


Find out in this report how the two Vulnerability Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
CallStream helps us integrate and automate tasks.
We estimate that, on average, Seemplicity saves us two full-time employees in the security team.
Seemplicity sort of multiplies maybe 4x what we would have to spend in terms of employee hiring or actual analysts to be able to triage and remediate these vulnerabilities.
I was also able to pay for the tool twice over by using it for tool rationalization.
A reduction in remediation time has been seen because it is finding things before they happen.
Being able to find them because there have been no eyes on that particular section so far ever, and fixing those potentially prevented those companies from getting breached.
So far, I have seen a return on investment with The NodeZero Platform by Horizon3.ai, as we managed to save a lot of time and effort with this because this is an autonomous tool, and our manual effort is significantly reduced because of a product of this type.
They are helpful, respond to my queries, and can answer any question.
Qualys's tech support is highly responsive, providing multiple ways to interact with them.
Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA.
I would rate the customer support a perfect 10 because they have consistently taken care of all requests from day one post-deployment.
If we need support, their team simply goes down the elevator and steps into our office.
Customer support for Seemplicity is quick to respond and provide feedback to any issues or feature requests.
Overall, when it comes to The NodeZero Platform's tech support, you can reach them via a chat message on their website, and they respond almost immediately.
Previously, with time-sensitive engagements, I would worry about resolving issues before deadlines. That concern has diminished as they've become more responsive and require less escalation to engineering.
The vast majority of times they are able to resolve the exact questions my team has on the first attempt, which is really good for customer or technical support.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
Our organization currently uses it to manage over 1200 web applications.
It is absolutely scalable, and I would rate its scalability as nine out of ten.
When it comes to the volume of data ingestion, I have never had any challenges with them, and they pretty much stick to what they promise.
In terms of being able to force multiply a team that we otherwise do not have by using their AI analysts, it has been super helpful.
They went from a Postgres database to a ClickHouse database and that gave me the capability to build a lot more charts on the fly.
We have conducted pen tests in environments with hundreds of thousands of IP addresses without any scalability issues.
We currently scan approximately 1,500-2,000 assets and haven't encountered any scaling or throughput issues.
The platform offers various insider threats, segmentation tests, phishing tests, and PCI DSS tests.
Overall, the support provided has been excellent.
It is a stable solution, which is why we chose it.
Continuous monitoring is crucial to ensure system stability and avoid vulnerabilities or threats.
Seemplicity has been stable in the 12 to 14 months that we have been using it.
Seemplicity is quite accommodating, specifically if there is an issue with the platform, but also with requests for additional features and roadmap items.
We have not encountered any issues on the platform regarding accessibility, performance, or stability.
Regarding stability, it has never crashed, and there has not been any lagging from deployment or running.
I would rate the stability of The NodeZero Platform by Horizon3.ai as a ten.
Ideally, the scanner should automatically detect and scan all subdomains, even if not explicitly defined, ensuring comprehensive vulnerability assessment.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
It would be nice if customers could perform the aggregation themselves on the spot to reduce that bottleneck.
There is room for improvement in a generic approach to queue management and more proactive collaboration with security analysts, developers, and infrastructure teams on tickets.
With the introduction of AI and agentic AI and more involvement in day-to-day tasks, it would be great if this platform starts remediating the vulnerabilities as well.
This service reveals which credentials and email addresses are available on the deep web, as well as which domains have been set up using typo-squatting techniques.
The one thing that is very much asked from us as a service provider is DAST testing, so when a company is building a software, they could see their current security status while they are building the application.
If that pen test could be load balanced on more than one system, I believe The NodeZero Platform by Horizon3.ai could leverage that system and complete penetration tests in a much quicker time frame, providing quicker results to customers.
Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive.
Pricing is managed by our finance team; however, Qualys TotalCloud offers cost-effective licensing flexibility.
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
Pricing and licensing were straightforward, and we had direct discussions with the CEO of the company, which allowed us to arrive at a price point that worked for both sides.
Licensing was clear and predictable; I appreciate there being no surprise costs creeping in after the fact, especially as someone who has to plan budgets.
They did not come to us with a take-it-or-leave-it price; they sat down with us.
The pricing is much more affordable than traditional penetration tests.
It's a bit cheaper than manual penetration testing because manual testing typically allows you to scan only a few subnets.
Usually, manual penetration test scans take considerable time and money.
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
It will help cybersecurity professionals monitor the cloud and find vulnerabilities.
We are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs.
One is the option to deduplicate alerts between security platforms, which is something we do not have the capability for anywhere else.
The biggest impact Seemplicity has had on my organization is turning what used to be a fragmented, manual process into something structured and accountable.
It helps us accelerate the amount of time it takes to remediate and patch those systems and ensure that those systems are essentially secure and not vulnerable to exposure.
When a new vulnerability, such as a zero-day exploit, is identified, they review your previous scans to determine if you might be vulnerable to it, and they proactively notify you.
The detailed reports not only list the vulnerabilities that matter, but they also include direct links to patches.
The NodeZero Platform's real attack capabilities help in identifying vulnerabilities on our on-prem systems because it provides actual vulnerabilities by attacking our systems.
| Product | Mindshare (%) |
|---|---|
| The NodeZero Platform by Horizon3.ai | 1.3% |
| Qualys TotalCloud | 1.2% |
| Seemplicity | 0.1% |
| Other | 97.4% |

| Company Size | Count |
|---|---|
| Small Business | 12 |
| Midsize Enterprise | 5 |
| Large Enterprise | 31 |
| Company Size | Count |
|---|---|
| Midsize Enterprise | 3 |
| Large Enterprise | 7 |
| Company Size | Count |
|---|---|
| Small Business | 14 |
| Midsize Enterprise | 5 |
| Large Enterprise | 9 |
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
AI is fundamentally shifting the defender’s challenge from detection speed to remediation speed. While attackers use AI to scale, security teams drown in disparate signals and manual coordination. Seemplicity building for this shift by fighting AI with AI at the remediation layer.
Seemplicity is an agentic Exposure Action Platform™ that closes the gap between finding an exposure and actually resolving it. Autonomous AI analysts investigate, guide fixes, and verify remediation end-to-end. Only Seemplicity operationalizes the transition from overwhelming signals to autonomous, accountable action that reduces risk faster with less friction and more certainty.
What are Seemplicity's essential features?
What benefits should be considered when evaluating Seemplicity?
Seemplicity is widely implemented in industries like finance and healthcare, where streamlined security management is crucial. It aids in maintaining regulatory compliance and swift threat resolution, ensuring operations run smoothly and securely. Organizations benefit from its flexibility and scalability, adapting to their specific security needs.
NodeZero by Horizon3.ai is an offensive security platform that enables users to adopt an attacker’s perspective, reveal vulnerabilities, and verify defense effectiveness with evidence-backed insights.
NodeZero provides autonomous pentesting, showing how attackers exploit misconfigurations, credentials, and exposures into attack paths. It helps focus on real risks rather than hypothetical ones, integrating seamlessly into existing IT and security workflows to streamline processes. The platform drives risk-based vulnerability management and CTEM by validating vulnerabilities and measuring resilience.
What standout features improve your security?
What benefits should you expect from reviews?
NodeZero assists in automated penetration testing and vulnerability management in industries like finance and healthcare. It enhances security processes by complementing or replacing existing solutions, enabling efficient testing, feedback, and control validation.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.