we have to comply with RBI and SEBI guidelines. It w"
"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."
"We have only had four attacks in the last year, "attacks" being some benign PDF from a vendor that, for some reason, were triggered. There were no actual attacks. They were just four false positives, or something lowly like adware. There have been false positives with both the on-premises solution and the cloud solution."
"It might be a bit much to ask, but we are now beginning to use Morphisec Scout, which provides vulnerability information. At this time, it's recognizing vulnerabilities and reporting them to us, but it's not necessarily resolving them. There's still a separate manual process to resolve those vulnerabilities, primarily through upgrades. We have to do that outside of Morphisec. If Morphisec could somehow have that capability built into it, that would be very effective."
"We started in the Linux platform and we deployed to Linux. The licensing of that has been kind of confusing between Linux licensing and Windows licensing. The overall simplicity of licensing or offering an enterprise license to just cover everything and then we don't have to count needs improvement."
"It would be useful for them if they had some kind of network discovery. That kind of functionality I think would give IT administrators a little bit more confidence that they have 100 percent coverage, and it gives them something to audit against. Network discovery would be one area I would definitely suggest that they put some effort into."
"From a company standpoint, a little more interaction with the customers throughout the year might be beneficial. I would like check-ins from the Morphisec account executives about any type of Morphisec news as well as a bit more interaction with customers throughout the year to know if anything new is coming out with Morphisec, e.g., what they are working on in regards to their development roadmap. We tend not to get that up until the time that we go for a yearly renewal. So, we end up talking to people from Morphisec once a year, but it is usually at renewal time."
"The weakest point of this product is how difficult it is to understand the reasons for an alert. This is a problem because it is hard to determine whether an attack is real or not."
"The dashboard is the area that requires the most improvement."
"Morphisec is a venture startup. They are still early in their growth stage. They need to get mature on their customer support and on how they interface with system tools."
"We experience limited customer support, typically requiring a minimum wait of three to four hours for ticket responses."
"There is room for improvement in the pricing model."
"The time to detect or resolve is a concern, and I am not fully satisfied with that aspect."
"I think with the cloud AWS, there could be some improvements for Trellix Cloud Workload Security."
"The key issue from Trellix is a lack of knowledge about the product."
"I think Trellix Cloud Workload Security could improve by simplifying the initial deployment, as the initial setup requires an expert level of knowledge to deploy it."
"Its vulnerability assessment is not the best. We cannot identify the vulnerabilities that are related to the operating system by using McAfee Cloud Workload Security."
"Its vulnerability assessment is not the best. We cannot identify the vulnerabilities that are related to the operating system by using McAfee Cloud Workload Security. I wish McAfee would add a vulnerability assessment tool that will not only identify the vulnerability but will also be able to generate a report so that the required patching can be done for the servers. Currently, McAfee Cloud Workload Security only integrates with AWS and Azure. If it can also integrate with GCP, Alibaba, and other cloud services available in the market, it would be good because not all people are using Azure and AWS."
 

Pricing and Cost Advice

"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"The cost is high, but it meets our organizational needs."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"TotalCloud's price is about right where I would expect it to be."
"Price-wise, it's on the higher side. A traditional antivirus solution is cheaper, but in terms of security and manageability, its ROI is better than a traditional antivirus. I would recommend it to anybody evaluating or considering an antivirus solution. If your system gets compromised, the cost of ransom would be a lot more. This way, it saves a lot of cost."
"It does not have multi-tenants. If South Africa wants to show only the machines that they have, they need their own cloud incidence. It is not possible to have that in a single cloud incidence with multiple tenants in it, instead you need to have multiple cloud incidences. Then, if you have that, it will be more expensive. However, they are going to change that, which is good."
"The pricing is definitely fair for what it does."
"Licenses are per endpoint, and that's true for the cloud version as well. The only difference is that there is a little extra charge for the cloud version."
"Our licensing is tied into our contract. Because we have a long-term contract, our pricing is a little bit lower. It is per year, so we don't get charged per endpoint, but we do have a cap. Our cap is 80 endpoints. If we were to go over 80, when we renewed our contract, which is not until three years are over. Then, they would reevaluate, and say, "Well, you have more than 80 devices active right now. This is going to be the price change." They know that we are installing and replacing computers, so the numbers will be all over the place depending on whether you archive or don't archive, which is the reason why we just have to keep up on that stuff."
"We are still using a separate tool. I know for our 600 or I think we're actually licensed for up to 700 users, it runs me 23 or $24,000 a year. When you're talking to that many users plus servers being protected, that's well worth the investment for that dollar amount."
"It is priced correctly for what it does. They end up doing a good deal of discounting, but I think it is priced appropriately."
"It is a little bit more expensive than other security products that we use, but it does provide us good protection. So, it is a trade-off."
"It is not an expensive product. I am in the Indian market, and it is one of the most reliable and cost-effective solutions."
report
Use our free recommendation engine to learn which Cloud Workload Protection Platforms (CWPP) solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
13%
Comms Service Provider
11%
Outsourcing Company
11%
Financial Services Firm
10%
Outsourcing Company
19%
Manufacturing Company
12%
Construction Company
12%
Financial Services Firm
8%
Outsourcing Company
23%
Healthcare Company
12%
Comms Service Provider
11%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise5
Large Enterprise31
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise8
Large Enterprise8
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise1
Large Enterprise3
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...
Ask a question
Earn 20 points
What is your experience regarding pricing and costs for McAfee Cloud Workload Security?
We probably purchased it through AWS Marketplace, and we did. I think the licensing costs for Trellix Cloud Workload ...
What needs improvement with McAfee Cloud Workload Security?
The disadvantages of Trellix Cloud Workload Security include some global aspects where minor improvements could be do...
What advice do you have for others considering McAfee Cloud Workload Security?
Trellix Cloud Workload Security is scalable. My overall review rating for this product is 8.
 

Also Known As

Qualys TotalCloud with FlexScan
Morphisec, Morphisec Moving Target Defense
McAfee Cloud Workload Security
 

Overview

 

Sample Customers

Information Not Available
Lenovo/Motorola, TruGreen, Covenant Health, Citizens Medical Center
Information Not Available
Find out what your peers are saying about Morphisec vs. Trellix Cloud Workload Security and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.