No more typing reviews! Try our Samantha, our new voice AI agent.

BigID Next vs Immuta comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
41
Ranking in other categories
Vulnerability Management (10th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (7th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
BigID Next
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
15
Ranking in other categories
Data Loss Prevention (DLP) (11th), Data Governance (8th), Data Privacy Management Software (1st), Data Security Posture Management (DSPM) (5th), AI Data Analysis (7th), Data Security Platforms (DSP) (1st)
Immuta
Average Rating
7.6
Reviews Sentiment
7.6
Number of Reviews
5
Ranking in other categories
Data Governance (25th), Data Security Posture Management (DSPM) (15th), AI Data Analysis (25th)
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
Aniruddha Nath - PeerSpot reviewer
Senior Security Consultant at a consultancy with 10,001+ employees
Data discovery has transformed compliance workflows and automation now speeds up requests and remediation
The best feature that BigID offers is data discovery and classification, which is the most powerful engine. It allows connecting to many different data sources, ranging from cloud to on-premises to structured to unstructured data. If there is no connector available, you can build your own classifiers as well. Regarding the custom classifier option, you can build custom classifiers using regular expressions, and I have done that if you know how to create regular expressions. Custom connectors are something you create to connect to a database where the connector is not available. BigID has positively impacted my organization as it's a very powerful tool, especially with the increasing regulatory compliances for different countries such as GDPR, CCPA, and India's recent DPDPA act. Having these tools in place greatly helps organizations avoid any penal charges for not being compliant with the regulatory compliances. For example, regarding compliance or reduced risks for my clients, the DSAR process I was talking about allows organizations to respond quickly to user data deletion requests under GDPR law, which traditionally has a 30-day or 60-day timeline. In larger organizations, when the number of requests is high, it becomes tedious. However, using DSAR automation with BigID, it's almost instantaneous; instead of 30 days, you can respond in just one day to what users have requested.
Dibyajyoti Rath - PeerSpot reviewer
Data Analyst at a consultancy with 10,001+ employees
Centralized access control has secured sensitive data and supports compliant self-service analytics
Immuta is very helpful, but it can be improved in a few areas. The initial setup and policy design can be complex and require a learning curve. The user interface could be more interactive, especially for non-technical users. Policy troubleshooting and debugging could be easier with better visibility into why access was allowed or denied. Performance optimization and deeper integration with more tools could make it even better. Additional improvements would strengthen Immuta further. The documentation and real-world examples would help teams onboard faster. More out-of-the-box policy templates could reduce setup time. Improved policy simulation and testing would help teams understand the impact of changes before applying them. Stronger alerting and monitoring features would help quickly identify access issues. Finally, more end-user training and simplified workflows would make it easier for business users to adopt.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"While automatic inventory detection upon connection is a helpful feature, a truly valuable capability would be assessing an environment's security posture against Azure and CIS best practices."
"I highly recommend Qualys TotalCloud to other users."
"One of the features I appreciate is the ability to generate daily reports without relying on anyone else."
"The vulnerability management feature is the one I like the most because it provides a clear picture of all vulnerabilities."
"Vulnerability and threat detection and assessment of the criticality of the vulnerabilities exposed are most valuable."
"Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."
"The scalability is good as well. I would rate it ten out of ten."
"The dashboards are particularly valuable as they offer a comprehensive view of the environment, highlighting any misconfigurations."
"I like BigID's in-depth discovery and scanning capabilities, especially for unstructured data. This feature is a standout compared to competitors. The tool's data classification capabilities are impressive. It offers custom classifiers and a blend of regular exploration and artificial intelligence, making it a next-generation solution. This enhances data security, and its security posture management is straightforward and user-friendly."
"My experience with BigID has been very positive and memorable, as BigID is simple, straightforward, and reliable when it comes to data discovery and data scanning exercises."
"BigID has one of the best technical support teams."
"The best feature that BigID offers is data discovery and classification, which is the most powerful engine, allowing connection to many different data sources ranging from cloud to on-premises and from structured to unstructured data, with the ability to build your own classifiers if no connector is available."
"The data classification offered by the tool can help companies improve their security strategy"
"The tool's most valuable feature is correlation. Using BigID's data classification capabilities has strengthened our data security. It lets me classify and connect data, which helps me manage data at various classification levels."
"The most valuable feature of BigID is its large number of classifiers, which allow us to scan for specific data such as SSN numbers."
"BigID's scanning feature is its most valuable component."
"What I appreciate the most is its user-friendliness."
"Instead of manually tagging data, Immuta’s auto-discovery capability identifies sensitive information, such as country labels, gender information, and other personal data."
"The tool's most valuable feature is restriction."
"All features available are good."
"Immuta has had a very positive impact on our organization, helping us strengthen data security by ensuring sensitive data is only accessible to the right users, simplifying compliance with clear audit trails and consistent policy enforcement, reducing manual access management to save time for data and security teams, and enabling safe self-service analytics so our team can access data faster while still meeting governance and regulatory requirements."
 

Cons

"The support process is inefficient due to the excessive number of replies required when submitting tickets."
"Regarding technical support from Qualys, they respond, but the response time can be too long. Sometimes we need to wait weeks for solutions to simple questions."
"Some major banks and insurance companies require an on-premises solution for comprehensive vulnerability management, which TotalCloud does not offer."
"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."
"It is already perfect, but they can bring some newer dashboards and customization options for the dashboard. It would be great to be able to include on-prem assets on the dashboard."
"Qualys TotalCloud has the potential to improve by integrating a hybrid platform for comprehensive management of both on-premises and cloud infrastructures."
"I sometimes have difficulty detecting or uninstalling certain versions of applications, which I have to do manually."
"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"In terms of what could be improved, when you're looking in a BigID file, you cannot really get the whole file. You have to export it to download it to another platform that allows you to completely view it, or run a program. That was one of the things that was really a disappointing point for me. Not to be able to view everything. There's a lot more data, but you can't get it all at once."
"One concern I have with BigID is regarding certain scans, like the multi-scan. The issue is that we can stop and retrieve these scans, but once they start, they go through an enumeration process."
"The challenge we encountered was with data connection across multiple databases. We struggled with configuring the data connection successfully. However, with the assistance of dynamic teams, we resolved this issue."
"One area where BigID can be improved is the UI, which has a lot of bugs."
"More classifications about different states are needed"
"Improvement could be made in data consent management and data privacy impact assessment."
"I want them to focus on data mapping, assessment, automation workflow, and privacy incident management. The privacy tools have not been widely used, and they have not invested much in privacy code privacy tools."
"Some users find catalog navigation challenging due to the lack of a search-by-column feature, which makes it difficult to locate specific data quickly."
"Immuta is very helpful, but it can be improved in a few areas."
"We have had some challenges with their support when we were migrating to the cloud version. We we had some issues, and it took us several attempts to get a proper responses as part of that migration."
"The implementation process with Immuta was quite challenging, primarily due to issues related to database handling and the syncing of user groups."
"There is room for improvement in enhancing the monitoring capabilities."
"Immuta is behind in updating upgrades and software releases."
 

Pricing and Cost Advice

"TotalCloud's price is about right where I would expect it to be."
"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"I think that BigID's pricing is very reasonable."
"The solution is expensive."
"The pricing depends. If you have thousands of data sources to connect and manage, and you struggled with an MDM package in the past, you'll find BigID valuable and even cheap. But if you're a small business, it's probably not the right tool for you."
"The solution is not licensed per user but rather based on capacity. For instance, organizations with large amounts of data, such as 50 GB or more, are the ones that typically qualify for BigID."
"The product is expensive, but so are all competitor tools"
"Immuta's pricing is expensive."
report
Use our free recommendation engine to learn which Data Governance solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
13%
Outsourcing Company
12%
Comms Service Provider
10%
Financial Services Firm
10%
Financial Services Firm
18%
Manufacturing Company
10%
Insurance Company
8%
Comms Service Provider
6%
Financial Services Firm
18%
Construction Company
11%
Manufacturing Company
10%
Computer Software Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise5
Large Enterprise30
By reviewers
Company SizeCount
Small Business5
Large Enterprise11
No data available
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...
What needs improvement with BigID?
One improvement I would suggest is addressing the intermittent failures of BigID scans, as there are times when some ...
What is your primary use case for BigID?
BigID's main use case is connecting to various data sources to perform the data discovery process, classify the data ...
What advice do you have for others considering BigID?
I have covered information regarding data scanning, data classification, and the DSAR module, as these are the parts ...
What needs improvement with Immuta?
Immuta is very helpful, but it can be improved in a few areas. The initial setup and policy design can be complex and...
What is your primary use case for Immuta?
My main use case for Immuta is data governance. In my project, which is a data governance project, I use Immuta as a ...
What advice do you have for others considering Immuta?
My advice for others considering Immuta would be to plan your policies carefully. Think through roles, data sensitivi...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
No data available
 

Overview

 

Sample Customers

Information Not Available
Home Depot, Grant Thornton LLP, Cimpress, Fidelity Investments
Information Not Available
Find out what your peers are saying about BigID Next vs. Immuta and other solutions. Updated: June 2026.
908,800 professionals have used our research since 2012.