Prisma Cloud by Palo Alto Networks vs Sysdig Secure comparison

Prisma Cloud by Palo Alto Networks vs. Sysdig Secure

Download the complete report

Helped 920,939 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of November 2026, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of Qualys TotalCloud is 2.4%, up from 1.7% compared to the previous year. The mindshare of Prisma Cloud by Palo Alto Networks is 10.1%, down from 13.7% compared to the previous year. The mindshare of Sysdig Secure is 2.8%, down from 3.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud-Native Application Protection Platforms (CNAPP) Mindshare Distribution
Product	Mindshare (%)
Prisma Cloud by Palo Alto Networks	10.1%
Qualys TotalCloud	2.4%
Sysdig Secure	2.8%
Other	84.7%

Cloud-Native Application Protection Platforms (CNAPP)

Featured Reviews

reviewer2859021

Sr Security Engineer at a tech vendor with 5,001-10,000 employees

Risk-based triage has transformed container security and now prioritizes high-impact threats

The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.

Read full review

reviewer2776578

Cyber Security Architect at a comms service provider with 10,001+ employees

Image scanning has supported consistent security practices during cloud deployment

On a scale of ten, we would say people are happy with Prisma Cloud by Palo Alto Networks for the part we use. People are okay with it. We probably would give an eight. We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view. We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts. People have other tools and in the end, we don't use the full capabilities of a product that we pay for. It's partially related to the difficulty to integrate Prisma Cloud by Palo Alto Networks runtime in our company's support process. We don't use the real-time monitoring part of Prisma Cloud by Palo Alto Networks. We don't know about the automated remediation feature of Prisma Cloud by Palo Alto Networks.

Read full review

Mumu Muhaemin

DevSecOps Engineer at a outsourcing company with 1,001-5,000 employees

Runtime threat detection has improved and security teams prioritize real Kubernetes risks

The best feature Sysdig Secure offers is threat detection. The threat detection feature on Sysdig Secure stands out compared to other solutions I have seen or used because Sysdig sees the actual behavior inside the container or kernel and correlates it with Kubernetes infrastructure, which makes detection both earlier and more precise in a cloud-native environment. Sysdig Secure has positively impacted our organization by improving visibility into our Kubernetes environment and focusing on real risk, which has reduced alert noise, improved threat detection at runtime, and made vulnerability management more efficient by prioritizing issues that actually affect running workloads.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Qualys TotalCloud's most valuable features are its security capabilities that help identify and mitigate risk factors."

"Multi-cloud visibility saves time and makes things easier, as we can also have comparability to see what configuration differences have been made from cloud to cloud."

"By integrating TotalCloud, we have significantly reduced vulnerabilities in our deployment pipeline."

"Having everything in a single place to look for it and a single integration into ServiceNow has been the big transformation."

"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"

"Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution."

"I would definitely recommend Qualys TotalCloud to other customers."

"Its excellent graphical interface makes the scanning process simple."

More Qualys TotalCloud pros

"The runtime mechanism on the solution is very useful, and it has very good network mapping between containers, so if you have more than one container, you can create a content data link between them."

"The Prisma Cloud dashboard is powerful, and it gives you at-a-glance compliance security against many standards."

"The Cloud Workload Protection module is a very strong solution. I like the Cloud Workload Protection part. It is something I have not used for the banking client, but I had a chance to try it out for roughly a month on actual deployment of another customer. That part was really robust. Cloud Workload Protection would be the main feature that I enjoy the most."

"I would rate Prisma Cloud a ten out of ten."

"The ability to monitor the artifact repository is one of the most valuable features because we have a disparate set of development processes, but everything tends to land in a common set of artifact repositories. The solution gives us a single point where we can apply security control for monitoring. That's really helpful."

"Prisma Cloud's most important feature is its auto-remediation."

"This solution provides us with a single tool to protect all of our cloud resources and applications without having to manage and reconcile different security and compliance reports."

"We were pleased with Prisma's custom and built-in reports. We could go into the dashboard and see all these notifications telling us which subscriptions didn't have TLS 1.2 enabled. The security controls were the most valuable features."

More Prisma Cloud by Palo Alto Networks pros

"We appreciate this feature, especially when combined with CD monitoring. The implementation of requested features has been remarkable, such as scanning for compliance in CRM processes for the US government. We heavily rely on this feature to assess compliance with federal requirements."

"The most valuable feature is the level of support that we get. Our solutions or customer success representative is very valuable. I see them as an extension of our security team."

"Sysdig Secure has many strong foundational features like compliance and benchmark, security, network access management, and vulnerability management."

"I have not seen any stability issues so far."

"The log monitor is the most valuable feature."

"The proactiveness of the support has been fantastic. Every time we mention something in a meeting that we're trying to do, he proactively takes that as an investigation topic and looks into it. He'll provide the solution even though we might not have asked him to investigate it."

"I see Sysdig as the most comprehensive solution in comparison to its competitors."

"From a container-based standpoint, it offers excellent scalability to its users...I would tell those planning to use the solution that, from a container standpoint, it's excellent."

More Sysdig Secure pros

Cons

"The cost of Qualys TotalCloud is high and could be more competitive."

"Qualys TotalCloud can be improved in the integration piece, especially with ServiceNow, where there's a bidirectional sync integrated, as there is no native capability from Qualys that can give monitoring metrics of how many assets came in and how many failed or were not properly reconciled or combined."

"I sometimes have difficulty detecting or uninstalling certain versions of applications, which I have to do manually."

"The areas in the solution that have room for improvement include the UI/UX design, which should be improved, and they should integrate more artificial intelligence into the product."

"Qualys TotalCloud's increasing complexity, due to the development and deployment of multiple solutions, is making the GUI difficult to navigate."

"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."

"A feature improvement could be the inclusion of Windows OS support for container security, as it is currently only supported for Linux."

"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."

More Qualys TotalCloud cons

"One definite area for improvement is the auto-remediation or the CWP area. The second one is the RQL language. It is still not very flexible and does not cover a lot of use cases. The RQL language could be dramatically improved to add more options."

"The challenge that Palo Alto and Prisma have is that, at times, the instructions in an event are a little bit dated and they're not usable."

"The automation capabilities are growing each day, but the problem is that the updates are not that frequent. There are some services on Amazon that have come out with updates, and Azure is also getting up to date. But Prisma takes some time to follow. There's a time gap that Prisma inherits from these clouds. I understand why it takes some time, but that time should be reduced."

"The UI is the worst."

"The deployment and onboarding are plug-and-play, but somewhat hard to handle in terms of integration with external operations tools. The product design isn't up to the current standard. I would recommend having higher standards in terms of integration with other tools, especially operationalized tools."

"The cloud integration is too complex. It should be simple to integrate Prisma Cloud with any cloud environment. Policy management could also be simpler."

"Runecast gave us more visibility into VMware's private cloud. We have more environments there, but Prisma's lack of visibility into the private cloud was a downside—there weren't many."

"The licensing is a bit confusing."

More Prisma Cloud by Palo Alto Networks cons

"They should make it specific with a couple of features only."

"Sysdig Secure needs to scale more for complete cloud-native coverage."

"There was a security concern related to a specific feature. While the feature itself was promising, it posed a challenge. The situation revolved around code scanning. If your source code is hosted within your own premises, say on Bitbucket, you naturally wouldn't want your code to be accessible to external parties beyond your company. Keeping your code base private is a standard practice. However, in the case of code scanning using Sysdig Secure, they copy your code to their SaaS platform. This posed an issue for us. When we inquired about this, their response acknowledged the concern. In an upcoming release, they plan to enable code scanning within your on-premises environment through the assistance of an agent. This change is already in progress. While this tool stands out compared to existing solutions in the market, it's important to note that there are still some limitations to consider. Another drawback we encountered relates to our expertise with Kubernetes. The tool can monitor Kubernetes audit logs, triggering alerts and notifications. However, it falls short in terms of taking direct action based on these alerts. There are different methods of event capture, including through system labels and system calls, as well as via Kubernetes audit events. Notably, at the system level, Sysdig Secure can both detect and respond to events, allowing actions like blocking and warning. This proactive approach is effective at the system call level. However, when it comes to monitoring Kubernetes audit events, Sysdig Secure can only notify without being able to execute any further actions. It can't block access or containers. The vendor likened their role to that of a monitoring camera, observing events and sending notifications without the capacity to intervene. This limitation applies to Kubernetes audit events. Given that everything operates within our system, there is a workaround available: configuring system-level policies to block containers as necessary."

"I give it an eight because of the bugs, specifically the fix version bug where sometimes there is no fix version shown, and I wish Sysdig Secure would create a customizable UI that orders features by importance to enhance user experience."

"Reporting can definitely be better. Live dashboards should be configurable for a longer period of time rather than 30 days. Being able to go back in time to compare six months ago to today would be valuable."

"Sysdig Secure works well for us, but there are a few areas for improvement, such as the alerting and notification system being more flexible for complex workflows, and some dashboard and reporting features could be more customizable to match specific team needs."

"Banks and financial institutions cannot use Sysdig Secure because it doesn't sell SaaS-hosted versions for under two hundred working nodes."

"The dashboard could be more simple and show the more important issues that are detected first. We'd like to be able to set it up so more important issues show up more prominently in the dashboard."

More Sysdig Secure cons

Pricing and Cost Advice

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."

"The cost is high, but it meets our organizational needs."

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

More Qualys TotalCloud pricing and cost advice

"The cost depends on the pricing model. Compared to other solutions, the cost isn't that bad."

"Its price is reasonable as compared to other products. The main challenge is explaining the licensing model to customers. It isn't a problem related to Palo Alto. Commonly, people don't understand cloud licensing or security licensing. When they have fixed virtual machines, they know what they are going to be charged, but when it comes to cloud automation, it is hard for them to get clarity in case of high workloads or when they have enabled auto-scaling, etc. It would be helpful if Palo Alto can educate people on their licensing programs."

"Prisma Cloud by Palo Alto Networks carries a higher cost, but its enhanced security measures justify the expense."

"It is fairly priced. However, its price can be better so that small banks or small organizations can afford it and adopt it to secure their environment and data."

"Prisma Cloud is affordable."

"The purchasing process was easy and quick. It is a very economical solution."

"Our licensing fees are $18,000 USD per year."

"Prisma Cloud is remarkably expensive."

More Prisma Cloud by Palo Alto Networks pricing and cost advice

"In comparison to other cloud solutions, it's reasonably priced. However, when compared to in-house built open-source projects, it might be considered somewhat costly. The cost depends on whether someone sees the support provided by Sysdig as an advantage or if it's deemed unnecessary. Personally, I find the support to be excellent and consider it a good value."

"The solution's pricing depends on the agents...In short, the price depends on the environment of its user."

"I am always going to say that it could be a little bit cheaper. I do feel that it is a little bit on the expensive side."

"Sysdig is competitive. The quality matches the pricing. Obviously, everyone wants things to be cheaper, but if you're realistic, you acknowledge that quality service comes with a price. Sysdig is the gold standard for Kubernetes, and I wouldn't choose anything else. We live in Kubernetes. Everything is containerized, so that means a lot to us, and we're willing to make an investment."

"It is quite costly compared to other tools."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

920,939 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

18%

Outsourcing Company

12%

Manufacturing Company

11%

Financial Services Firm

10%

Financial Services Firm

13%

Outsourcing Company

Manufacturing Company

Computer Software Company

Financial Services Firm

17%

Computer Software Company

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	11
Large Enterprise	38

By reviewers
Company Size	Count
Small Business	38
Midsize Enterprise	21
Large Enterprise	58

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	2
Large Enterprise	5

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...

What needs improvement with Qualys TotalCloud?

I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...

What is your primary use case for Prisma Cloud by Palo Alto Networks?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

What needs improvement with Sysdig Secure?

Sysdig Secure works well for us, but there are a few areas for improvement, such as the alerting and notification sys...

What is your primary use case for Sysdig Secure?

Our primary use case for Sysdig Secure is runtime threat detection and vulnerability management.

What advice do you have for others considering Sysdig Secure?

My advice for others looking into using Sysdig Secure is to clearly define your primary use case before getting start...

Microsoft Defender for Cloud vs Qualys TotalCloud

Comparisons

Wiz vs Qualys TotalCloud

Compared 11% of the time

Compared 7% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Orca Security vs Qualys TotalCloud

Compared 6% of the time

AWS Security Hub vs Qualys TotalCloud

Compared 4% of the time

More Qualys TotalCloud Competitors

Wiz vs Prisma Cloud by Palo Alto Networks

Compared 13% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Prisma Cloud by Palo Alto Networks

Compared 7% of the time

SentinelOne Singularity Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 3% of the time

TrendAI Vision One – Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 3% of the time

Snyk vs Prisma Cloud by Palo Alto Networks

Compared 2% of the time

More Prisma Cloud by Palo Alto Networks Competitors

Aqua Cloud Security Platform vs Sysdig Secure

Compared 10% of the time

Wiz vs Sysdig Secure

Compared 5% of the time

SentinelOne Singularity Cloud Security vs Sysdig Secure

Compared 5% of the time

Symantec Data Center Security vs Sysdig Secure

Compared 4% of the time

Tigera vs Sysdig Secure

Compared 4% of the time

More Sysdig Secure Competitors

Product Reports

Qualys TotalCloud

Download Qualys TotalCloud product report

Prisma Cloud by Palo Alto Networks

Download Prisma Cloud by Palo Alto Networks product report

Prisma Cloud by Palo Alto Networks report

Sysdig Secure

Download Sysdig Secure product report

Also Known As

Qualys TotalCloud with FlexScan

Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

No data available

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Prisma Cloud by Palo Alto Networks provides essential cloud security posture management with advanced automation and threat detection for enhanced infrastructure control.

Prisma Cloud by Palo Alto Networks offers robust multi-cloud capabilities, allowing users to manage security across AWS, Azure, and GCP. It integrates security controls into CI/CD pipelines for improved threat detection. With real-time alerting and runtime protection, it assists in maintaining strong security postures and operational efficiency. While its Cloud Workload Protection Platform secures workloads, improvements are needed in integration with third-party apps, role-based access, and API security. Enhancements in automation, reporting, and false positive management are also sought after.

What are the key features of Prisma Cloud?

Cloud Security Posture Management: Identifies misconfigurations and ensures compliance across cloud environments.
Multi-Cloud Capabilities: Provides comprehensive security across AWS, Azure, and GCP.
Runtime Protection: Enhances threat detection by integrating security controls within CI/CD pipelines.
Real-Time Alerting: Delivers instant notifications for proactive security management.
Infrastructure as Code (IaC) Integration: Supports security in code development stages.

What benefits should users seek in reviews?

Enhanced Visibility and Control: Offers comprehensive infrastructure insights.
Operational Efficiency: Improves cloud governance through streamlined management.
Threat Detection and Compliance: Integrates robust security measures for continuous compliance.
Automation Features: Reduces manual tasks through advanced automation capabilities.

In industries like finance and healthcare, Prisma Cloud is frequently implemented to meet strict regulatory standards, providing the necessary infrastructure protection and compliance. Organizations often utilize its vulnerability monitoring across diverse cloud environments to maintain security integrity while addressing specific sector regulations.

Palo Alto Networks

Sysdig Secure offers comprehensive threat detection and vulnerability scanning, integrating seamlessly with platforms like Kubernetes and cloud providers. It enhances compliance monitoring while prioritizing risks to improve security posture.

Sysdig Secure is designed for runtime security across containerized environments and cloud platforms. It integrates with tools like Falco for effective threat detection and extensive compliance monitoring. Users benefit from its friendly interface and visibility improvements, aiding in reducing alerts and managing vulnerabilities. Integrations with Kubernetes and Terraform enhance its flexibility, providing wide-ranging applicability and cloud support. There's a need to improve dashboard simplicity and enrich reporting capabilities. The tool should better handle Kubernetes audit events and increase API accessibility across more platforms. Users also seek advancements in its scalability, speed, and customer support in specific regions.

What are Sysdig Secure's key features?

Runtime Security: Monitors and protects containerized and cloud environments in real time.
Falco Integration: Enhances threat detection with Falco's powerful rules engine.
Threat Detection: Identifies and alerts on suspicious activities and security threats.
Vulnerability Scanning: Assesses applications and infrastructure for potential vulnerabilities.

What benefits should users expect from Sysdig Secure?

Enhanced Security Posture: Comprehensive threat visibility and rapid response capabilities.
Improved Efficiency: Reduced alert fatigue by prioritizing critical vulnerabilities.
Compliance Support: Streamlined processes for meeting security standards and regulations.
Cloud Integration: Seamless compatibility with cloud providers like AWS and GCP.

Industries benefit by employing Sysdig Secure for managing runtime workloads and ensuring compliance within cloud environments. Its effectiveness in monitoring clusters on AWS, GCP, and securing CI/CD pipelines makes it essential for companies optimizing their cloud and container security strategies.

Sysdig

Sample Customers

Information Not Available

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

SAP Concur, Goldman Sachs, Worldpay, Experian, BigCommerce, Arkose Labs, Calendly, Noteable, Bloomreach. More here: https://sysdig.com/customers/

Prisma Cloud by Palo Alto Networks vs. Sysdig Secure