No more typing reviews! Try our Samantha, our new voice AI agent.

Aqua Cloud Security Platform vs Google Cloud Security Command Center comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
6th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
41
Ranking in other categories
Vulnerability Management (10th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (7th), SaaS Security Posture Management (SSPM) (2nd)
Aqua Cloud Security Platform
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
13th
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
22
Ranking in other categories
Cloud and Data Center Security (11th), Container Security (14th), Cloud Workload Protection Platforms (CWPP) (15th), Software Supply Chain Security (7th), DevSecOps (9th)
Google Cloud Security Comma...
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
20th
Average Rating
7.6
Reviews Sentiment
5.0
Number of Reviews
4
Ranking in other categories
Cloud Security Posture Management (CSPM) (26th)
 

Mindshare comparison

As of August 2026, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of Qualys TotalCloud is 2.2%, up from 1.5% compared to the previous year. The mindshare of Aqua Cloud Security Platform is 3.0%, down from 3.6% compared to the previous year. The mindshare of Google Cloud Security Command Center is 1.6%, down from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud-Native Application Protection Platforms (CNAPP) Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud2.2%
Aqua Cloud Security Platform3.0%
Google Cloud Security Command Center1.6%
Other93.2%
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
Samir Paul - PeerSpot reviewer
Security Practitioner at a tech vendor with 10,001+ employees
Secures cloud workloads from build to runtime and has needed simpler setup and alert tuning
Regarding how Aqua Cloud Security Platform can be improved, the first area is the complex initial setup. Deployment and configuration can be complex, especially in large environments that require skilled resources. For Kubernetes environments, initial onboarding and policy setup takes time. Compared to Wiz onboarding, it is not very straightforward, as I have also worked with Wiz. The UI is powerful but not very simple for new users, as navigation and dashboard can be overwhelming. Alert noise and tuning are required because Aqua generates a large number of initial alerts that need tuning to reduce false positives. Additionally, pricing can be high depending on workload scale, especially for large Kubernetes and multi-cloud environments. For improvements to Aqua Cloud Security Platform, I think better integration with SOAR and XDR platforms, more AI-driven prioritization, and providing simpler out-of-the-box policies would be beneficial.
RaviUpadhyay - PeerSpot reviewer
Security Consultant at HCLSoftware
Security posture has improved with automated insights but reporting and integrations still need work
The best feature of Google Cloud Security Command Center is that it is flexible to integrate with several third-party tools or services, and it is more customized. For example, it is already giving a misconfiguration and the vulnerability, and if somebody wants to do some in-depth analysis for patterns such as metrics, they can export the continuous log on the spot with that tool. From an integration point of view, I would say it is more customized with different tools. The asset discovery feature of Google Cloud Security Command Center enhances my security strategy because, nowadays, data sensitivity and data privacy are very important, and using some DLP utility, I can classify and set up rules to generate reports based on the classification in their asset discovery. This can also include data classification on Google storage buckets, and overall, Google Cloud Security Command Center has that information, which can be used for various analyses or alerts. It is very important for compliance assessment because every business is global and connects with different geographical locations, meaning each country has its own regulatory systems and internal compliance policies. Google Cloud Security Command Center has the feature to set up security postures based on which resources or assets inside Google Cloud can be marked as compliant or non-compliant, giving a risk score for immediate reporting to higher management or CISO, making it very helpful in terms of security, risk, and compliance.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best part I like is the on-demand scans."
"I appreciate TotalCloud's real-time protection and remediation features. The remediation options include automated one-click remedies and custom changes that help manage vulnerabilities efficiently."
"We were able to realize its benefits within 24 to 48 hours."
"Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution."
"The scalability is good as well. I would rate it ten out of ten."
"Qualys TotalCloud has significantly improved our organization by automating our reporting processes, reducing the time spent on report creation from two hours to less than fifteen to twenty minutes."
"The agent and agentless scanning in TotalCloud, particularly the FlexScan method, is incredibly valuable. With traditional scanning approaches, we had to give IP ranges and whitelist IPs. All that is now simplified. FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans."
"TruRisk Insights is the most important innovation they've released this year."
"The main reasons we chose Aqua Security were the visibility it provided into the container platform and the great customer service."
"It is a very good product from an environmental perspective."
"My advice would be to go for it."
"We use Aqua Security for the container security features."
"The solution was very user-friendly."
"From the ROI perspective, Aqua Cloud Security Platform provides value from day one in terms of identifying the posture of the environment, identifying vulnerabilities, and faster remediation."
"Aqua Security allowed us to gain visibility into the vulnerabilities that were present in the container images, that were being rolled out, the amount of risk that we were introducing to the platform, and provided us a look into the container environment by introducing access control mechanisms. In addition, when it came to runtime-level policies, we could restrict container access to resources in our environment, such as network-level or other application-level access."
"The DTA, which stands for Dynamic Threat Analysis, allows me to analyze Docker images in a sandbox environment before deployment, helping me anticipate risks."
"Most people use the threat detection dashboard."
"I would definitely recommend Google Cloud Security Command Center to others."
"It simplifies compliance efforts."
"The compliance reporting feature helped us maintain a baseline of compliance within the information security policies."
 

Cons

"The areas in the solution that have room for improvement include the UI/UX design, which should be improved, and they should integrate more artificial intelligence into the product."
"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."
"The response part of the Cloud Detection and Response (CDR) module can be improved."
"Overall, we are satisfied with it. However, the response part of the Cloud Detection and Response (CDR) module can be improved. It is not yet in place according to requirements; it is not completely available even though the module has been released."
"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."
"Qualys TotalCloud has the potential to improve by integrating a hybrid platform for comprehensive management of both on-premises and cloud infrastructures."
"Some major banks and insurance companies require an on-premises solution for comprehensive vulnerability management, which TotalCloud does not offer."
"TotalCloud could improve its scanning of niche devices like Wi-Fi dongles and USB modems because they are often untested. It covers everything else, like laptops, mobile devices, and Bluetooth IoT devices. They can improve on the small IoT devices because hackers and testers use these."
"When it comes to the accuracy and reliability of Aqua Cloud Security Platform's AI capabilities, more work on the AI security side is required."
"The UI needs some improvement as it is somewhat overwhelming, and the licensing can be expensive at scale."
"In the next release, Aqua Security should add the ability to automatically send reports to customers."
"The integrations on CICD could be improved. If Aqua had more plugins or container images to integrate and automate more easily on CICD, it would be better."
"Aqua is a bit expensive so you have to really justify going for it or not."
"I would like Aqua Security to look into is the development of a web security portal."
"When I used it on the client that I had a few years ago, we ran into some issues where it would not load properly."
"They want to release improvements to their product to work with other servers because now there are more focused on the Kubernetes environment. They need to improve the normal servers. I would like to have more options."
"Visibility can be improved along with automation."
"The AI capabilities have been heavily promoted, but I haven't seen a significant impact."
"There is definitely room for improvement in Google Cloud Security Command Center. While the functionality is very native, compared to third-party tools that offer a variety of features for easy integrations and custom KPIs, Google Cloud Security Command Center lacks some of these functionalities, requiring complex workarounds for custom reporting, and given that customers often use hybrid environments, having a broader perspective is necessary for integration."
 

Pricing and Cost Advice

"TotalCloud's price is about right where I would expect it to be."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"The cost is high, but it meets our organizational needs."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Qualys TotalCloud is expensive."
"The pricing of this solution could be improved."
"They were reasonable with their pricing. They were pretty down-to-earth about the way they pitched their product and the way they tried to close the deal. They were one of the rare companies that approached the whole valuation in a way that made sense for our company, for our needs, and for their own requirements as well... They will accommodate your needs if they are able to understand them and they're stated clearly."
"It comes at a reasonable cost."
"Aqua Security is not cheap, and it's not very expensive, such as Splunk, they are in the middle."
"Dealing with licensing costs isn't my responsibility, but I know that the licenses don't depend on the number of users, but instead are priced according to your workload."
"Initially, it used to be relatively expensive, starting at around four or five hundred dollars."
report
Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
13%
Outsourcing Company
12%
Comms Service Provider
10%
Financial Services Firm
10%
Financial Services Firm
20%
Government
8%
Manufacturing Company
8%
Computer Software Company
7%
Financial Services Firm
14%
Computer Software Company
13%
Comms Service Provider
6%
Hospitality Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise5
Large Enterprise30
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise15
No data available
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...
What do you think of Aqua Security vs Prisma Cloud?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...
What is your experience regarding pricing and costs for Aqua Security?
Compared to other vendors, Aqua Cloud Security Platform's pricing is good or lesser. The pricing part is acceptable, ...
What needs improvement with Aqua Security?
I think Aqua Cloud Security Platform has a good, strong platform, but there are still other areas. For example, if we...
What is your primary use case for Google Cloud Security Command Center?
I am primarily working with Google Cloud Security Command Center, which is their CSPM, and also with the next-generat...
What advice do you have for others considering Google Cloud Security Command Center?
I rate Google Cloud Security Command Center a seven and a half out of ten. While it is a ten from a security perspect...
What needs improvement with Google Cloud Security Command Center?
There is definitely room for improvement in Google Cloud Security Command Center. While the functionality is very nat...
 

Also Known As

Qualys TotalCloud with FlexScan
Aqua Security Platform, CloudSploit, Argon
No data available
 

Overview

 

Sample Customers

Information Not Available
HPE Salesforce Telstra Ellie Mae Cathay Pacific HomeAway
Information Not Available
Find out what your peers are saying about Aqua Cloud Security Platform vs. Google Cloud Security Command Center and other solutions. Updated: June 2026.
908,800 professionals have used our research since 2012.