No more typing reviews! Try our Samantha, our new voice AI agent.

Qualys Exposure Management vs Threat Stack Cloud Security Platform [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.0
Qualys TotalCloud streamlines vulnerability remediation and operations, improving efficiency and saving significant costs and resources.
Sentiment score
7.0
Qualys VMDR enhances vulnerability management, boosting security, reducing risks, saving resources, improving efficiency, and delivering ROI and compliance.
Sentiment score
7.3
Threat Stack Cloud Security boosted compliance and revenue, reduced staffing needs, enhanced security, and expanded infrastructure dramatically.
It has saved about 90% of our time.
Senior Consultant at a consultancy with 10,001+ employees
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
Security Manager at a consultancy with 10,001+ employees
CallStream helps us integrate and automate tasks.
Senior Security Consultant at CyberNxt Solutions LLP
We saw a return on investment through significant savings in time, money, and resources.
System Admin at a tech services company with 10,001+ employees
 

Customer Service

Sentiment score
6.8
Qualys TotalCloud's customer service is generally satisfactory, with reliable support but needing improvements in communication and timeliness.
Sentiment score
6.6
Qualys VMDR's support is responsive and knowledgeable, but users desire faster resolutions and improved service level agreements.
Sentiment score
7.4
Threat Stack Cloud Security Platform's support is praised for responsiveness, precise solutions, and effective communication with technical representatives.
They are helpful, respond to my queries, and can answer any question.
Developer at a consultancy with 10,001+ employees
Qualys's tech support is highly responsive, providing multiple ways to interact with them.
Service Manager, Security Operations at CDA IT SOLUTIONS
Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA.
Works at a consultancy with 10,001+ employees
The GUI in Qualys Enterprise TruRisk Management is excellent.
Senior Manager at a financial services firm with 10,001+ employees
We usually get on calls with tech support, and they are very helpful.
Works at a comms service provider with 1-10 employees
False positives are the main issue that we encounter and need to be handled by the support team.
Senior Project Engineer at CDACINDIA
 

Scalability Issues

Sentiment score
7.4
Qualys TotalCloud is scalable and adaptable, though it may need experienced management and external tools for optimal visualization.
Sentiment score
7.9
Qualys VMDR is praised for scalability, flexibility, and effective asset management despite potential cost and reporting slowdowns.
Sentiment score
8.2
Threat Stack Cloud Security Platform is scalable, easy to deploy, and efficient across AWS accounts, with minor configuration concerns.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
CIO at a venture capital & private equity firm with 11-50 employees
Our organization currently uses it to manage over 1200 web applications.
Analyst, Information Security at Infosys
It is absolutely scalable, and I would rate its scalability as nine out of ten.
retired at a consultancy with 10,001+ employees
It is flexible and scalable, and we can use it and modify it as per our needs.
Junior Associate at ESDS Software Solution Pvt Ltd.
Scalability depends on the license and the number of assets being monitored.
System Admin at a tech services company with 10,001+ employees
Scalability is not a challenge.
Senior Manager at a financial services firm with 10,001+ employees
 

Stability Issues

Sentiment score
8.3
Qualys TotalCloud is praised for its reliable performance, high stability ratings, and effective support, ensuring minimal disruptions.
Sentiment score
7.9
Qualys VMDR is highly reliable, with stable performance, rare issues, and effective passive scanning, though reporting concerns exist.
Sentiment score
7.5
Threat Stack Cloud Security Platform [EOL] is stable and efficient, with minor GUI and agent issues for some users.
Overall, the support provided has been excellent.
Analyst, Information Security at Infosys
It is a stable solution, which is why we chose it.
CIO at a venture capital & private equity firm with 11-50 employees
Continuous monitoring is crucial to ensure system stability and avoid vulnerabilities or threats.
Developer at a consultancy with 10,001+ employees
Qualys VMDR is stable.
Cyber Security Solution Engineer at a computer software company with 201-500 employees
This tool has good and excellent performance in the companies that we sell to in the last months for customers, so stability is evident.
QA Manager at a consultancy with 51-200 employees
I rate the stability of Qualys Enterprise TruRisk Management at eight point five out of ten because I occasionally find bugs that are frustrating, and I have already commented on the support issues.
Senior Manager at a financial services firm with 10,001+ employees
 

Room For Improvement

Qualys TotalCloud needs improvements in remediation, integration, UI, vulnerability detection, compliance, container security, and pricing competitiveness.
Qualys VMDR needs UI, reporting, integration improvements and better support to address user challenges with false positives and pricing.
Threat Stack Cloud Security Platform needs UI improvements, better API alignment, and enhanced integrations, especially for serverless and container environments.
Ideally, the scanner should automatically detect and scan all subdomains, even if not explicitly defined, ensuring comprehensive vulnerability assessment.
Analyst, Information Security at Infosys
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Project Lead at Persistent Systems
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
Senior Information Security Engineer at a consultancy with 10,001+ employees
The main issue is the reporting delay, and sometimes the Qualys Enterprise TruRisk Management agent will not scan the system, which means we do not receive accurate reports in a timely manner.
System Engineer at a outsourcing company with 10,001+ employees
It does not automate patching unless the patch management module is purchased separately.
System Admin at a tech services company with 10,001+ employees
If AI features were integrated, it could enhance the capabilities significantly.
Information Security Analyst at a tech services company with 51-200 employees
 

Setup Cost

Qualys TotalCloud offers comprehensive features and flexibility, justifying its higher cost for larger organizations and VMware users.
Qualys VMDR pricing is competitive but may be high, with discounts and customization available based on usage and enterprise size.
Threat Stack Cloud Security Platform offers value with transparent pricing, ranging $15-$20 monthly, seen as competitively priced by users.
Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive.
Senior Manager at a financial services firm with 10,001+ employees
Pricing is managed by our finance team; however, Qualys TotalCloud offers cost-effective licensing flexibility.
IT Manager at a consultancy with 10,001+ employees
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
Vice President at Inspira Enterprise
I would rate the pricing between seven to eight out of ten.
System Admin at a tech services company with 10,001+ employees
I have a notion that Qualys might be more expensive than Rapid7.
Information Security Analyst at a tech services company with 51-200 employees
Qualys offers better pricing and is feature-packed compared to other tools.
Works at a comms service provider with 1-10 employees
 

Valuable Features

Qualys TotalCloud enhances cloud security with accurate vulnerability detection, automation, centralized monitoring, and robust integration with AWS and Azure.
Qualys VMDR offers comprehensive vulnerability management with effective prioritization, continuous monitoring, and robust integration for efficient threat management.
Threat Stack Cloud Security platform is esteemed for its configurability, integration, monitoring capabilities, and effective alert management.
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
Works at a consultancy with 10,001+ employees
It will help cybersecurity professionals monitor the cloud and find vulnerabilities.
Developer at a consultancy with 10,001+ employees
We are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs.
Senior Consultant at a consultancy with 10,001+ employees
The prioritization of vulnerabilities has improved our remediation efforts by around thirty to thirty-five percent.
Works at a comms service provider with 1-10 employees
It impacts my workflow overall, with the patch management features as it has the missing patches listed in detail, making it easier to get a comprehensive report and providing some dashboards that offer visual representation.
JMS, RPSG Ventures Limited at RP Sanjiv Goenka Group
Qualys VMDR's continuous monitoring capabilities help us respond to emergent threats by enabling my team to reach out to the security engineers whenever there is any detection of a vulnerability, informing them about it, and creating an incident.
Soc Lead & Edr Administration at Persistent Systems
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
44
Ranking in other categories
Vulnerability Management (11th), Container Security (12th), Cloud Workload Protection Platforms (CWPP) (8th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
Qualys Exposure Management
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
101
Ranking in other categories
IT Asset Management (3rd), Vulnerability Management (2nd), Configuration Management Databases (3rd), Container Security (10th), Risk-Based Vulnerability Management (1st)
Threat Stack Cloud Security...
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Featured Reviews

YashwantShinde - PeerSpot reviewer
Soc Analyst at a manufacturing company with 10,001+ employees
Risk-based visibility has transformed how I prioritize cloud vulnerabilities and protect key assets
The best features Qualys TotalCloud offers are cloud asset visibility, vulnerability assessment, and risk prioritization. This risk-based prioritization helped me quickly identify high-risk vulnerabilities and focus on remediation instead of going through every finding. TrueRisk-based prioritization is useful for understanding which vulnerabilities need attention first. It improved our workflow mainly by giving us a single view of cloud assets and their risk, so we could focus on the higher priority vulnerabilities instead of reviewing every finding manually. This helped us prioritize remediations more efficiently and reduce the time spent on vulnerability assessment and follow-up. Qualys TotalCloud helped us identify exposures that might otherwise have been missed, especially across cloud assets, vulnerabilities, and identities. With the SaaS configuration, the unified inventory and risk view made it easier to connect vulnerabilities with asset criticality, exposure, and access permissions, allowing us to investigate high-risk exposures first and address them before they could become bigger security issues.
Ajay Paul - PeerSpot reviewer
System Engineer at a outsourcing company with 10,001+ employees
Vulnerability management has prioritized high‑risk patching and simplified bulk system reporting
The primary issue is with the reporting functionality. Even though we fix vulnerabilities, the reports do not reflect the changes immediately. Sometimes we need to manually run a script to scan the systems before Qualys Enterprise TruRisk Management will update the scan results. The main issue is the reporting delay, and sometimes the Qualys Enterprise TruRisk Management agent will not scan the system, which means we do not receive accurate reports in a timely manner. Additionally, there are many metrics for calculating vulnerabilities, such as the Qualys ID, severity scores, CVSS scores, and other metrics. The abundance of information can be confusing. These two aspects are the most significant negatives I have experienced with this tool.
SC
Software Development Manager at Rent Dynamics
SecOps program for us, as a smaller company, is amazing; they know what to look for
They could give a few more insights into security groups and recommendations on how to be more effective. That's getting more into the AWS environment, specifically. I'm not sure if that's Threat Stack's plan or not, but I would like them to help us be efficient about how we're setting up security groups. They could recommend separation of VPCs and the like - really dig into our architecture. I haven't seen a whole lot of that and I think that's something that, right off the bat, could have made us smarter. Even as part of the SecOps Program, that could be helpful; a quick analysis. They're analyzing our whole infrastructure and saying, "You have one VPC and that doesn't make a lot of sense, that should be multiple VPCs and here's why." The architecture of the servers in whatever cloud-hosting provider you're on could be helpful. Other than that, they should continue to expand on their notifications and on what's a vulnerability. They do a great job of that and we want them to continue to do that. It would be cool, since the agent is already deployed and they know about the server, they know the IP address, and they know what vulnerability is there, for them to test the vulnerability and see if they can actually exploit it. Or, once we patch it, they could double-check that it can't be. I don't know how hard that would be to build. Thinking on it off the top off my head, it could be a little challenging but it could also be highly interesting. It would also be great if we could test a couple of other features like hammering a server with 100 login attempts and see what happens. Real test scenarios could be really helpful. That is probably more something close to what they do with the SOC 2 audit or the report. But more visualization of that, being able to test things out on our infrastructure to make sure we can or can't hit this box could be interesting.
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
910,479 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
13%
Comms Service Provider
12%
Outsourcing Company
12%
Financial Services Firm
10%
Financial Services Firm
14%
Manufacturing Company
7%
Outsourcing Company
7%
Construction Company
6%
Construction Company
12%
Outsourcing Company
11%
Performing Arts
9%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise5
Large Enterprise32
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise12
Large Enterprise74
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise5
Large Enterprise2
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...
What is your experience regarding pricing and costs for Qualys VMDR?
My experience with pricing, setup cost, and licensing shows that we can consider both time and money saved.
What needs improvement with Qualys VMDR?
I haven't explored Qualys VMDR's vulnerability lifecycle automation yet. One of my analysts mentioned that queries la...
What advice do you have for others considering Qualys VMDR?
I have some understanding about PeerSpot, and I have visited the website. PeerSpot is similar to TrustRadius. It take...
Ask a question
Earn 20 points
 

Also Known As

Qualys TotalCloud with FlexScan
Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security
Threat Stack, CSP,
 

Overview

 

Sample Customers

Information Not Available
Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx
StatusPage.io, Walkbase, Spanning, DNAnexus, Jobcase, Nextcapital, Smartling, Veracode, 6sense
Find out what your peers are saying about Wiz, Palo Alto Networks, SentinelOne and others in Container Security. Updated: August 2026.
910,479 professionals have used our research since 2012.