No more typing reviews! Try our Samantha, our new voice AI agent.

Aqua Cloud Security Platform vs Google Cloud Security Command Center comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
6th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Vulnerability Management (11th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (8th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (1st)
Aqua Cloud Security Platform
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
18th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
20
Ranking in other categories
Cloud and Data Center Security (14th), Container Security (20th), Cloud Workload Protection Platforms (CWPP) (19th), Software Supply Chain Security (11th), DevSecOps (13th)
Google Cloud Security Comma...
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
20th
Average Rating
7.6
Reviews Sentiment
5.0
Number of Reviews
4
Ranking in other categories
Cloud Security Posture Management (CSPM) (24th)
 

Mindshare comparison

As of June 2026, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of Qualys TotalCloud is 2.0%, up from 1.4% compared to the previous year. The mindshare of Aqua Cloud Security Platform is 3.0%, down from 4.0% compared to the previous year. The mindshare of Google Cloud Security Command Center is 1.8%, down from 2.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud-Native Application Protection Platforms (CNAPP) Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud2.0%
Aqua Cloud Security Platform3.0%
Google Cloud Security Command Center1.8%
Other93.2%
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
Samir Paul - PeerSpot reviewer
Security Practitioner at a tech vendor with 10,001+ employees
Secures cloud workloads from build to runtime and has needed simpler setup and alert tuning
Regarding how Aqua Cloud Security Platform can be improved, the first area is the complex initial setup. Deployment and configuration can be complex, especially in large environments that require skilled resources. For Kubernetes environments, initial onboarding and policy setup takes time. Compared to Wiz onboarding, it is not very straightforward, as I have also worked with Wiz. The UI is powerful but not very simple for new users, as navigation and dashboard can be overwhelming. Alert noise and tuning are required because Aqua generates a large number of initial alerts that need tuning to reduce false positives. Additionally, pricing can be high depending on workload scale, especially for large Kubernetes and multi-cloud environments. For improvements to Aqua Cloud Security Platform, I think better integration with SOAR and XDR platforms, more AI-driven prioritization, and providing simpler out-of-the-box policies would be beneficial.
RaviUpadhyay - PeerSpot reviewer
Security Consultant at HCLSoftware
Security posture has improved with automated insights but reporting and integrations still need work
The best feature of Google Cloud Security Command Center is that it is flexible to integrate with several third-party tools or services, and it is more customized. For example, it is already giving a misconfiguration and the vulnerability, and if somebody wants to do some in-depth analysis for patterns such as metrics, they can export the continuous log on the spot with that tool. From an integration point of view, I would say it is more customized with different tools. The asset discovery feature of Google Cloud Security Command Center enhances my security strategy because, nowadays, data sensitivity and data privacy are very important, and using some DLP utility, I can classify and set up rules to generate reports based on the classification in their asset discovery. This can also include data classification on Google storage buckets, and overall, Google Cloud Security Command Center has that information, which can be used for various analyses or alerts. It is very important for compliance assessment because every business is global and connects with different geographical locations, meaning each country has its own regulatory systems and internal compliance policies. Google Cloud Security Command Center has the feature to set up security postures based on which resources or assets inside Google Cloud can be marked as compliant or non-compliant, giving a risk score for immediate reporting to higher management or CISO, making it very helpful in terms of security, risk, and compliance.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I would recommend Qualys TotalCloud to other users because it is cost-efficient and has a good return on investment."
"The most valuable feature of Qualys TotalCloud is the visibility it provides."
"Qualys TotalCloud has improved our security posture."
"I would definitely recommend Qualys TotalCloud to other users."
"Vulnerability and threat detection and assessment of the criticality of the vulnerabilities exposed are most valuable."
"Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."
"I would definitely recommend it because it is easy to handle any cloud resources."
"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."
"Customers find it invaluable to have the ability to check for vulnerabilities in an image before deployment, similar to a sandbox environment."
"Support is very helpful."
"Valuable features include the ability to connect it to our Docker Hub where our images are stored, good integration with Slack, and the connection to the CV, to easily see which CVs are on each image."
"Aqua Cloud Security Platform positively impacted my organization by allowing deployment from code to cloud in the entire CI/CD pipeline, with excellent capabilities and recent AI application security that is useful in the DevSecOps platform."
"The container security element of this product has been very valuable to our organization."
"The main reasons we chose Aqua Security were the visibility it provided into the container platform and the great customer service."
"The DTA, which stands for Dynamic Threat Analysis, allows me to analyze Docker images in a sandbox environment before deployment, helping me anticipate risks."
"Aqua Security helps us to check the vulnerability of image assurance and check for malware."
"Most people use the threat detection dashboard."
"It simplifies compliance efforts."
"I would definitely recommend Google Cloud Security Command Center to others."
"The compliance reporting feature helped us maintain a baseline of compliance within the information security policies."
 

Cons

"The price is very expensive, actually."
"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."
"To improve the user experience, reporting could be simplified for better comprehension by end users and project managers, facilitating issue resolution."
"A feature improvement could be the inclusion of Windows OS support for container security, as it is currently only supported for Linux."
"Two areas for improvement in Qualys TotalCloud are the speed of the public cloud platform and vulnerability detection."
"Qualys TotalCloud's increasing complexity, due to the development and deployment of multiple solutions, is making the GUI difficult to navigate."
"Their support could be improved."
"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."
"Aqua Cloud Security Platform could improve by streamlining the onboarding process and initial policy tuning to reduce the feeling of exhaustion or fatigue."
"The solution could improve user-friendliness."
"Regarding how Aqua Cloud Security Platform can be improved, the first area is the complex initial setup. Deployment and configuration can be complex, especially in large environments that require skilled resources."
"Sometimes I got stressed with the UI."
"The integrations on CICD could be improved. If Aqua had more plugins or container images to integrate and automate more easily on CICD, it would be better."
"I would like Aqua Security to look into is the development of a web security portal."
"Aqua Security lacks a lot in reporting."
"Aqua Security could provide more open documentation so that their learning resources can be more easily accessed and searched through online. Right now, a lot of the documentation is closed and not available to the public."
"Visibility can be improved along with automation."
"The AI capabilities have been heavily promoted, but I haven't seen a significant impact."
"There is definitely room for improvement in Google Cloud Security Command Center. While the functionality is very native, compared to third-party tools that offer a variety of features for easy integrations and custom KPIs, Google Cloud Security Command Center lacks some of these functionalities, requiring complex workarounds for custom reporting, and given that customers often use hybrid environments, having a broader perspective is necessary for integration."
 

Pricing and Cost Advice

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"Qualys TotalCloud is expensive."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"It comes at a reasonable cost."
"Aqua Security is not cheap, and it's not very expensive, such as Splunk, they are in the middle."
"They were reasonable with their pricing. They were pretty down-to-earth about the way they pitched their product and the way they tried to close the deal. They were one of the rare companies that approached the whole valuation in a way that made sense for our company, for our needs, and for their own requirements as well... They will accommodate your needs if they are able to understand them and they're stated clearly."
"The pricing of this solution could be improved."
"Dealing with licensing costs isn't my responsibility, but I know that the licenses don't depend on the number of users, but instead are priced according to your workload."
"Initially, it used to be relatively expensive, starting at around four or five hundred dollars."
report
Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
18%
Financial Services Firm
14%
Construction Company
7%
Comms Service Provider
7%
Financial Services Firm
21%
Government
9%
Computer Software Company
8%
Manufacturing Company
8%
Financial Services Firm
14%
Computer Software Company
13%
Comms Service Provider
7%
Hospitality Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise29
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise3
Large Enterprise13
No data available
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
What do you think of Aqua Security vs Prisma Cloud?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...
What is your experience regarding pricing and costs for Aqua Security?
I am not directly involved in the pricing part, but while implementing Aqua Cloud Security Platform, I have seen that...
What needs improvement with Aqua Security?
Regarding how Aqua Cloud Security Platform can be improved, the first area is the complex initial setup. Deployment a...
What is your primary use case for Google Cloud Security Command Center?
I am primarily working with Google Cloud Security Command Center, which is their CSPM, and also with the next-generat...
What advice do you have for others considering Google Cloud Security Command Center?
I rate Google Cloud Security Command Center a seven and a half out of ten. While it is a ten from a security perspect...
 

Also Known As

Qualys TotalCloud with FlexScan
Aqua Security Platform, CloudSploit, Argon
No data available
 

Overview

 

Sample Customers

Information Not Available
HPE Salesforce Telstra Ellie Mae Cathay Pacific HomeAway
Information Not Available
Find out what your peers are saying about Aqua Cloud Security Platform vs. Google Cloud Security Command Center and other solutions. Updated: April 2026.
900,644 professionals have used our research since 2012.