Red Hat Advanced Cluster Security for Kubernetes vs Threat Stack Cloud Security Platform [EOL] comparison

Why PeerSpot?

Red Hat and F5 are both solutions in the Container Security category. Additionally, 100% of Red Hat users are willing to recommend the solution, compared to 88% of F5 users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Nov 16, 2025

Threat Stack Cloud Security Platform and Red Hat Advanced Cluster Security for Kubernetes compete in the cloud security management category. While Threat Stack is known for its affordability and robust support, Red Hat offers advanced features specifically for Kubernetes, making it ideal for those needing extensive Kubernetes functionalities.

Features: Threat Stack provides real-time threat detection, configuration auditing, and compliance management, focusing on cloud infrastructure security. Red Hat Advanced Cluster Security emphasizes Kubernetes environments with features like image vulnerability scanning, network segmentation, and runtime protection, excelling in comprehensive security for container systems.

Room for Improvement: Threat Stack could benefit from enhanced container monitoring features, improved automation capabilities, and a more intuitive user interface. Red Hat Advanced Cluster Security might improve by offering more competitive pricing, enhanced real-time threat detection outside Kubernetes, and streamlining its complex feature set for easier accessibility.

Ease of Deployment and Customer Service: Red Hat Advanced Cluster Security offers seamless integration with Kubernetes, providing straightforward deployment and dedicated customer support for complex issues. Threat Stack ensures easy setup with a cloud-centric design and responsive customer service, simplifying typical cloud deployments.

Pricing and ROI: Threat Stack is favored for its lower initial costs and good ROI due to competitive pricing. Red Hat Advanced Cluster Security often incurs higher costs but offers greater ROI in Kubernetes-dedicated environments due to its specialized features and capabilities, justifying the investment for strategic benefits.

To learn more, read our detailed Container Security Report (Updated: October 2026).

Buyer's Guide

Container Security

October 2026

Download the complete report

Helped 920,336 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Featured Reviews

reviewer2859021

Sr Security Engineer at a tech vendor with 5,001-10,000 employees

Risk-based triage has transformed container security and now prioritizes high-impact threats

The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.

Read full review

Daniel Stevens

Software Engineer at Galley

Offers easy management and container connection with HTTPS, but the support needs to improve

I have experience with the solution's setup in Rio de Janeiro, Brazil and our company has assisted in the development of a cluster in a research department, but we didn't start from scratch because we have IT professionals who have installed Kubernetes across 12 nodes of a cluster and a new environment can be created for a new platform. I also had another setup experience of Red Hat Advanced Cluster Security for Kubernetes in Portugal where I had to implement the solution in a cluster of 22 computer servers, which was completed with assistance from the IT department of the company. The initial setup process of the solution can be considered as difficult. The setup process involves using the permissions, subnets and range of IPs, which makes it complex. Deploying Red Hat Advanced Cluster Security for Kubernetes takes around eight to ten hours for new clusters. The solution's deployment can be divided into three parts. The first part involves OpenStack, where the cluster's resources need to be identified. The second part involves virtualizing assets and identifying other physical assets, for which OpenStack, Kubernetes, or OpenShift are used. The third part of the deployment involves dividing the networks into subnetworks and implementing automation to deploy the microservices using Helm. The number of professionals required for the solution's deployment depends upon the presence of automated scripts. Ideally, two or three professionals are required to set up Red Hat Advanced Cluster Security for Kubernetes.

Read full review

Skyler Cain

Software Development Manager at Rent Dynamics

SecOps program for us, as a smaller company, is amazing; they know what to look for

They could give a few more insights into security groups and recommendations on how to be more effective. That's getting more into the AWS environment, specifically. I'm not sure if that's Threat Stack's plan or not, but I would like them to help us be efficient about how we're setting up security groups. They could recommend separation of VPCs and the like - really dig into our architecture. I haven't seen a whole lot of that and I think that's something that, right off the bat, could have made us smarter. Even as part of the SecOps Program, that could be helpful; a quick analysis. They're analyzing our whole infrastructure and saying, "You have one VPC and that doesn't make a lot of sense, that should be multiple VPCs and here's why." The architecture of the servers in whatever cloud-hosting provider you're on could be helpful. Other than that, they should continue to expand on their notifications and on what's a vulnerability. They do a great job of that and we want them to continue to do that. It would be cool, since the agent is already deployed and they know about the server, they know the IP address, and they know what vulnerability is there, for them to test the vulnerability and see if they can actually exploit it. Or, once we patch it, they could double-check that it can't be. I don't know how hard that would be to build. Thinking on it off the top off my head, it could be a little challenging but it could also be highly interesting. It would also be great if we could test a couple of other features like hammering a server with 100 login attempts and see what happens. Real test scenarios could be really helpful. That is probably more something close to what they do with the SOC 2 audit or the report. But more visualization of that, being able to test things out on our infrastructure to make sure we can or can't hit this box could be interesting.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Qualys TotalCloud has improved our security posture."

"I would definitely recommend Qualys TotalCloud to other customers."

"Qualys TotalCloud's most valuable feature is its ability to link clusters of assets, providing a clear model of deployments, vulnerabilities, and statuses."

"Qualys TotalCloud has positively impacted my organization by providing visibility into the environment."

"The scalability is good as well. I would rate it ten out of ten."

"My experience with using TruRisk to mitigate noise from raw CVEs has been extremely effective."

"I appreciate Qualys TotalCloud's ability to onboard any type of device with ease, including containers."

"The most valuable feature is the consolidated information that it provides from various platforms."

More Qualys TotalCloud pros

"The benefit of working with the solution is the fact that it's very straightforward...It is a perfectly stable product since the details are very accurate."

"The most beneficial security feature of the product revolves around the areas of vulnerability and configuration."

"Segmentation is the most powerful feature."

"One of the most valuable features I found was the ability of this solution to map the network and show you the communication between your containers and your different nodes."

"I am impressed with the tool's visibility."

"The most valuable feature of the solution is its monitoring feature."

"It is easy to install and manage."

"The most valuable feature is the ability to share resources."

More Red Hat Advanced Cluster Security for Kubernetes pros

"The capacity to respond to evidence requests from the SOX auditors has significantly improved because of this tool."

"With Threat Stack, we quickly identified some AWS accounts which had services that would potentially be exposed and were able to remediate them prior to release of products."

"The solution has a lot of different features that are quite useful."

"It is scalable. It deploys easily with curl and yum."

"Finally, Threat Stack has cut down on the time needed to investigate potential attacks by about 75 percent."

"An important feature of this solution is monitoring. Specifically, container monitoring."

"Technical support is very helpful."

"It has been quite helpful to have the daily alerts coming to my email, as well as the Sev 1 Alerts... We just went through a SOX audit and those were pivotal."

More Threat Stack Cloud Security Platform [EOL] pros

Cons

"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."

"One of the things that could be improved is the alerts. Qualys is a fantastic tool, especially with the TruRisk feature, but one challenge that most leaders face involves alert fatigue."

"The cost of Qualys TotalCloud is high and could be more competitive."

"The price is very expensive, actually."

"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."

"Qualys TotalCloud has the potential to improve by integrating a hybrid platform for comprehensive management of both on-premises and cloud infrastructures."

"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."

"The downside is only in container security, but it has not been a long time since they introduced these models."

More Qualys TotalCloud cons

"The testing process could be improved."

"I do see that some features associated with the IAST part are not included in the tool, making it an area where improvements are required."

"The solution lacks features when compared to some of the competitors such as Prisma Cloud by Palo Alto Networks and has room for improvement."

"Red Hat is somewhat expensive."

"The documentation about Red Hat Advanced Cluster Security available online is very limited... So it's very limited to the documentation."

"The deprecation of APIs is a concern since the deprecation of APIs will cause issues for us every time we upgrade."

"The solution's visibility and vulnerability prevention should be improved."

"The solution's price could be better."

More Red Hat Advanced Cluster Security for Kubernetes cons

"Some features do not work as expected."

"The compliance and governance need improvement."

"The reports aren't very good. We've automated the report generation via the API and replaced almost all the reports that they generate for us using API calls instead."

"The one thing that we know they're working on, but we don't have through the tool, is the application layer."

"The user interface can be a little bit clunky at times... There's a lot of information that needs to be waded through, and the UI just isn't great."

"The API - which has grown quite a bit, so we're still learning it and I can't say whether it still needs improvement - was an area that had been needing it."

"I would like further support of Windows endpoint agents or the introduction of support for Windows endpoint agents."

"The one thing that we know they're working on, but we don't have through the tool, is the application layer. As we move to a serverless environment, with AWS Fargate or direct Lambda, that's where Threat Stack does not have the capacity to provide feed. Those are areas that it's blind to now..."

More Threat Stack Cloud Security Platform [EOL] cons

Pricing and Cost Advice

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."

"Qualys TotalCloud is expensive."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."

"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

More Qualys TotalCloud pricing and cost advice

"We purchase a yearly basis license for the solution."

"The price of Red Hat Advanced Cluster Security for Kubernetes is better than Palo Alto Prisma."

"It's a costly solution"

"Red Hat offers two pricing options for their solution: a separate price, and a bundled price under the OpenShift Platform Plus."

"The pricing model is moderate, meaning it is not very expensive."

"Pricing seems to be in line with the market structure. It's fine."

"I'm happy with the amount that we spend for the product that we get and the overall service that we get. It's not cheap, but I'm still happy with the spend."

"It is a cost-effective choice versus other solutions on the market."

"What we're paying now is somewhere around $15 to $20 per agent per month, if I recall correctly. The other cost we have is SecOps."

"It came in cheaper than Trend Micro when we purchased it a few years ago."

"It is very expensive compared to some other products. The pricing is definitely high."

"We find the licensing and pricing very easy to understand and a good value for the services provided."

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

920,336 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

18%

Outsourcing Company

11%

Manufacturing Company

11%

Financial Services Firm

10%

Financial Services Firm

25%

Outsourcing Company

Manufacturing Company

Energy/Utilities Company

Outsourcing Company

16%

Construction Company

10%

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	11
Large Enterprise	38

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	2
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	5
Large Enterprise	2

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...

See all answers

What needs improvement with Qualys TotalCloud?

I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...

See all answers

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...

See all answers

Ask a question

Earn 20 points

Ask a question

Earn 20 points

Comparisons

Wiz vs Qualys TotalCloud

Compared 11% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 7% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Orca Security vs Qualys TotalCloud

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Tenable.io Container Security vs Red Hat Advanced Cluster Security for Kubernetes

Compared 13% of the time

Prisma Cloud by Palo Alto Networks vs Red Hat Advanced Cluster Security for Kubernetes

Compared 9% of the time

Aqua Cloud Security Platform vs Red Hat Advanced Cluster Security for Kubernetes

Compared 9% of the time

Qualys Exposure Management vs Red Hat Advanced Cluster Security for Kubernetes

Compared 6% of the time

SUSE NeuVector vs Red Hat Advanced Cluster Security for Kubernetes

Compared 5% of the time

More Red Hat Advanced Cluster Security for Kubernetes Competitors

Prisma Access by Palo Alto Networks vs Threat Stack Cloud Security Platform [EOL]

Compared 9% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Threat Stack Cloud Security Platform [EOL]

Compared 5% of the time

Microsoft Defender for Cloud vs Threat Stack Cloud Security Platform [EOL]

Compared 5% of the time

Prisma Cloud by Palo Alto Networks vs Threat Stack Cloud Security Platform [EOL]

Compared 5% of the time

Snyk vs Threat Stack Cloud Security Platform [EOL]

Compared 5% of the time

More Threat Stack Cloud Security Platform [EOL] Competitors

Product Reports

Buyer's Guide

Qualys TotalCloud

October 2026

Download Qualys TotalCloud product report

Buyer's Guide

Red Hat Advanced Cluster Security for Kubernetes

October 2026

Red Hat Advanced Cluster Security for Kubernetes report

Download Red Hat Advanced Cluster Security for Kubernetes product report

Buyer's Guide

Threat Stack Cloud Security Platform [EOL]

October 2026

Threat Stack Cloud Security Platform [EOL] report

Download Threat Stack Cloud Security Platform [EOL] product report

Also Known As

Qualys TotalCloud with FlexScan

StackRox

Threat Stack, CSP,

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Red Hat Advanced Cluster Security for Kubernetes empowers organizations with robust capabilities in container security, vulnerability management, and workload transition, seamlessly integrated with OpenShift for optimal orchestration.

Red Hat Advanced Cluster Security for Kubernetes stands out with its comprehensive features like authentication, authorization, and API integration. Users appreciate resource sharing, segmentation, and virtualization capabilities, all facilitated by a user-friendly Cockpit web interface and command administration. The system's strengths are visible through effective security protocols, such as secure UPI images, container networking, and built-in security features. Its advanced cluster management and monitoring ensure efficiency, while focus on vulnerability and configuration management addresses key concerns. However, improvements in documentation, web UI, and API flexibility are needed, with challenges in command line configuration and deployment also noted. Stability issues due to API deprecation and the need for enhanced zero trust, access control, and database connectivity present room for growth.

What are the key features of Red Hat Advanced Cluster Security for Kubernetes?

API Integration: Seamless integration capabilities with APIs for enhanced automation.
Resource Sharing: Effective resource distribution within clustered environments.
Secure UPI Images: Encrypted images for heightened security and safety.
Container Networking: Modern networking protocols for efficient container communication.
Communication Mapping: Detailed network traffic visualization and analysis.

What benefits and ROI can users expect from Red Hat Advanced Cluster Security for Kubernetes?

Vulnerability Management: In-depth identification and mitigation of security threats.
Compliance Management: Ensures adherence to regulatory standards and practices.
Integration with OpenShift: Streamlined orchestration for enhanced deployment flexibility.
Threat Detection: Advanced capabilities for monitoring and responding to potential security breaches.

Red Hat Advanced Cluster Security for Kubernetes is implemented across various industries to facilitate the transition from traditional monolithic applications to dynamic containerized environments. Organizations in sectors such as finance, healthcare, and technology benefit from its robust segmentation, monitoring abilities, and behavior analysis. With the integration of Istio and GRPC, industries achieve secure microservices communication and improved visibility for comprehensive threat monitoring.

Red Hat

Threat Stack Cloud Security Platform [EOL] offers robust security features including endpoint monitoring, rule customization, and integration capabilities, with easy connectivity to cloud services like Docker and AWS.

Threat Stack Cloud Security Platform [EOL] provides tools for enhancing security visibility across cloud infrastructure. It supports AWS and Docker integration, facilitating efficient threat detection and management. Users appreciate its capability to configure customizable alerts and monitor endpoints, sessions, API interactions, and cloud services. However, there are areas needing improvement, such as better serverless environment support and reduced alert frequency. The platform services smaller organizations by compensating for limited security resources with its comprehensive monitoring and auditing tools.

What are the key features?

Easy Cloud Service Integration: Streamlined connectivity with Docker and AWS for efficient monitoring.
Customizable Rule Sets: Tailor security rules to meet specific organizational needs.
Email Alerts: Receive timely notifications about security events and threats.
Interactive Session Monitoring: Track live sessions for suspicious activities.
API Integration: Connect effortlessly with third-party tools for an enhanced security posture.
SecOps Support: Assistance for organizations lacking dedicated security teams.

What are the benefits and ROI features?

Streamlined Threat Detection: Effective process monitoring to identify potential threats.
Cost Efficiency: Serves companies with limited resources by providing essential security functions.
Comprehensive Audits: Helps in regular examinations of cloud infrastructure, enhancing compliance.
Visibility into Cloud Operations: Offers a detailed dashboard for threat visibility and monthly vulnerability assessments.

In specific industries, Threat Stack Cloud Security Platform [EOL] is utilized for its strength in monitoring cloud infrastructure and preventing unauthorized access. Organizations in fields where cloud operations are critical use it for regular audits and monitoring. Its capabilities in threat management are leveraged to maintain secure operations and compliance, especially where there is no dedicated security team.

Sample Customers

Information Not Available

City National Bank, U.S. Department of Homeland Security

StatusPage.io, Walkbase, Spanning, DNAnexus, Jobcase, Nextcapital, Smartling, Veracode, 6sense

Find out what your peers are saying about Wiz, SentinelOne, Palo Alto Networks and others in Container Security. Updated: October 2026.

DOWNLOAD NOW

920,336 professionals have used our research since 2012.

See our list of best Container Security vendors.

We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.