Red Hat Advanced Cluster Security for Kubernetes vs Threat Stack Cloud Security Platform [EOL] comparison

Red Hat and F5 are both solutions in the Container Security category. Additionally, 100% of Red Hat users are willing to recommend the solution, compared to 88% of F5 users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Nov 16, 2025

Threat Stack Cloud Security Platform and Red Hat Advanced Cluster Security for Kubernetes compete in the cloud security management category. While Threat Stack is known for its affordability and robust support, Red Hat offers advanced features specifically for Kubernetes, making it ideal for those needing extensive Kubernetes functionalities.

Features: Threat Stack provides real-time threat detection, configuration auditing, and compliance management, focusing on cloud infrastructure security. Red Hat Advanced Cluster Security emphasizes Kubernetes environments with features like image vulnerability scanning, network segmentation, and runtime protection, excelling in comprehensive security for container systems.

Room for Improvement: Threat Stack could benefit from enhanced container monitoring features, improved automation capabilities, and a more intuitive user interface. Red Hat Advanced Cluster Security might improve by offering more competitive pricing, enhanced real-time threat detection outside Kubernetes, and streamlining its complex feature set for easier accessibility.

Ease of Deployment and Customer Service: Red Hat Advanced Cluster Security offers seamless integration with Kubernetes, providing straightforward deployment and dedicated customer support for complex issues. Threat Stack ensures easy setup with a cloud-centric design and responsive customer service, simplifying typical cloud deployments.

Pricing and ROI: Threat Stack is favored for its lower initial costs and good ROI due to competitive pricing. Red Hat Advanced Cluster Security often incurs higher costs but offers greater ROI in Kubernetes-dedicated environments due to its specialized features and capabilities, justifying the investment for strategic benefits.

To learn more, read our detailed Container Security Report (Updated: June 2026).

Buyer's Guide

Container Security

June 2026

Download the complete report

Helped 900,125 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

Daniel Stevens

Software Engineer at Galley

Offers easy management and container connection with HTTPS, but the support needs to improve

I have experience with the solution's setup in Rio de Janeiro, Brazil and our company has assisted in the development of a cluster in a research department, but we didn't start from scratch because we have IT professionals who have installed Kubernetes across 12 nodes of a cluster and a new environment can be created for a new platform. I also had another setup experience of Red Hat Advanced Cluster Security for Kubernetes in Portugal where I had to implement the solution in a cluster of 22 computer servers, which was completed with assistance from the IT department of the company. The initial setup process of the solution can be considered as difficult. The setup process involves using the permissions, subnets and range of IPs, which makes it complex. Deploying Red Hat Advanced Cluster Security for Kubernetes takes around eight to ten hours for new clusters. The solution's deployment can be divided into three parts. The first part involves OpenStack, where the cluster's resources need to be identified. The second part involves virtualizing assets and identifying other physical assets, for which OpenStack, Kubernetes, or OpenShift are used. The third part of the deployment involves dividing the networks into subnetworks and implementing automation to deploy the microservices using Helm. The number of professionals required for the solution's deployment depends upon the presence of automated scripts. Ideally, two or three professionals are required to set up Red Hat Advanced Cluster Security for Kubernetes.

Read full review

Skyler Cain

Software Development Manager at Rent Dynamics

SecOps program for us, as a smaller company, is amazing; they know what to look for

They could give a few more insights into security groups and recommendations on how to be more effective. That's getting more into the AWS environment, specifically. I'm not sure if that's Threat Stack's plan or not, but I would like them to help us be efficient about how we're setting up security groups. They could recommend separation of VPCs and the like - really dig into our architecture. I haven't seen a whole lot of that and I think that's something that, right off the bat, could have made us smarter. Even as part of the SecOps Program, that could be helpful; a quick analysis. They're analyzing our whole infrastructure and saying, "You have one VPC and that doesn't make a lot of sense, that should be multiple VPCs and here's why." The architecture of the servers in whatever cloud-hosting provider you're on could be helpful. Other than that, they should continue to expand on their notifications and on what's a vulnerability. They do a great job of that and we want them to continue to do that. It would be cool, since the agent is already deployed and they know about the server, they know the IP address, and they know what vulnerability is there, for them to test the vulnerability and see if they can actually exploit it. Or, once we patch it, they could double-check that it can't be. I don't know how hard that would be to build. Thinking on it off the top off my head, it could be a little challenging but it could also be highly interesting. It would also be great if we could test a couple of other features like hammering a server with 100 login attempts and see what happens. Real test scenarios could be really helpful. That is probably more something close to what they do with the SOC 2 audit or the report. But more visualization of that, being able to test things out on our infrastructure to make sure we can or can't hit this box could be interesting.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"By integrating TotalCloud, we have significantly reduced vulnerabilities in our deployment pipeline."

"I would definitely recommend Qualys TotalCloud to other customers."

"Once you have your vulnerabilities fixed and your patches pushed out using Qualys TotalCloud, then you are able to eliminate threats and cyber risk."

"Qualys TotalCloud has helped us view our risk structure, vulnerabilities, and security posture."

"I would definitely recommend it because it is easy to handle any cloud resources."

"I found the initial setup user-friendly."

"The most valuable feature of Qualys TotalCloud is the visibility it provides."

"I highly recommend Qualys TotalCloud to other users."

More Qualys TotalCloud pros

"Scalability-wise, I rate the solution a nine out of ten."

"One of the most valuable features I found was the ability of this solution to map the network and show you the communication between your containers and your different nodes."

"I like virtualization and all those tools that come with OpenShift. I also like Advanced Cluster Management and the built-in security."

"Segmentation is the most powerful feature."

"The benefit of working with the solution is the fact that it's very straightforward...It is a perfectly stable product since the details are very accurate."

"It is easy to install and manage."

"The most beneficial security feature of the product revolves around the areas of vulnerability and configuration."

"I am impressed with the tool's visibility."

More Red Hat Advanced Cluster Security for Kubernetes pros

"The capacity to respond to evidence requests from the SOX auditors has significantly improved because of this tool."

"There has been a measurable decrease in the meantime to remediation... because we have so many different tech verticals already collated in one place, our ability to respond is drastically different than it used to be."

"The rules are really great. They give us more visibility and control over what's being triggered. There's a large set of rules that come out-of-the-box. We can customize them and we can create our own rules based on the traffic patterns that we see."

"It is scalable. It deploys easily with curl and yum."

"There has been a measurable decrease in the meantime to remediation, by 95 percent."

"Every other security tool we've looked is good at containers, or at Kubernetes, is good at AWS, or at instance monitoring. But nobody is good at tying all of those things together, and that's really where Threat Stack shines."

"Finally, Threat Stack has cut down on the time needed to investigate potential attacks by about 75 percent."

"The SecOps program is absolutely amazing when you do not have a dedicated resource for security."

More Threat Stack Cloud Security Platform [EOL] pros

Cons

"Qualys TotalCloud has the potential to improve by integrating a hybrid platform for comprehensive management of both on-premises and cloud infrastructures."

"Overall, we are satisfied with it. However, the response part of the Cloud Detection and Response (CDR) module can be improved. It is not yet in place according to requirements; it is not completely available even though the module has been released."

"The support is not up to the mark and seems to be overburdened."

"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."

"TotalCloud could improve its scanning of niche devices like Wi-Fi dongles and USB modems because they are often untested. It covers everything else, like laptops, mobile devices, and Bluetooth IoT devices. They can improve on the small IoT devices because hackers and testers use these."

"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."

"I sometimes have difficulty detecting or uninstalling certain versions of applications, which I have to do manually."

"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."

More Qualys TotalCloud cons

"I do see that some features associated with the IAST part are not included in the tool, making it an area where improvements are required."

"The deprecation of APIs is a concern since the deprecation of APIs will cause issues for us every time we upgrade."

"The solution's price could be better."

"The support and specifications need to be up to date for the cluster technologies"

"The tool's command line and configuration are hard for us to understand and make deployment complex. It should also include zero trust, access control features and database connectivity."

"The solution's visibility and vulnerability prevention should be improved."

"The testing process could be improved."

"They're trying to convert it to the platform as a source. They are moving in the direction of Cloud Foundry so it can be easier for a developer to deploy it."

More Red Hat Advanced Cluster Security for Kubernetes cons

"They could give a few more insights into security groups and recommendations on how to be more effective."

"It's too expensive, but I'm always going to say that. It is very expensive compared to some other products."

"Some features do not work as expected."

"The user interface can be a little bit clunky at times... There's a lot of information that needs to be waded through, and the UI just isn't great."

"The reports aren't very good. We've automated the report generation via the API and replaced almost all the reports that they generate for us using API calls instead."

"The solution’s ability to consume alerts and data in third-party tools (via APIs and export into S3 buckets) is moderate. They have some work to do in that area... The API does not mimic the features of the UI as far as reporting and pulling data out go. There's a big discrepancy there."

"It shoots back a lot of alerts."

"I would like further support of Windows endpoint agents or the introduction of support for Windows endpoint agents."

More Threat Stack Cloud Security Platform [EOL] cons

Pricing and Cost Advice

"Qualys TotalCloud offers cost-effective licensing flexibility."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"TotalCloud's price is about right where I would expect it to be."

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

More Qualys TotalCloud pricing and cost advice

"It's a costly solution"

"The pricing model is moderate, meaning it is not very expensive."

"The price of Red Hat Advanced Cluster Security for Kubernetes is better than Palo Alto Prisma."

"Red Hat offers two pricing options for their solution: a separate price, and a bundled price under the OpenShift Platform Plus."

"We purchase a yearly basis license for the solution."

"It is very expensive compared to some other products. The pricing is definitely high."

"I'm happy with the amount that we spend for the product that we get and the overall service that we get. It's not cheap, but I'm still happy with the spend."

"It is a cost-effective choice versus other solutions on the market."

"Pricing seems to be in line with the market structure. It's fine."

"It came in cheaper than Trend Micro when we purchased it a few years ago."

"We find the licensing and pricing very easy to understand and a good value for the services provided."

"What we're paying now is somewhere around $15 to $20 per agent per month, if I recall correctly. The other cost we have is SecOps."

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

900,125 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

18%

Financial Services Firm

13%

Construction Company

Comms Service Provider

Financial Services Firm

29%

Government

Computer Software Company

Manufacturing Company

11%

Construction Company

10%

Performing Arts

10%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	3
Large Enterprise	29

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	2
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	5
Large Enterprise	2

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

See all answers

What needs improvement with Qualys TotalCloud?

Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...

See all answers

What is your primary use case for Qualys TotalCloud?

Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...

See all answers

What needs improvement with Red Hat Advanced Cluster Security for Kubernetes?

From an improvement perspective, I would like to create new policies in the tool, especially if it is deployed for th...

See all answers

What is your primary use case for Red Hat Advanced Cluster Security for Kubernetes?

I use the solution in my company for vulnerability management, configuration management, compliance, safety handling,...

See all answers

What advice do you have for others considering Red Hat Advanced Cluster Security for Kubernetes?

The tool's policy management supports our company's compliance efforts since any corporate entity or enterprise must ...

See all answers

Ask a question

Earn 20 points

Comparisons

Wiz vs Qualys TotalCloud

Compared 12% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

JupiterOne vs Qualys TotalCloud

Compared 5% of the time

Nucleus Security vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Prisma Cloud by Palo Alto Networks vs Red Hat Advanced Cluster Security for Kubernetes

Compared 11% of the time

Aqua Cloud Security Platform vs Red Hat Advanced Cluster Security for Kubernetes

Compared 10% of the time

Tenable.io Container Security vs Red Hat Advanced Cluster Security for Kubernetes

Compared 8% of the time

Microsoft Defender for Cloud vs Red Hat Advanced Cluster Security for Kubernetes

Compared 6% of the time

Qualys VMDR vs Red Hat Advanced Cluster Security for Kubernetes

Compared 5% of the time

More Red Hat Advanced Cluster Security for Kubernetes Competitors

Check Point CloudGuard CNAPP vs Threat Stack Cloud Security Platform [EOL]

Compared 7% of the time

Microsoft Defender for Cloud vs Threat Stack Cloud Security Platform [EOL]

Compared 6% of the time

FortiCNAPP vs Threat Stack Cloud Security Platform [EOL]

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Threat Stack Cloud Security Platform [EOL]

Compared 6% of the time

Snyk vs Threat Stack Cloud Security Platform [EOL]

Compared 5% of the time

More Threat Stack Cloud Security Platform [EOL] Competitors

Product Reports

Buyer's Guide

Qualys TotalCloud

May 2026

Download Qualys TotalCloud product report

Buyer's Guide

Red Hat Advanced Cluster Security for Kubernetes

May 2026

Red Hat Advanced Cluster Security for Kubernetes report

Download Red Hat Advanced Cluster Security for Kubernetes product report

Buyer's Guide

Threat Stack Cloud Security Platform [EOL]

May 2026

Threat Stack Cloud Security Platform [EOL] report

Download Threat Stack Cloud Security Platform [EOL] product report

Also Known As

Qualys TotalCloud with FlexScan

StackRox

Threat Stack, CSP,

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Red Hat Advanced Cluster Security for Kubernetes empowers organizations with robust capabilities in container security, vulnerability management, and workload transition, seamlessly integrated with OpenShift for optimal orchestration.

Red Hat Advanced Cluster Security for Kubernetes stands out with its comprehensive features like authentication, authorization, and API integration. Users appreciate resource sharing, segmentation, and virtualization capabilities, all facilitated by a user-friendly Cockpit web interface and command administration. The system's strengths are visible through effective security protocols, such as secure UPI images, container networking, and built-in security features. Its advanced cluster management and monitoring ensure efficiency, while focus on vulnerability and configuration management addresses key concerns. However, improvements in documentation, web UI, and API flexibility are needed, with challenges in command line configuration and deployment also noted. Stability issues due to API deprecation and the need for enhanced zero trust, access control, and database connectivity present room for growth.

What are the key features of Red Hat Advanced Cluster Security for Kubernetes?

API Integration: Seamless integration capabilities with APIs for enhanced automation.
Resource Sharing: Effective resource distribution within clustered environments.
Secure UPI Images: Encrypted images for heightened security and safety.
Container Networking: Modern networking protocols for efficient container communication.
Communication Mapping: Detailed network traffic visualization and analysis.

What benefits and ROI can users expect from Red Hat Advanced Cluster Security for Kubernetes?

Vulnerability Management: In-depth identification and mitigation of security threats.
Compliance Management: Ensures adherence to regulatory standards and practices.
Integration with OpenShift: Streamlined orchestration for enhanced deployment flexibility.
Threat Detection: Advanced capabilities for monitoring and responding to potential security breaches.

Red Hat Advanced Cluster Security for Kubernetes is implemented across various industries to facilitate the transition from traditional monolithic applications to dynamic containerized environments. Organizations in sectors such as finance, healthcare, and technology benefit from its robust segmentation, monitoring abilities, and behavior analysis. With the integration of Istio and GRPC, industries achieve secure microservices communication and improved visibility for comprehensive threat monitoring.

Red Hat

Threat Stack Cloud Security Platform [EOL] offers robust security features including endpoint monitoring, rule customization, and integration capabilities, with easy connectivity to cloud services like Docker and AWS.

Threat Stack Cloud Security Platform [EOL] provides tools for enhancing security visibility across cloud infrastructure. It supports AWS and Docker integration, facilitating efficient threat detection and management. Users appreciate its capability to configure customizable alerts and monitor endpoints, sessions, API interactions, and cloud services. However, there are areas needing improvement, such as better serverless environment support and reduced alert frequency. The platform services smaller organizations by compensating for limited security resources with its comprehensive monitoring and auditing tools.

What are the key features?

Easy Cloud Service Integration: Streamlined connectivity with Docker and AWS for efficient monitoring.
Customizable Rule Sets: Tailor security rules to meet specific organizational needs.
Email Alerts: Receive timely notifications about security events and threats.
Interactive Session Monitoring: Track live sessions for suspicious activities.
API Integration: Connect effortlessly with third-party tools for an enhanced security posture.
SecOps Support: Assistance for organizations lacking dedicated security teams.

What are the benefits and ROI features?

Streamlined Threat Detection: Effective process monitoring to identify potential threats.
Cost Efficiency: Serves companies with limited resources by providing essential security functions.
Comprehensive Audits: Helps in regular examinations of cloud infrastructure, enhancing compliance.
Visibility into Cloud Operations: Offers a detailed dashboard for threat visibility and monthly vulnerability assessments.

In specific industries, Threat Stack Cloud Security Platform [EOL] is utilized for its strength in monitoring cloud infrastructure and preventing unauthorized access. Organizations in fields where cloud operations are critical use it for regular audits and monitoring. Its capabilities in threat management are leveraged to maintain secure operations and compliance, especially where there is no dedicated security team.

Sample Customers

Information Not Available

City National Bank, U.S. Department of Homeland Security

StatusPage.io, Walkbase, Spanning, DNAnexus, Jobcase, Nextcapital, Smartling, Veracode, 6sense

Find out what your peers are saying about Wiz, Palo Alto Networks, SentinelOne and others in Container Security. Updated: June 2026.

DOWNLOAD NOW

900,125 professionals have used our research since 2012.

See our list of best Container Security vendors.

We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.