No more typing reviews! Try our Samantha, our new voice AI agent.

Nucleus Security vs Skybox Security Suite comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 23, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
11th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Container Security (13th), Cloud Workload Protection Platforms (CWPP) (9th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (8th)
Nucleus Security
Ranking in Vulnerability Management
41st
Average Rating
7.0
Reviews Sentiment
6.9
Number of Reviews
1
Ranking in other categories
Application Security Tools (27th), Risk-Based Vulnerability Management (14th), Continuous Threat Exposure Management (CTEM) (13th)
Skybox Security Suite
Ranking in Vulnerability Management
53rd
Average Rating
7.6
Reviews Sentiment
6.2
Number of Reviews
38
Ranking in other categories
Firewall Security Management (8th)
 

Mindshare comparison

As of May 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.0%, up from 0.9% compared to the previous year. The mindshare of Nucleus Security is 0.9%, up from 0.8% compared to the previous year. The mindshare of Skybox Security Suite is 0.7%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.0%
Nucleus Security0.9%
Skybox Security Suite0.7%
Other97.4%
Vulnerability Management
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
reviewer2808414 - PeerSpot reviewer
Health Care Specialist at a healthcare company with 11-50 employees
Improved radiation safety and compliance has supported patient care but daily workflows still need refinement
I think it can be improved by making it more practical, integrated, and easier for teams to apply in real-world workflow from a healthcare perspective. The main improvements I can see right now are better user training with real-case scenarios rather than only theory, and clear and simple protocols for day-to-day operations. Strong integration between safety compliance and documentation systems would help significantly in practice for the healthcare field, which is a niche field. The biggest gain would come from making security processes easier to follow consistently, especially in busy environments where teams need to be aware of clarity and really need to rely on the documentation they are using.I chose a rating of seven because it offers strong value in safety, risk reduction, and compliance, especially in healthcare. However, there is still room for improvement in usability and day-to-day integration. Protocols can be too complex in practice sometimes, and some processes can feel heavy and disconnected from our daily workflow.
AnoopBhat - PeerSpot reviewer
Security Architect at a tech vendor with 5,001-10,000 employees
Firewall policy management has improved access control but still needs simpler setup and upgrades
The features that I appreciated the most in Skybox Security Suite were not comparable with Tufin, as Tufin was far ahead in terms of the technology and the user interface. The effectiveness of the vulnerability management in Skybox Security Suite is an area I have not used that much. The firewall management feature has streamlined rule configuration and compliance in Skybox Security Suite and has evolved over time, but Tufin is far better. In terms of comparison between both tools, only the licensing part of Skybox had an edge. We were not renewing the licenses of Skybox every year, but in the case of other tools, we would have to renew if we wanted to use those tools. The disadvantages and weaknesses of Skybox Security Suite include the interface, complexity with setup, and upgrading. There are some smaller issues as well that would take more time to discuss, but there are ways around them. We use this tool to implement a new policy on the firewall by going to Skybox, creating a flow there, and then using an approval mechanism in place. There are two different levels of approvals which we have to go through, and once both approvers approve the request, we are ready to implement it. A specific challenge is that if we have to create a new object group and place ten different objects in that and use that object group in two different rules, we have to create the object group in the first rule and add the ten new objects. Then if we have to create another rule, we do not get an option to recall or reuse that same group which we created in the previous rule. We have to create a new object group again and then add the objects into it again. If we had created an object group once, we should have gotten an option to recall that or call that object group in the new rule, and that should have made the process easier.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The agent and agentless scanning in TotalCloud, particularly the FlexScan method, is incredibly valuable. With traditional scanning approaches, we had to give IP ranges and whitelist IPs. All that is now simplified. FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans."
"The most valuable feature is the consolidated information that it provides from various platforms."
"Qualys TotalCloud is an excellent platform, and the beauty of the platform is that we can get all the vulnerabilities, see all the reports in a single dashboard, view them segregated, and easily learn about critical, high, and medium findings with appropriately provided remediation steps."
"We were able to realize its benefits within 24 to 48 hours."
"TruRisk Insights is the most important innovation they've released this year."
"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."
"I appreciate TotalCloud's real-time protection and remediation features. The remediation options include automated one-click remedies and custom changes that help manage vulnerabilities efficiently."
"The best features in Qualys TotalCloud include the total asset management of the cloud environment. It is very easy to export the report and see the vulnerabilities related to the cloud specifically."
"We have seen clear compliance and risk control outcomes more than other operational metrics, including fewer process gaps during documentation and safety checks, strong consistency in following protocols for handling, traceability, and staff awareness, better audit readiness, a lower chance of procedure errors, and faster escalation when something appears out of standard, which is very important for us in the healthcare sector."
"The features that I have found most valuable with Skybox Security Suite, and this is because I work on the security side, are the firewall assurance, the change manager and the vulnerability control. These three features are the most impressive from Skybox Security."
"Change Manager is most important because of the impact on each other of a network change or a firewall change. We want to understand this and to know, beforehand, what the impact of a change will be. We are a large network so that is a very important tool."
"Skybox is the only one that does both of those in a single platform."
"The most impressive feature is optimization and clean-up."
"I think that compliance checks and policy compliance are the product's good features."
"The most valuable feature is the compliance, whether it's access compliance or the configuration compliance, to make sure that all of our devices are configured as they're supposed to be, to limit access as much possible, to follow least-access guidelines."
"The port division management was the solution's most valuable aspect for our organization."
"The performance could be good because we chose it at the time, but it is too complex for us to appreciate its performance because we lack the necessary skills."
 

Cons

"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."
"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."
"Although TotalCloud is a helpful tool, some of its advanced features are still under development."
"Qualys TotalCloud has the potential to improve by integrating a hybrid platform for comprehensive management of both on-premises and cloud infrastructures."
"The downside is only in container security, but it has not been a long time since they introduced these models."
"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"To improve the user experience, reporting could be simplified for better comprehension by end users and project managers, facilitating issue resolution."
"I think Qualys TotalCloud needs to improve its handling of zero-day vulnerabilities and supply chain management because modern ransomware attacks not only target prime critical infrastructures but also the supply chain system."
"Protocols can be too complex in practice sometimes, and some processes can feel heavy and disconnected from our daily workflow."
"The only place where Skybox has room for improvement, and they're working on releasing this, it's just a slow-go, is the UI. The user interface has historically been via a locally installed thick client. They are moving to a web-based console and it's slowly coming out."
"As for room for improvement, there are issues in logging. The logs are not coming into the log."
"The initial setup with Skybox Security is hard."
"Modifications and the deletion of existing policies are currently unavailable."
"The stability is something that is questionable. Maybe once a month, or once in every 45 days, it requires a restart because the application fails to connect."
"Skybox Security Suite can improve the change management module. It's not compatible with all brands, this is where they can improve the solution."
"The solution was quite technical. It would be easier to manage if the solution was more specific about aspects of the solution and provided more advisory around how to use it effectively. It would help users a lot if they were more clear about everything."
"The only place where Skybox has room for improvement, and they're working on releasing this, it's just a slow-go, is the UI."
 

Pricing and Cost Advice

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"Qualys TotalCloud is expensive."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
"TotalCloud's price is about right where I would expect it to be."
Information not available
"The software is expensive. I rate its pricing an eight out of ten."
"Licensing is normally on a yearly basis. There may also be a perpetual license. Normally, the customers ask for a lower price. If you want to sell more, you have to think about it."
"Pricing is on the higher side. In terms of licensing, you should buy the complete suite rather than buying only the Change Manager. I think Change Manager with Vulnerability Control is something that would be interesting to look at."
"Fully understand the total cost of ownership. They have gone to a new model where you have to replace the hardware every X amount of years at a very substantial cost and fully understand your intended number of nodes. To operate a firewall, you have to pay two licenses, a firewall node and a network node. If you are a reasonable-sized organization, this gets expensive very quickly."
"I've seen the pricing of every solution on the market. When you compare apples to apples, where Skybox becomes exceedingly expensive is if you look at it compared to something like FireMon that only does a fraction of what Skybox does. But if you include everything that Skybox does, it becomes way more expensive than the competition, but you're also not comparing apples to apples. If you look at FireMon, and you look at like just the firewall assurance piece, they are fairly comparable and, actually, Skybox comes in a little bit cheaper in some cases, depending on which product you're looking at."
"The product's pricing is excellent value. In terms of licensing, make sure you understand your network components, all your hops through your network, thoroughly, before you decide on the total cost. If you want to do point-to-point flow analysis and such, you need to have the configuration of all the devices in between point A and point B. A lot of people don't realize all their network components until they start using this product."
"The licensing fee is paid yearly and is approximately $100,000."
"Currently, the licensing costs me about $300 USD for the year. This is a huge amount for my environment."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
896,099 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
9%
Manufacturing Company
9%
Government
8%
Computer Software Company
14%
Financial Services Firm
12%
Construction Company
8%
Comms Service Provider
7%
Financial Services Firm
17%
Manufacturing Company
11%
Computer Software Company
9%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise28
No data available
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise4
Large Enterprise21
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
What is your experience regarding pricing and costs for Nucleus Security?
I have a good experience with that, so we don't have much problem dealing with pricing, setup, and licensing.
What needs improvement with Nucleus Security?
I think it can be improved by making it more practical, integrated, and easier for teams to apply in real-world workf...
What is your primary use case for Nucleus Security?
I have been using Nucleus Security for the past few years in my company, particularly in the healthcare field.I use N...
What is your experience regarding pricing and costs for Skybox Security Suite?
From a commercial perspective, AlgoSec is more expensive compared to Skybox Security Suite. Skybox Security Suite is ...
What needs improvement with Skybox Security Suite?
The features that I appreciated the most in Skybox Security Suite were not comparable with Tufin, as Tufin was far ah...
What is your primary use case for Skybox Security Suite?
Skybox Security Suite is primarily used for allowing access on firewalls and getting the access to allow some connect...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
No data available
 

Overview

 

Sample Customers

Information Not Available
Information Not Available
ADP, Blue Cross Blue Shield, BT, USAID, Delta Dental, EDF Energy, EMC, HSBC, Johnson & Johnson
Find out what your peers are saying about Nucleus Security vs. Skybox Security Suite and other solutions. Updated: April 2026.
896,099 professionals have used our research since 2012.