No more typing reviews! Try our Samantha, our new voice AI agent.

Qualys TotalCloud vs Veza comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Ranking in SaaS Security Posture Management (SSPM)
1st
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Vulnerability Management (11th), Container Security (13th), Cloud Workload Protection Platforms (CWPP) (9th), Cloud Security Posture Management (CSPM) (8th), Cloud-Native Application Protection Platforms (CNAPP) (8th)
Veza
Ranking in SaaS Security Posture Management (SSPM)
9th
Average Rating
7.6
Reviews Sentiment
6.6
Number of Reviews
2
Ranking in other categories
GRC (26th), Identity Management (IM) (22nd), Privileged Access Management (PAM) (27th), Non-Human Identity Management (NHIM) (8th), Identity Security and Posture Management (ISPM) (3rd)
 

Mindshare comparison

As of May 2026, in the SaaS Security Posture Management (SSPM) category, the mindshare of Qualys TotalCloud is 3.0%, up from 0.8% compared to the previous year. The mindshare of Veza is 5.0%, up from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
SaaS Security Posture Management (SSPM) Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud3.0%
Veza5.0%
Other92.0%
SaaS Security Posture Management (SSPM)
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
HarshalJethwa - PeerSpot reviewer
Cloud Operations Engineer at a tech vendor with 51-200 employees
Centralized access control has strengthened least privilege and streamlined audit compliance
The best features Veza offers in my experience are access visibility to see who can access what and which parts, relationship mapping of a user to roles, policies and resources, and risk detection such as over-permission and unused permission privileges. I can perform audit compliance using those features and the platform supports multiple platforms. Out of those features, I find risk detection to be the most valuable in my day-to-day work because I can check who has over-permission or unused permissions and understand relationship mapping and access visibility. Veza has positively impacted my organization by improving access for our users, allowing us to check the user and perform auditing for our system or organization. We are now able to implement least privilege practices, which has made our organization and system more secure.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a cloud-native app that integrates with both IaaS and SaaS. It seamlessly integrates with other platforms."
"Qualys TotalCloud's most valuable features are its security capabilities that help identify and mitigate risk factors."
"We were able to realize its benefits within 24 to 48 hours."
"Qualys TotalCloud provides a single, prioritized view of risk, reducing the workload associated with consolidating multiple sources for risk prioritization."
"Its dashboards are brilliant. It provides in-depth insights."
"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"
"The best features in Qualys TotalCloud include the total asset management of the cloud environment. It is very easy to export the report and see the vulnerabilities related to the cloud specifically."
"I would recommend Qualys TotalCloud to other users because it is cost-efficient and has a good return on investment."
"It's the only current GRC vendor with licensing rights for HITRUST 11.3 framework, and I've avoided expensive HITRUST licensing costs through a custom control framework."
"Veza has positively impacted my organization by improving access for our users, allowing us to check the user and perform auditing for our system or organization, and we are now able to implement least privilege practices, which has made our organization and system more secure."
 

Cons

"It is already perfect, but they can bring some newer dashboards and customization options for the dashboard. It would be great to be able to include on-prem assets on the dashboard."
"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."
"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."
"Their support could be improved."
"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."
"TotalCloud could improve the classification of vulnerabilities. Specifically, it could enhance the categorization of what aspects fall under patches resolved by OS or software updates and what pertains to configuration adjustments."
"The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."
"The downside is only in container security, but it has not been a long time since they introduced these models."
"Veza can be improved as it is currently not suitable for small projects due to its high cost, complex setup, and requirement for more integration with multiple systems."
"The support experience could be better."
 

Pricing and Cost Advice

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Qualys TotalCloud is expensive."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
Information not available
report
Use our free recommendation engine to learn which SaaS Security Posture Management (SSPM) solutions are best for your needs.
894,738 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
10%
Manufacturing Company
9%
Government
8%
Financial Services Firm
15%
Healthcare Company
9%
Computer Software Company
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise28
No data available
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple enough for everyone to understand. For example, if we find a critical or high vuln...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal applications that we create for our organization purposes, where we perform applicati...
What is your experience regarding pricing and costs for Veza?
The overall price point of Vanta is commendable, especially considering the custom control framework that allows me to evade the high costs associated with HITRUST licensing.
What needs improvement with Veza?
The support experience could be better. We often need to escalate our issues to the account executive to receive a response, especially when support is needed for integrations.
What is your primary use case for Veza?
We are currently in the implementation stages of Vanta. It's been challenging to build out as it is not as intuitive as OneTrust, especially in terms of scoping and needs.
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
 

Overview

Find out what your peers are saying about Qualys TotalCloud vs. Veza and other solutions. Updated: April 2026.
894,738 professionals have used our research since 2012.