

Find out in this report how the two Cloud-Native Application Protection Platforms (CNAPP) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
I have definitely seen a return on investment; we save a lot of time on a day-to-day basis, during audits, and we need fewer employees because the platform has a lot of capabilities that do not require manual effort.
In case of any attack and compromise, there is a big value return on investment.
I estimate that I have managed to save about thirty percent time since I started using the platform.
We are able to scan all our assets with less human intervention and achieve overall effective outcomes.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
I have seen replies in less than two or three hours.
When we reach the support team, they do not seem to have the skills to handle our questions and instead return with basic scripted questions rather than understanding what we are asking for and providing proper answers.
They provide detailed explanations or instructions when needed, making it easy to resolve specific problems.
On a scale from one to ten, I would rate customer support a ten.
The technical support from Qualys is excellent, always available 24/7 for any urgent needs.
The technical support team is strong and helpful in solving issues promptly.
Once we supplied 130 URLs to it for scanning one by one, and it crashed in between.
Qualys is fairly elastic.
The use cases that we have handled have not presented much of a challenge on the scalability part.
I would rate its scalability a ten out of ten.
The scalability of Qualys TotalCloud is excellent, and I would rate it as ten out of ten.
For scalability, I would rate it a ten out of ten.
I would describe Qualys Enterprise TruRisk Platform as stable regarding crashes or downtimes ever happening.
It is not critical in the way that we have for Cortex XDR where if it fails, then the organization basically ceases to function.
In terms of stability, I would rate it somewhere around seven.
It has a lot of scanning mechanisms, which are agentless APIs, eBPF, and cloud agents, that are highly reliable.
I would rate it a ten out of ten for stability.
We have not encountered any lagging or crashing from the tool.
We need to export data to external tools to perform the work that is supposed to be done in the tool itself, so we do not have any real return on investment using this tool.
It would be beneficial if the solution could correctly identify the exact OS version, potentially requiring code adjustments.
If you have uploaded a file containing many IP addresses, you don't have a straightforward option to check what the IP addresses were.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
If we find a critical or high vulnerability on an IP or server, the remediation steps should be communicated clearly.
Qualys Enterprise TruRisk Platform was not expensive regarding the pricing point.
The experience with pricing, setup cost, and licensing for Qualys Enterprise TruRisk Platform is expensive.
The pricing, setup cost, and licensing of Qualys Enterprise TruRisk Platform are as per our budgets, and we found it to be economical.
In our case, replacing the tool will give us better functionalities without increasing the cost compared to what we pay today for the competitor.
Qualys TotalCloud offers good pricing that is affordable and competitive with the market.
Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform.
The platform scans the entire environment and IP range, providing comprehensive vulnerability reports along with solutions to address these vulnerabilities.
It will also provide the information of the CVEs related to it, CVSS score related to it, and the CVEs will help you to understand more about how bad it can get.
It identified trust distributions amongst our assets, what are high risk items, what are critical things, vulnerabilities that can be exploited, and what are critical priorities for us.
The AI enhancements simplify vulnerability management by eliminating the need for SQL queries to create policies.
For example, if some machines have open vulnerabilities and the remediation team resolves them, the on-demand feature allows us to verify vulnerability resolution promptly.
Qualys TotalCloud is also used to provide unified vulnerability and threat assessment across both IaaS and SaaS.
| Product | Mindshare (%) |
|---|---|
| Qualys TotalCloud | 2.4% |
| Qualys Enterprise TruRisk Platform | 0.9% |
| Other | 96.7% |
| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 5 |
| Large Enterprise | 12 |
| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 11 |
| Large Enterprise | 38 |
Qualys Enterprise TruRisk Platform provides robust risk management, supporting both agent-based and agentless deployments, scanning environments, categorizing risks, and prioritizing threats with machine learning capabilities.
Qualys Enterprise TruRisk Platform enhances vulnerability management across diverse systems, including Windows Server, databases, and network devices. It assigns CVE and CVSS scores, delivers detailed reports, and guides threat prioritization. Machine learning enables precise risk assessment and prioritization, suggesting remediation for security improvements. Users have noted support efficiency and UI improvements needed for customized checks and downloads, with AI integration highlighted as lacking compared to competitors.
What are the key features of Qualys Enterprise TruRisk Platform?Qualys Enterprise TruRisk Platform is leveraged in industries for vulnerability scans across internal networks, URLs, and IP addresses, especially within cloud and hybrid environments. It supports businesses in securing Windows, Linux, and Kubernetes clusters, offering internal asset and vulnerability assessments, and aiding in zero-trust security strategies.
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
We monitor all Cloud-Native Application Protection Platforms (CNAPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.