No more typing reviews! Try our Samantha, our new voice AI agent.

Brinqa vs Snyk comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 11, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
11th
Ranking in Cloud Security Posture Management (CSPM)
8th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Container Security (11th), Cloud Workload Protection Platforms (CWPP) (8th), SaaS Security Posture Management (SSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (6th)
Brinqa
Ranking in Vulnerability Management
61st
Ranking in Cloud Security Posture Management (CSPM)
53rd
Average Rating
7.0
Reviews Sentiment
6.8
Number of Reviews
1
Ranking in other categories
Attack Surface Management (ASM) (49th), Risk-Based Vulnerability Management (19th)
Snyk
Ranking in Vulnerability Management
20th
Ranking in Cloud Security Posture Management (CSPM)
18th
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
51
Ranking in other categories
Application Performance Monitoring (APM) and Observability (21st), Application Security Tools (7th), Static Application Security Testing (SAST) (6th), GRC (5th), Cloud Management (13th), Container Security (7th), Software Composition Analysis (SCA) (1st), Software Development Analytics (2nd), DevSecOps (3rd), Application Security Posture Management (ASPM) (2nd), AI Security (11th)
 

Mindshare comparison

As of June 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.0%, up from 0.9% compared to the previous year. The mindshare of Brinqa is 0.6%, up from 0.4% compared to the previous year. The mindshare of Snyk is 2.1%, down from 3.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.0%
Snyk2.1%
Brinqa0.6%
Other96.3%
Vulnerability Management
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
RB
Cybersecurity Director at RB Consultancy
Allows us to configure the risk algorithm to suit our specific needs
I would give the easiness of the initial setup a seven out of ten. It can be a bit complex. Some connections are straightforward, but some take a long time. Deploying Brinqa took time, as it was done in phases. Initially, it took about six months before we started getting valuable data from it. Then, it expanded from there. The deployment began with a product demo and contract negotiation. We connected some data sources to Brinqa's cloud service, which was straightforward. We used the default risk ranking algorithm but faced issues with the dashboards, so we customized them to fit our organization's needs over a few years. We depended a lot on Brinqa for the deployment. We had some internal resources, but they lacked the needed skills, so it took time to train our two-man team. Initially, it required one person for maintenance, and they spent most of their time on it.
Abhishek-Goyal - PeerSpot reviewer
Software Engineer at a computer software company with 11-50 employees
Improves security posture by actively reducing critical vulnerabilities and guiding remediation
Snyk's main features include open-source vulnerability scanning, code security, container security, infrastructure as code security, risk-based prioritization, development-first integration, continuous monitoring and alerting, automation, and remediation. The best features I appreciate are the vulnerability checking, vulnerability scanning, and code security capabilities, as Snyk scans all open-source dependencies for known vulnerabilities and helps with license compliance for open-source components. Snyk integrates into IDEs, allowing issues to be caught as they appear in the code dynamically and prioritizes risk while providing remediation advice. Snyk provides actionable remediation advice on where vulnerabilities can exist and where code security is compromised, automatically scanning everything and providing timely alerts. Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients. Snyk has helped reduce vulnerabilities significantly. Initially, the repository had 17 to 31 critical and high vulnerabilities, but Snyk has helped manage them down to just five vulnerabilities, which are now lower and not high or critical.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"While automatic inventory detection upon connection is a helpful feature, a truly valuable capability would be assessing an environment's security posture against Azure and CIS best practices."
"Qualys TotalCloud has significantly reduced our workload in terms of managing risks, helping us to be more efficient and save substantial resources."
"Qualys TotalCloud has helped us view our risk structure, vulnerabilities, and security posture."
"In my opinion, this is the best tool."
"TotalCloud's best feature is the integration of cloud accounts. It helps with the risk and security posture management of our cloud infrastructure."
"Qualys TotalCloud provides unified vulnerability and threat assessment for IaaS and SaaS and a single prioritized view of risk, which helps reduce my workload by not having to combine multiple sources."
"If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."
"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."
"The most valuable features of Brinqa are its data integration capabilities."
"There are many valuable features, for example the way the scanning feature works and the integration is cool because I can integrate it and I don't need to wait until the CACD, I can plug it in to our local ID and there I can do the scanning, that is the part I like best."
"Fugue provides core capabilities that enable visualization, discovery, and compliance automation."
"From this perspective, Snyk looks like the most promising solution."
"The best feature of Snyk is the integration with our ticketing system, which is Jira."
"Snyk performs software composition analysis (SCA) similar to other expensive tools."
"The solution is very easy to install, provides clear information that is easy to follow, and we get good feedback regarding code practices and how to fix security issues."
"The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities."
"They evolved their maturity because they could find the vulnerabilities before the pipeline runs."
 

Cons

"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."
"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."
"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."
"Qualys's ticketing system can be confusing when assigning tasks to individuals, and support could be improved by offering instant call solutions with engineers in addition to ticket replies."
"Although TotalCloud is a helpful tool, some of its advanced features are still under development."
"The support is not up to the mark and seems to be overburdened."
"The support process is inefficient due to the excessive number of replies required when submitting tickets."
"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."
"Brinqa could improve in terms of the speed of their service and resource provision."
"We had some issues integrating into our pipeline, however, they were resolved."
"We tried to integrate it into our software development environment but it went really badly. It took a lot of time and prevented the developers from using the IDE. Eventually, we didn't use it in the development area... I would like to see better integrations to help the developers get along better with the tool. And the plugin for the IDE is not so good. This is something we would like to have..."
"Snyk's API and UI features could work better in terms of speed."
"The reporting mechanism of Snyk could improve. The reporting mechanism is available only on the higher level of license."
"All such tools should definitely improve the signatures in their database. Snyk is pretty new to the industry."
"The reporting mechanism of Snyk could improve. The reporting mechanism is available only on the higher level of license. Adjusting the policy of the current setup of recording this report is something that can improve. For instance, if you have a certain license, you receive a rating, and the rating of this license remains the same for any use case. No matter if you are using it internally or using it externally, you cannot make the adjustment to your use case. It will always alert as a risky license. The areas of licenses in the reporting and adjustments can be improve"
"Snyk can be improved on the reporting aspect regarding the traceability of SCA."
"We've also had technical issues with blocking newly introduced vulnerabilities in PRs and that was creating a lot of extra work for developers in trying to close and reopen the PR to get rid of some areas. We ended up having to disable that feature altogether because it wasn't really working for us and it was actually slowing down developer velocity."
 

Pricing and Cost Advice

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
Information not available
"The pricing is reasonable."
"Pricing-wise, it is not expensive as compared to other tools. If you have a couple of licenses, you can scan a certain number of projects. It just needs to be attached to them."
"I didn't think the price was that great, but it wasn't that bad, either. I'd rate their pricing as average in the market."
"Despite Snyk's coverage, scalability, reliability, and stability, it is available at a very competitive price."
"You can get a good deal with Snyk for pricing. It's a little expensive, but it is worth it."
"For what Snyk offers, it has the best cost-benefit I have ever seen because you're buying the license per user."
"It's good value. That's the primary thing. It's not cheap-cheap, but it's good value."
"Cost-wise, it's similar to Veracode, but I don't know the exact cost."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
18%
Financial Services Firm
14%
Construction Company
7%
Comms Service Provider
7%
Financial Services Firm
14%
Retailer
13%
Construction Company
9%
Computer Software Company
8%
Financial Services Firm
13%
Manufacturing Company
11%
Computer Software Company
10%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise29
No data available
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise10
Large Enterprise23
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
Ask a question
Earn 20 points
How does Snyk compare with SonarQube?
Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to...
What needs improvement with Snyk?
There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false posi...
What is your primary use case for Snyk?
I use Snyk ( /products/snyk-reviews ) in the DevOps pipeline to identify vulnerabilities before deploying the applica...
 

Comparisons

 

Also Known As

Qualys TotalCloud with FlexScan
No data available
Fugue, Snyk AppRisk
 

Overview

 

Sample Customers

Information Not Available
Depository Trust and Clearing Corporation
StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief
Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: June 2026.
900,644 professionals have used our research since 2012.