No more typing reviews! Try our Samantha, our new voice AI agent.

UnderDefense vs Xops comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 9, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.8
Reviews Sentiment
7.0
Number of Reviews
55
Ranking in other categories
Vulnerability Management (5th), Container Security (8th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (6th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
UnderDefense
Average Rating
10.0
Reviews Sentiment
7.2
Number of Reviews
5
Ranking in other categories
Endpoint Detection and Response (EDR) (22nd), Security Orchestration Automation and Response (SOAR) (10th), SOC as a Service (4th), Managed Detection and Response (MDR) (10th), Extended Detection and Response (XDR) (15th), Compliance Management (10th), AI-SOC (8th), AI-Powered Security Automation (4th)
Xops
Average Rating
9.0
Number of Reviews
4
Ranking in other categories
Cloud Cost Management (28th), Compliance Management (15th), AI Security (28th)
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Ivan Voitovych - PeerSpot reviewer
Founder at Urlicer
AI-driven SOC triage has transformed threat monitoring and keeps our security work focused
The best features UnderDefense offers include mostly triage in-context signals read together across my stack, where one finding replaces many separate checks. A good thing too is its false positive suppression, as I do not get false notifications. Normal activity such as traffic spikes during customer events is recognized and documented, and only the unusual cases reach me. It has full-time support 24/7 with proactive reports, and monitoring runs around the clock. Reports and alerts come to me without even noticing or asking, so it is very useful. My team sees what happened without having to chase it. I find the proactive reporting and 24/7 support to have definitely made a real difference. Proactive reports mean I hear about what happened without having to ask, so I know the state of things at the start of the day, and 24/7 support matters most for traffic spikes and other events outside busy working hours, as I get an answer when I need one without keeping someone on call just in case, saving me a lot of time. Together, they let my team stay on infrastructure work and step in only when a decision is needed. Regarding UnderDefense's AI capabilities, I think the governance and security is the best there is, as the decisions that matter stay with my team and each finding is documented, allowing me to review afterwards how a conclusion was reached. That control and traceability is what I need from AI in a security role. The accuracy and reliability of UnderDefense's AI output is accurate and steady, as findings have matched what I saw when I checked them, and the pattern assessments are consistent, especially during large traffic events or spikes, which is when I depend on them most. When a case needs judgment, the reasoning is there so I can confirm it myself.
SS
CEO at Rexha Technologies
User interface needs refinement while providing robust security and cost management
Xops helps me with cloud finance management by allowing me to monitor my spending, and just a couple of months ago, I noticed that my AWS bill, which usually hovers around 50k monthly, spiked unexpectedly. I received an alert on the dashboard and via email about a sudden increase in usage, enabling me to rectify the actual problem and bring things back to normal. The best features of Xops, in my experience, include the FinOps component for checking unnecessary spending trends, the cloud security features, and the cybersecurity and workload security features that allow me to frequently check for vulnerabilities on images and websites. The cloud security feature of Xops stands out to me because it helps maintain compliance status by providing multiple compliance checks, including ISO and CIS benchmarks, and it is not limited to AWS, as it also includes Azure cloud scans and O365 cloud scans, allowing me to monitor security across various platforms. Other useful features of Xops include asset management tools and automation scripts, which help me check what assets I have across all regions, giving me a global view whenever I need it. Xops has positively impacted my organization by enabling me to save money and proactively detect issues, especially related to cloud spending, while also improving my routine security checks for any misconfigurations. While some metrics are difficult to quantify, I regularly run scans to catch security vulnerabilities that may arise due to changing user settings.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I depend heavily on the reports that I have from this tool."
"TotalCloud has been excellent in providing us with immediate access to all the products and features we need, such as CSPM, TruRisk Insights, and compliance reports, including CIS and HIPAA."
"I appreciate TotalCloud's real-time protection and remediation features. The remediation options include automated one-click remedies and custom changes that help manage vulnerabilities efficiently."
"If I had to say something positive about the product that brings me the biggest benefit, I would say it has accurate reports, gets new update CVEs, zero-day attack detection, and is easy to manage with its GUI."
"TruRisk Insights is the most important innovation they've released this year."
"Qualys TotalCloud fulfills all these needs."
"My experience with using TruRisk to mitigate noise from raw CVEs has been great."
"The scalability is good as well. I would rate it ten out of ten."
"UnderDefense Gen AI SOC flags behavior that breaks from an account's own baseline, lays out which signals triggered the alert and why it reads as different from normal activity, and helps our team decide within the same day whether we are seeing a legitimate big campaign push or a compromised login."
"The linking, the filtering, and the readable reasoning each help on their own, but together, they allow a small security team to handle the volume our platform produces without losing sight of the cases that matter."
"Every morning we look at a short list of cases that matter instead of a long list of raw alerts, and each case comes with the full picture, so we can decide in a few minutes whether it needs action."
"UnderDefense groups it into one alert with the caller, the endpoint, and the usual pattern, which allows us to contact the customer the same day with facts in hand."
"Routine signals are handled and documented, and only cases that need a human decision reach my team, allowing engineers to spend their time on infrastructure hardening instead of log digging."
"Xops helped us mitigate the frequent external attacks that we have been trying to curb for a long time now, and more importantly, it helps with an easy-to-understand dashboard where I can monitor the services in use, optimizations, and ultimately the costs."
"The automated compliance monitoring reduced our manual security audits by 60%, allowing our team to focus on strategic initiatives rather than repetitive checks."
"The AWS cost optimization features have been game-changing - particularly the automated detection of idle EC2 instances and unattached EBS volumes that were silently draining our budget."
"X-Ops has significantly improved our organization by streamlining cloud cost governance and enhancing the security posture across our AWS trading environment."
"Xops has positively impacted my organization by enabling me to save money and proactively detect issues, especially related to cloud spending, while also improving my routine security checks for any misconfigurations."
"The most valuable aspects of the solution include the Cloud FinOps Dashboards and the vulnerability scans."
 

Cons

"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."
"From a downside perspective, the UI is not user-friendly and feels dated compared to other tools like Prisma Cloud."
"Qualys TotalCloud has some features where reports have limitations for downloading."
"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."
"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."
"Their customer support needs improvement."
"The cost of Qualys TotalCloud is high and could be more competitive."
"The improvement needed in Qualys TotalCloud is mainly in the artificial intelligence automation agents, where we can customize and create what meets our needs, not necessarily having to use those provided in the tool."
"UnderDefense could improve in onboarding, which takes some dedicated time because the baseline for our high volume upload events needs to be set up first."
"While Xops delivers on core functionality, the platform could benefit from more mature AI models for anomaly detection."
"I do not have notes for improvements."
"I chose four out of five because I believe more UI enhancements and a cleaner UX navigation could elevate it to a perfect five."
 

Pricing and Cost Advice

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"The cost is high, but it meets our organizational needs."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."
Information not available
Information not available
report
Use our free recommendation engine to learn which Compliance Management solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Manufacturing Company
39%
Construction Company
13%
Security Firm
11%
Outsourcing Company
9%
Construction Company
33%
Comms Service Provider
10%
Manufacturing Company
9%
Healthcare Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise11
Large Enterprise39
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...
What needs improvement with Qualys TotalCloud?
I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...
What is your primary use case for UnderDefense?
Our main use case for UnderDefense Agentic AI SOC is to watch how accounts actually use our platform. Our product is ...
What is your experience regarding pricing and costs for UnderDefense?
The experience with pricing, setup cost, and licensing has been fair for what we get. Compared with building the same...
What needs improvement with UnderDefense?
UnderDefense could improve in onboarding, which takes some dedicated time because the baseline for our high volume up...
What is your experience regarding pricing and costs for Xops?
I recommend ensuring you fully understand the pricing tiers and the features included at each level. You should evalu...
What needs improvement with Xops?
I would like to see built-in anomaly detection for trading patterns using machine learning. It would also be helpful ...
What is your primary use case for Xops?
I use X-Ops to monitor and optimize AWS infrastructure costs for our trading workloads. It helps me ensure continuous...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
No data available
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

Information Not Available
Kyte, Betsson Grourp, Mammut, Accedian.
Information Not Available
Find out what your peers are saying about Wiz, SentinelOne, Vanta and others in Compliance Management. Updated: October 2026.
921,523 professionals have used our research since 2012.