No more typing reviews! Try our Samantha, our new voice AI agent.

Aqua Cloud Security Platform vs Threat Stack Cloud Security Platform [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 16, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.3
Qualys TotalCloud enhances efficiency, reduces costs by 30-40%, and increases ROI by 10-20%, significantly saving time and resources.
Sentiment score
5.7
Aqua Cloud Security Platform boosts efficiency, reduces costs, enhances security, and improves remediation and collaboration for organizations.
Sentiment score
7.3
Threat Stack Cloud Security boosted compliance and revenue, reduced staffing needs, enhanced security, and expanded infrastructure dramatically.
It has saved about 90% of our time.
Senior Consultant at a consultancy with 10,001+ employees
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
Security Manager at a consultancy with 10,001+ employees
CallStream helps us integrate and automate tasks.
Senior Security Consultant at CyberNxt Solutions LLP
The impact can reduce remediation effort by 40% to 60%, avoiding production-level fixes which are costlier.
Security Practitioner at a tech vendor with 10,001+ employees
It is generally used for the DevSecOps pipeline to scan the entire SAST, DAST, or ISC, performing excellently in that area.
Lead Security Engineer at a tech services company with 1,001-5,000 employees
The ability to quickly go through and find out what needed to be done allowed us to quickly put reports together to present to the client.
Cloud Security Support at a tech vendor with 501-1,000 employees
 

Customer Service

Sentiment score
7.0
Qualys TotalCloud's customer support is praised for expertise and responsiveness but occasionally faces response delays and inefficiencies.
Sentiment score
6.6
Aqua Cloud Security Platform's support is praised for expertise and availability, with room for improvement in complex issue resolution speed.
Sentiment score
7.4
Threat Stack Cloud Security Platform's support is praised for responsiveness, precise solutions, and effective communication with technical representatives.
They are helpful, respond to my queries, and can answer any question.
Developer at a consultancy with 10,001+ employees
Qualys's tech support is highly responsive, providing multiple ways to interact with them.
Service Manager, Security Operations at CDA IT SOLUTIONS
Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA.
Works at a consultancy with 10,001+ employees
On a scale of one to ten, I would rate the customer support for Aqua Cloud Security Platform a ten out of ten.
Cloud Security Support at a tech vendor with 501-1,000 employees
The customer support for Aqua Cloud Security Platform is excellent, available 24/7, and provides better solutions for any issues raised through tickets.
Lead Security Engineer at a tech services company with 1,001-5,000 employees
The customer support has been responsive and knowledgeable.
Sr.Devops engineer at Scaler
 

Scalability Issues

Sentiment score
7.5
Qualys TotalCloud excels in scalability but may need skilled management, adaptable for varying environments and large-scale deployments.
Sentiment score
7.1
The Aqua Cloud Security Platform effectively scales workloads but may incur higher costs due to its licensing model.
Sentiment score
8.2
Threat Stack Cloud Security Platform is scalable, easy to deploy, and efficient across AWS accounts, with minor configuration concerns.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
CIO at a venture capital & private equity firm with 11-50 employees
Our organization currently uses it to manage over 1200 web applications.
Analyst, Information Security at Infosys
It is absolutely scalable, and I would rate its scalability as nine out of ten.
retired at a consultancy with 10,001+ employees
Aqua Cloud Security Platform has good scalability because it is a SaaS platform, so I do not need to think much about scalability.
Security Practitioner at a tech vendor with 10,001+ employees
Aqua Cloud Security Platform did not seem to have any issues with scaling.
Cloud Security Support at a tech vendor with 501-1,000 employees
Aqua Cloud Security Platform's scalability is good, providing better services compared to DevSecOps when compared to CrowdStrike and Orca.
Lead Security Engineer at a tech services company with 1,001-5,000 employees
 

Stability Issues

Sentiment score
8.3
Qualys TotalCloud is praised for stability, boasting 99.9% uptime with minimal downtime and quickly resolved minor bugs.
Sentiment score
7.8
Aqua Cloud Security Platform is praised for stability and reliability, with minor issues noted by a few users.
Sentiment score
7.5
Threat Stack Cloud Security Platform [EOL] is stable and efficient, with minor GUI and agent issues for some users.
Overall, the support provided has been excellent.
Analyst, Information Security at Infosys
It is a stable solution, which is why we chose it.
CIO at a venture capital & private equity firm with 11-50 employees
Continuous monitoring is crucial to ensure system stability and avoid vulnerabilities or threats.
Developer at a consultancy with 10,001+ employees
 

Room For Improvement

Users recommend enhancing compliance, UI, integration, and reporting, improving security features, and optimizing pricing and navigation for Qualys TotalCloud.
Aqua Cloud Security Platform requires UI improvements, streamlined onboarding, integration with CICD, better documentation, and flexible licensing for user satisfaction.
Threat Stack Cloud Security Platform needs UI improvements, better API alignment, and enhanced integrations, especially for serverless and container environments.
Ideally, the scanner should automatically detect and scan all subdomains, even if not explicitly defined, ensuring comprehensive vulnerability assessment.
Analyst, Information Security at Infosys
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Project Lead at Persistent Systems
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
Senior Information Security Engineer at a consultancy with 10,001+ employees
Risk prioritization in security graphs is a point where Aqua Cloud Security Platform is less mature than Wiz, which excels at identifying critical vulnerabilities as a single attack path.
Lead Security Engineer at a tech services company with 1,001-5,000 employees
For the licensing part and AI-driven prioritization, this needs improvement. While Aqua Cloud Security Platform prioritizes findings using CVSS and policy context, if we compare it with Wiz and Prisma Cloud, they are increasingly using AI-driven risk scoring that incorporates exploitability, identity exposure, internet reachability, and business context.
Lead Security Engineer at a tech services company with 1,001-5,000 employees
Alert noise and tuning are required because Aqua generates a large number of initial alerts that need tuning to reduce false positives.
Security Practitioner at a tech vendor with 10,001+ employees
 

Setup Cost

Qualys TotalCloud is costly but offers value and integration, ideal for enterprises despite higher pricing.
Aqua's pricing is moderate, workload-based, seen as fair versus competitors, with flexible licensing and excellent customer support.
Threat Stack Cloud Security Platform offers value with transparent pricing, ranging $15-$20 monthly, seen as competitively priced by users.
Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive.
Senior Manager at a financial services firm with 10,001+ employees
Pricing is managed by our finance team; however, Qualys TotalCloud offers cost-effective licensing flexibility.
IT Manager at a consultancy with 10,001+ employees
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
Vice President at Inspira Enterprise
Compared to other vendors, Aqua Cloud Security Platform's pricing is good or lesser.
Lead Security Engineer at a tech services company with 1,001-5,000 employees
The license and setup costs have been reasonable, though a challenge arises when deploying the entire application in our own cloud, as we must manage everything from scratch.
Sr.Devops engineer at Scaler
Overall, it is good. Not too high, not too low.
Lead Security Engineer at a tech services company with 1,001-5,000 employees
 

Valuable Features

Qualys TotalCloud enhances risk management with misconfiguration detection, TruRisk integration, continuous monitoring, automation, and seamless integration for IaaS and SaaS.
Aqua Cloud Security Platform provides centralized management, vulnerability visibility, and multi-cloud support for comprehensive cloud security and DevOps integration.
Threat Stack Cloud Security platform is esteemed for its configurability, integration, monitoring capabilities, and effective alert management.
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
Works at a consultancy with 10,001+ employees
It will help cybersecurity professionals monitor the cloud and find vulnerabilities.
Developer at a consultancy with 10,001+ employees
We are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs.
Senior Consultant at a consultancy with 10,001+ employees
Aqua provides end-to-end security across containers, Kubernetes, serverless, and cloud workloads starting from build, deployment, runtime, and compliance in one platform.
Security Practitioner at a tech vendor with 10,001+ employees
Aqua Cloud Security Platform positively impacted my organization by allowing deployment from code to cloud in the entire CI/CD pipeline, with excellent capabilities and recent AI application security that is useful in the DevSecOps platform.
Lead Security Engineer at a tech services company with 1,001-5,000 employees
The best feature of Aqua Cloud Security Platform is the Kubernetes security, which secures admission controllers, runtime policies, namespace protection, and RBAC and pod security.
Sr.Devops engineer at Scaler
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
41
Ranking in other categories
Vulnerability Management (10th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (7th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
Aqua Cloud Security Platform
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
22
Ranking in other categories
Cloud and Data Center Security (11th), Container Security (14th), Cloud Workload Protection Platforms (CWPP) (15th), Cloud-Native Application Protection Platforms (CNAPP) (13th), Software Supply Chain Security (7th), DevSecOps (9th)
Threat Stack Cloud Security...
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
Samir Paul - PeerSpot reviewer
Security Practitioner at a tech vendor with 10,001+ employees
Secures cloud workloads from build to runtime and has needed simpler setup and alert tuning
Regarding how Aqua Cloud Security Platform can be improved, the first area is the complex initial setup. Deployment and configuration can be complex, especially in large environments that require skilled resources. For Kubernetes environments, initial onboarding and policy setup takes time. Compared to Wiz onboarding, it is not very straightforward, as I have also worked with Wiz. The UI is powerful but not very simple for new users, as navigation and dashboard can be overwhelming. Alert noise and tuning are required because Aqua generates a large number of initial alerts that need tuning to reduce false positives. Additionally, pricing can be high depending on workload scale, especially for large Kubernetes and multi-cloud environments. For improvements to Aqua Cloud Security Platform, I think better integration with SOAR and XDR platforms, more AI-driven prioritization, and providing simpler out-of-the-box policies would be beneficial.
SC
Software Development Manager at Rent Dynamics
SecOps program for us, as a smaller company, is amazing; they know what to look for
They could give a few more insights into security groups and recommendations on how to be more effective. That's getting more into the AWS environment, specifically. I'm not sure if that's Threat Stack's plan or not, but I would like them to help us be efficient about how we're setting up security groups. They could recommend separation of VPCs and the like - really dig into our architecture. I haven't seen a whole lot of that and I think that's something that, right off the bat, could have made us smarter. Even as part of the SecOps Program, that could be helpful; a quick analysis. They're analyzing our whole infrastructure and saying, "You have one VPC and that doesn't make a lot of sense, that should be multiple VPCs and here's why." The architecture of the servers in whatever cloud-hosting provider you're on could be helpful. Other than that, they should continue to expand on their notifications and on what's a vulnerability. They do a great job of that and we want them to continue to do that. It would be cool, since the agent is already deployed and they know about the server, they know the IP address, and they know what vulnerability is there, for them to test the vulnerability and see if they can actually exploit it. Or, once we patch it, they could double-check that it can't be. I don't know how hard that would be to build. Thinking on it off the top off my head, it could be a little challenging but it could also be highly interesting. It would also be great if we could test a couple of other features like hammering a server with 100 login attempts and see what happens. Real test scenarios could be really helpful. That is probably more something close to what they do with the SOC 2 audit or the report. But more visualization of that, being able to test things out on our infrastructure to make sure we can or can't hit this box could be interesting.
report
Use our free recommendation engine to learn which Cloud Workload Protection Platforms (CWPP) solutions are best for your needs.
908,858 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
13%
Outsourcing Company
12%
Comms Service Provider
10%
Financial Services Firm
10%
Financial Services Firm
19%
Government
8%
Manufacturing Company
8%
Computer Software Company
7%
Construction Company
12%
Outsourcing Company
10%
Performing Arts
9%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise5
Large Enterprise30
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise15
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise5
Large Enterprise2
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...
What do you think of Aqua Security vs Prisma Cloud?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...
What is your experience regarding pricing and costs for Aqua Security?
Compared to other vendors, Aqua Cloud Security Platform's pricing is good or lesser. The pricing part is acceptable, ...
What needs improvement with Aqua Security?
I think Aqua Cloud Security Platform has a good, strong platform, but there are still other areas. For example, if we...
Ask a question
Earn 20 points
 

Also Known As

Qualys TotalCloud with FlexScan
Aqua Security Platform, CloudSploit, Argon
Threat Stack, CSP,
 

Overview

 

Sample Customers

Information Not Available
HPE Salesforce Telstra Ellie Mae Cathay Pacific HomeAway
StatusPage.io, Walkbase, Spanning, DNAnexus, Jobcase, Nextcapital, Smartling, Veracode, 6sense
Find out what your peers are saying about Microsoft, Wiz, SentinelOne and others in Cloud Workload Protection Platforms (CWPP). Updated: July 2026.
908,858 professionals have used our research since 2012.