No more typing reviews! Try our Samantha, our new voice AI agent.

Morphisec vs Trellix Cloud Workload Security comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Cloud Workload Protection Platforms (CWPP)
9th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
46
Ranking in other categories
Vulnerability Management (10th), Container Security (11th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
Morphisec
Ranking in Cloud Workload Protection Platforms (CWPP)
34th
Average Rating
9.2
Reviews Sentiment
7.4
Number of Reviews
21
Ranking in other categories
Vulnerability Management (56th), Endpoint Protection Platform (EPP) (44th), Advanced Threat Protection (ATP) (29th), Endpoint Detection and Response (EDR) (60th), Threat Deception Platforms (13th)
Trellix Cloud Workload Secu...
Ranking in Cloud Workload Protection Platforms (CWPP)
17th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
10
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Cloud Workload Protection Platforms (CWPP) category, the mindshare of Qualys TotalCloud is 1.8%, up from 1.3% compared to the previous year. The mindshare of Morphisec is 0.9%, up from 0.2% compared to the previous year. The mindshare of Trellix Cloud Workload Security is 0.7%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Workload Protection Platforms (CWPP) Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.8%
Trellix Cloud Workload Security0.7%
Morphisec0.9%
Other96.6%
Cloud Workload Protection Platforms (CWPP)
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Rick Schibler - PeerSpot reviewer
VP of Information Technology at Kentucky Trailer
Offers in-memory protection at a lower price than competitors
Morphisec's in-memory protection is probably the most valuable feature because it stops malicious activity from occurring. If something tries to install or act as a sleeper agent, Morphisec will detect and stop it. Morphisec's Moving Target Defense is critical to hardening our attack surface. If it detects something, it indicates whether it's valid. That means you've got a breach requiring investigation. It detects anomalies but doesn't necessarily point to what caused them. You still need to do that work. The solution is reasonably easy to administer. They made some changes last year, adding a cloud-based monitoring solution that makes deploying and monitoring our endpoints easy.
Krishnakumar Mahadevan - PeerSpot reviewer
CISO at Spink Solutions Private Limited
Centralized visibility has improved cloud posture management and automated threat response
The disadvantages of Trellix Cloud Workload Security include some global aspects where minor improvements could be done. When doing pairwise comparisons between products on the same topic, such as posture management and how it is managed in Palo Alto, Check Point, Symantec, and Trellix, certain gaps emerge. One key limitation is that Trellix Cloud Workload Security will not provide support for China and Russia based cloud vendors. If a customer is an enterprise or global enterprise customer, this product cannot be suggested because the company does not deal with China's cloud providers. China has very good cloud options such as Alibaba Cloud and Tencent, and Trellix Cloud Workload Security does not support these platforms. Another limitation is related to CNAPP capabilities. In comparison with other CNAPP vendors, Trellix Cloud Workload Security has some drawbacks. The product does not provide full-fledged CNAPP like others do. It provides only top-level or top-layer information and lacks in-depth CNAPP capabilities, which is a key limitation. Regarding SIEM functionality, Trellix Cloud Workload Security has a native SIEM component, but it appears to be using a third-party SIEM functionality. The company is not providing their own SIEM tools but rather receiving a third-party tool and managing it. This is a disadvantage because the integration will not be as perfect as it would be with a native solution. The SIEM tool integration presents a problem. Pricing is another significant disadvantage, especially for small and medium-sized enterprises. SMEs will likely not choose Trellix Cloud Workload Security because it is very expensive. The product is not prominent in the Gartner market share rankings, and the numbers are very small. Trellix Cloud Workload Security is not competing with market leaders such as SentinelOne, which has a 5% market share. The company claims CWPP, which stands for Cloud Workload Platform Protection, but the market share is very small. The reason market share is less is because service-oriented companies with service-oriented mindsets look at who is providing the best services. They consult Gartner reports or Forrester reports, and if Trellix Cloud Workload Security is not present in those reports, they may not suggest this product to customers. Additionally, the product is expensive for SMEs, although enterprise customers can afford it. The minimum 25 user bundle requirement means licensing is sold in basic tiers of 25 users at a time.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Qualys TotalCloud's most valuable feature is its agent versatility."
"One of the most valuable features of Qualys TotalCloud is FlexScan, which is specifically for internet-facing VMs. We found this feature to be very useful. It was a key differentiator for us."
"If I had to say something positive about the product that brings me the biggest benefit, I would say it has accurate reports, gets new update CVEs, zero-day attack detection, and is easy to manage with its GUI."
"Qualys TotalCloud provides a single, prioritized view of risk, reducing the workload associated with consolidating multiple sources for risk prioritization."
"Its excellent graphical interface makes the scanning process simple."
"Qualys TotalCloud is overall the best tool available in the market for scanning purposes."
"TotalCloud's best feature is the integration of cloud accounts. It helps with the risk and security posture management of our cloud infrastructure."
"If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."
"Morphisec makes it very easy for IT teams of any size to prevent breaches of critical systems because of the design of their tool."
"We have not had one machine that has been taken down due to malware now in almost four and a half years, with 600 machines that we don't have routine infections on because nothing can execute."
"Morphisec stops attacks without needing to know what type of threat it is, just that it is foreign. It is based on injections, so it would know when a software launches. If a software launches and something else also launches, then it would count that as anomalous and block it. Because the software looks at the code, and if it executes something else that is not related, then Morphisec would block it. That is how it works."
"Morphisec has given our security team's operations peace of mind and more time for patching."
"Morphisec is a straightforward solution that is efficient and very stable."
"Morphisec provides full visibility into security events from Microsoft Defender and Morphisec in one dashboard. Defender and Morphisec are integrated. It's important because it lowers the total cost of maintenance on the engineer's time, more or less. So the administrative time is dramatically reduced in maintaining the product. This saves an engineer around four to five hours a week."
"The biggest feature is that it hides everything from your operating system that's running in-memory from anything to try to run against it. That's the most unique thing that's on the market. There's nothing else out there that's quite like that. That's a big selling point and why we went with it. It does exactly what the design does. If you can't find it, you can't execute against it."
"The ability to stop attacks without having to detect or have a signature for the attack is the most valuable feature."
"In my organization, the impact of Trellix Cloud Workload Security was very good because the integration and deployment of this solution was very neat, and all the technicians were very satisfied with the time and features the solution brings."
"The most valuable feature is the application control."
"The installation process of Trellix Cloud Workload Security is very easy because the ePolicy Orchestrator is integrated."
"The discovery feature is the most valuable. After you integrate your cloud environment, maybe an Azure or AWS, or a private environment hosted on VMware, it automatically starts discovering the number of servers that are running on that cloud and the number of services that you have done. It is a beautiful feature because, from a security standpoint, it is difficult to identify which VM is compliant or not when you keep on provisioning a number of VMs in the cloud. It also checks for compliance. It checks whether a system is compliant and whether antivirus is installed on a VM. If an antivirus is installed, it checks whether the antivirus is updated to the latest signature package or not. All these things are beautifully done by McAfee Cloud Workload Security. For communicating with the McAfee server, you need to install an agent on the VM. McAfee Cloud Workload Security gives you a direct opportunity to install an agent on a Windows machine. If you have a Windows cloud, you can directly push that agent onto the VM through your McAfee portal. It provides you a single dashboard view of all servers present in the cloud. It shows the servers on which the antivirus is already installed as well as the servers for which the antivirus installation is still pending. This dashboard view is a much-needed thing. It also has a centralized management, which makes it easy to use."
"The intuitive dashboard does not cause any time loss."
"Trellix Cloud Workload Security has positively impacted our organization by improving our visibility across cloud and infrastructure, showing how many workloads we have and what is occurring with those workloads."
"We have seen great outcomes with Trellix Cloud Workload Security, such as a clear drop in the time it takes to spot and deal with security issues in our cloud environment since we started using this product, so overall it is saving our time and having a positive impact."
"Trellix Cloud Workload Security has positively impacted my organization because it has strengthened cloud security control, improved workload visibility, and reduced risk."
 

Cons

"From a downside perspective, the UI is not user-friendly and feels dated compared to other tools like Prisma Cloud."
"The support is not up to the mark and seems to be overburdened."
"An area for improvement would be to focus on risks related to AI, such as large language models and potential data leakage."
"Qualys TotalCloud's increasing complexity, due to the development and deployment of multiple solutions, is making the GUI difficult to navigate."
"The price is very expensive, actually."
"Areas that need improvement in every solution include the remediation part. The remediation steps should be simple enough for everyone to understand."
"To be honest, I would move out from this tool because it does not give a full view of vulnerability."
"The vulnerability part is good, but the policy compliance module needs improvement because it involves a lot of manual work. Specifically, the remediation part of the controls requires enhancements."
"I haven't been able to get the cloud deployment to work."
"We sometimes have to depend on the support team to know what action we should take. If the solution for an alert can be built into the report that we are getting, it will save time, and the interaction with support would be less. At times, corrective action is required, but at times, we don't need to take any action. It would be good if we get to know in the report that a particular infection doesn't require any action. It will save us time and effort."
"We have only had four attacks in the last year, "attacks" being some benign PDF from a vendor that, for some reason, were triggered. There were no actual attacks. They were just four false positives, or something lowly like adware. There have been false positives with both the on-premises solution and the cloud solution."
"The only problem is that their support lives in Israel, so the time zones are a bit off, but I've never had any complaint beyond that."
"It would be nice if they could integrate Morphisec with other traditional antivirus solutions beyond Microsoft Defender. That is probably my biggest gripe."
"If anything, tech support might be their weakest link."
"We wanted to have multi-tenants in their cloud platform, so every entity can look into their own systems and not see other systems in other entities. I have a beta version on that now. I would like them to incorporate that in the cloud solution."
"The dashboard is the area that requires the most improvement. We have about, I would say 5,500 computers currently, and searching through all of those takes some time to filter. So as soon as you apply the filter, it takes a few seconds. It crunches, it thinks, and then it brings up the clients that match."
"Its vulnerability assessment is not the best. We cannot identify the vulnerabilities that are related to the operating system by using McAfee Cloud Workload Security. I wish McAfee would add a vulnerability assessment tool that will not only identify the vulnerability but will also be able to generate a report so that the required patching can be done for the servers. Currently, McAfee Cloud Workload Security only integrates with AWS and Azure. If it can also integrate with GCP, Alibaba, and other cloud services available in the market, it would be good because not all people are using Azure and AWS."
"The first is the limited CNAPP capabilities compared to other security solutions like Aqua and Wiz, as Trellix Cloud Workload Security lacks full CNAPP depth, with limited coverage such as CSPM, infrastructure as code scanning, and deep container security."
"The key issue from Trellix is a lack of knowledge about the product."
"Trellix Cloud Workload Security can improve by searching for new ways to protect against AI threats."
"The time to detect or resolve is a concern, and I am not fully satisfied with that aspect."
"Its vulnerability assessment is not the best. We cannot identify the vulnerabilities that are related to the operating system by using McAfee Cloud Workload Security."
"I think with the cloud AWS, there could be some improvements for Trellix Cloud Workload Security."
"We experience limited customer support, typically requiring a minimum wait of three to four hours for ticket responses."
 

Pricing and Cost Advice

"The cost is high, but it meets our organizational needs."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Our licensing is tied into our contract. Because we have a long-term contract, our pricing is a little bit lower. It is per year, so we don't get charged per endpoint, but we do have a cap. Our cap is 80 endpoints. If we were to go over 80, when we renewed our contract, which is not until three years are over. Then, they would reevaluate, and say, "Well, you have more than 80 devices active right now. This is going to be the price change." They know that we are installing and replacing computers, so the numbers will be all over the place depending on whether you archive or don't archive, which is the reason why we just have to keep up on that stuff."
"Morphisec is reasonably priced because our parent company's other subsidiaries use different products like CrowdStrike. CrowdStrike is four or five times more expensive than Morphisec. The competitive pricing saves us money in our overall security stack."
"Compared to their competitors, the price of Morphisec is not that high. You can easily deploy it on a large-scale or small-scale network."
"It does not have multi-tenants. If South Africa wants to show only the machines that they have, they need their own cloud incidence. It is not possible to have that in a single cloud incidence with multiple tenants in it, instead you need to have multiple cloud incidences. Then, if you have that, it will be more expensive. However, they are going to change that, which is good."
"We are still using a separate tool. I know for our 600 or I think we're actually licensed for up to 700 users, it runs me 23 or $24,000 a year. When you're talking to that many users plus servers being protected, that's well worth the investment for that dollar amount."
"Price-wise, it's on the higher side. A traditional antivirus solution is cheaper, but in terms of security and manageability, its ROI is better than a traditional antivirus. I would recommend it to anybody evaluating or considering an antivirus solution. If your system gets compromised, the cost of ransom would be a lot more. This way, it saves a lot of cost."
"The pricing is definitely fair for what it does."
"It is a little bit more expensive than other security products that we use, but it does provide us good protection. So, it is a trade-off."
"It is not an expensive product. I am in the Indian market, and it is one of the most reliable and cost-effective solutions."
report
Use our free recommendation engine to learn which Cloud Workload Protection Platforms (CWPP) solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
16%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Outsourcing Company
15%
Manufacturing Company
13%
Construction Company
13%
Comms Service Provider
10%
Outsourcing Company
21%
Healthcare Company
11%
Comms Service Provider
10%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise6
Large Enterprise35
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise8
Large Enterprise8
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise2
Large Enterprise3
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is regarding the cloud visibility that we were not having previously. Previous...
Ask a question
Earn 20 points
What is your experience regarding pricing and costs for McAfee Cloud Workload Security?
We probably purchased it through AWS Marketplace, and we did. I think the licensing costs for Trellix Cloud Workload ...
What needs improvement with McAfee Cloud Workload Security?
The customer is not much happy with the MITRE part in Trellix Cloud Workload Security. The main issue is that custome...
What advice do you have for others considering McAfee Cloud Workload Security?
I would give a marking of ten out of ten for Trellix Cloud Workload Security dashboard in helping end-users to manage...
 

Also Known As

Qualys TotalCloud with FlexScan
Morphisec, Morphisec Moving Target Defense
McAfee Cloud Workload Security
 

Overview

 

Sample Customers

Information Not Available
Lenovo/Motorola, TruGreen, Covenant Health, Citizens Medical Center
Information Not Available
Find out what your peers are saying about Morphisec vs. Trellix Cloud Workload Security and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.