No more typing reviews! Try our Samantha, our new voice AI agent.

Qualys Policy Compliance vs Stacklet comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys Policy Compliance
Ranking in IT Governance
4th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
8
Ranking in other categories
No ranking in other categories
Stacklet
Ranking in IT Governance
10th
Average Rating
7.0
Reviews Sentiment
6.2
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the IT Governance category, the mindshare of Qualys Policy Compliance is 3.7%, up from 2.7% compared to the previous year. The mindshare of Stacklet is 0.9%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Governance Mindshare Distribution
ProductMindshare (%)
Qualys Policy Compliance3.7%
Stacklet0.9%
Other95.4%
IT Governance
 

Featured Reviews

reviewer1906245 - PeerSpot reviewer
Information Security Analyst at a tech services company with 11-50 employees
Facilitates continuous compliance monitoring and simplifies vulnerability tracking for distributed cloud assets
Regarding improvements I would like to see in Qualys Policy Compliance, there are a couple of vulnerabilities where the metrics that are already there and the way Qualys measures those metrics and labels them as critical, high, or low does not align with my understanding from a user standpoint. Every time, I have to put in a false positive. Since I have been doing that for the past one year, the same vulnerability tends to pop up and they mark it as critical. Qualys needs to update and rediscover those weaknesses and re-label them. I understand what the company design and what the tool does, but it takes some time for us to manage those things. In terms of missing features that I would like to see included in Qualys Policy Compliance, I do not think there are any. The feature does what we require and does the job. If there were some sort of reporting that fulfills auditor's requirements, particularly if there is an external audit and they ask us for any historical data like how long we have been compliant to the PCI framework, that would be valuable. Having reporting that shows historical data that we have been compliant from the date of inception, for example, from 2023 to 2025 onwards, would bring value to what we are reporting.
Faheem-Khan - PeerSpot reviewer
Senior Platform Engineer at Tapestry
Centralized multi-account cost control has improved governance but still needs better savings insight
The feature I appreciate the most about Stacklet is the multi-account policy orchestration, which is very valuable because while Cloud Custodian is completely open source and anyone can use it, managing more than 5 to 20 accounts with it can be difficult. Another feature I appreciate is the policy approval workflows, which are production critical, enabling us to define actions to terminate or tag EC2 instances effectively. When it comes to Stacklet's automated remediation, everything Stacklet does could be accomplished with manual steps; however, the added action capability from the clicks makes it really helpful. Yet, there were some challenges, such as not being able to identify how much we were saving from a policy implemented across different accounts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We have tightened our infrastructure using the solution and it's a safer environment from cyber crime and cyber attacks."
"The reporting and security checks are valuable."
"The reason I decided to stick with Qualys is that for the past three years, we went through evaluating other tools, but Qualys was always our priority and always our first choice because of what it was offering as a platform."
"It is easy, fast, and reliable."
"It's a simple product."
"From the Qualys Policy Compliance, the best feature is that they have predefined templates for compliances, allowing easy application of compliance requirements against our products and providing clear reports on whether assets are compliant or not."
"The solution's interface looks good, which enhances asset scanning and ensures automatic patching."
"The most valuable feature of QualysGuard Policy Compliance is the automation that can detect real-time threats and decrease risks."
"We used Stacklet for cloud optimizations and were able to save around 40,000 US dollars per annum."
"In a nutshell, we were able to save around $40,000 USD per annum."
 

Cons

"The policy creation aspect needs improvement."
"They need to improve the reporting part of the CI/CD pipelines and the ability to download scans from pods."
"We are not entirely satisfied with technical support but it's not bad."
"Some sort of education or knowledge base about the product would be beneficial for beginners."
"The reporting needs improvement."
"It would be good if the solution’s technical support could be faster."
"There are a couple of vulnerabilities where the metrics that are already there and the way Qualys measures those metrics and labels them as critical, high, or low does not align with my understanding from a user standpoint."
"The reporting needs improvement. While the tool is really good at doing the assessment, it's not as good at reporting various compliance states."
"Yet, there were some challenges, such as not being able to identify how much we were saving from a policy implemented across different accounts."
"One area for improvement is visual policy builders."
 

Pricing and Cost Advice

"The prices might be a little bit high. I cannot compare it with another product because we did not try any other product, but this is my impression when comparing different modules."
"The solution's pricing is in the mid-range, where it is neither expensive nor very cheap."
Information not available
report
Use our free recommendation engine to learn which IT Governance solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Healthcare Company
12%
Outsourcing Company
11%
Marketing Services Firm
11%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise4
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for QualysGuard Policy Compliance?
I was involved in the purchasing of Qualys Policy Compliance in my previous company, where the costs are based on the number of devices and features, with enterprise level pricing which I cannot sp...
What needs improvement with QualysGuard Policy Compliance?
Regarding improvements I would like to see in Qualys Policy Compliance, there are a couple of vulnerabilities where the metrics that are already there and the way Qualys measures those metrics and ...
What is your primary use case for QualysGuard Policy Compliance?
I have been working with Qualys Policy Compliance for the past four years. Our complete infrastructure is on cloud and we have assets distributed across Asia and North America. We have a couple of ...
What needs improvement with Stacklet?
One area for improvement is visual policy builders. Stacklet features natural language query tools, but newer users face a steep learning curve when building complex multi-step automated remediatio...
What is your primary use case for Stacklet?
I used Stacklet during my experience at Xgrid, particularly in the last year when we were optimizing cloud costs for SleepIQ Tech for different clients. One thing we were proud of was the Cloud Cus...
What advice do you have for others considering Stacklet?
If you want to exactly govern your cloud, then you should go towards Stacklet. It does not only help in saving costs, it helps in governance as well. It shows how you should organize resources, all...
 

Overview

 

Sample Customers

PDX, Cigna
Information Not Available
Find out what your peers are saying about Qualys Policy Compliance vs. Stacklet and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.