No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point CloudGuard Cloud Intelligence and Threat Hunting vs Prisma Cloud by Palo Alto Networks comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 11, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
54
Ranking in other categories
Vulnerability Management (5th), Container Security (8th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (6th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
Check Point CloudGuard Clou...
Average Rating
9.0
Reviews Sentiment
7.3
Number of Reviews
3
Ranking in other categories
Cloud Detection and Response (CDR) (10th)
Prisma Cloud by Palo Alto N...
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
114
Ranking in other categories
Web Application Firewall (WAF) (11th), Container Security (3rd), Cloud Security Posture Management (CSPM) (4th), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Data Security Posture Management (DSPM) (5th)
 

Mindshare comparison

Cloud Detection and Response (CDR) Mindshare Distribution
ProductMindshare (%)
Check Point CloudGuard Cloud Intelligence and Threat Hunting1.6%
Wiz23.8%
Orca Security13.8%
Other60.8%
Cloud Detection and Response (CDR)
Cloud-Native Application Protection Platforms (CNAPP) Mindshare Distribution
ProductMindshare (%)
Prisma Cloud by Palo Alto Networks10.1%
Wiz12.5%
Microsoft Defender for Cloud6.5%
Other70.9%
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
YeAung - PeerSpot reviewer
Network Engineer at ATG Systems
Improved investigation efficiency and visibility while custom reporting and integration need enhancement
I would like to see more flexibility in creating custom and scheduled reports in Check Point CloudGuard Cloud Intelligence and Threat Hunting. For example, being able to generate a weekly threat activity summary to specify business unit or cloud account would make it easier to share insights with management and non-technical stakeholders. More native integration with SIEM and SOAR platforms like QRadar, ServiceNow, etc., would reduce manual effort. That way, incidents surfaced in CloudGuard could automatically flow into existing workflows without extra connectors. Adding a way to tag, annotate, or assign investigations inside the platform would make it easier for teams to collaborate without switching to another tool.
reviewer2776578 - PeerSpot reviewer
Cyber Security Architect at a comms service provider with 10,001+ employees
Image scanning has supported consistent security practices during cloud deployment
On a scale of ten, we would say people are happy with Prisma Cloud by Palo Alto Networks for the part we use. People are okay with it. We probably would give an eight. We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view. We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts. People have other tools and in the end, we don't use the full capabilities of a product that we pay for. It's partially related to the difficulty to integrate Prisma Cloud by Palo Alto Networks runtime in our company's support process. We don't use the real-time monitoring part of Prisma Cloud by Palo Alto Networks. We don't know about the automated remediation feature of Prisma Cloud by Palo Alto Networks.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Once you have your vulnerabilities fixed and your patches pushed out using Qualys TotalCloud, then you are able to eliminate threats and cyber risk."
"In my opinion, this is the best tool."
"With TotalCloud, we can scan through the API. If we are not able to deploy cloud agents on the machine, we can use the API."
"I would definitely recommend Qualys TotalCloud to other customers."
"The scalability is good as well. I would rate it ten out of ten."
"Multi-cloud visibility saves time and makes things easier, as we can also have comparability to see what configuration differences have been made from cloud to cloud."
"One of the most valuable features of Qualys TotalCloud is FlexScan, which is specifically for internet-facing VMs. We found this feature to be very useful. It was a key differentiator for us."
"My experience with using TruRisk to mitigate noise from raw CVEs has been great."
"Check Point CloudGuard Cloud Intelligence and Threat Hunting made our work much easier as it serves as a centralized platform for all my cloud environment and provides workload protection such as malware protection for my entire cloud environment."
"During testing, I consistently saw a 70 or 75% faster investigation and reduced analyst workload, which is a concrete way it can deliver our work."
"This solution helped me to improve and enhance our security posture."
"Integration is very easy. And because it supports security that spans multi- and hybrid-cloud environments, it's very easy to use."
"Prisma Cloud's comprehensive platform offers a range of features, including runtime security and vulnerability assessments, through its Prisma Cloud Compute component."
"Prisma Cloud is quite simple to use. The web GUI is powerful. Prisma Cloud scans the overall architecture of the AWS network to identify open ports and other vulnerabilities, then highlights them."
"One of the most valuable features is the compliance of RedLock, which we are using for any issues with security. It flags them and that's the primary objective of that feature."
"The most valuable features are the alerts and auto-remediation because it allows us a lot of flexibility to customize and do things the Palo Alto team never intended. We faced some challenges with certificates because we also have next-gen firewalls. We would like to equip all the traffic because there have been many cases in which the developers have done things by mistake. Deploying certificates on virtual machines can be complex in a development environment, but we managed to do that with Prisma Cloud."
"The two most valuable features are container security and the capability to discover workloads."
"If you can configure it well, Twistlock is a lot better in providing you real-time statistics than Aqua Security."
"The most valuable feature is the closed VPN connection, which provides better performance than traditional VPN boxes. For example, let's say a user in New York State normally connects in the East, but if they travel to the UK, they can connect to the same portal, which automatically redirects to any VPN gateway. We can control traffic based on Active Directory groups instead of the user's IP. That means a user in New York can access his application based on his user ID and AD group access when he travels to the UK or anywhere else."
 

Cons

"The support process is inefficient due to the excessive number of replies required when submitting tickets."
"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"Two areas for improvement in Qualys TotalCloud are the speed of the public cloud platform and vulnerability detection."
"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."
"Qualys's ticketing system can be confusing when assigning tasks to individuals, and support could be improved by offering instant call solutions with engineers in addition to ticket replies."
"The response part of the Cloud Detection and Response (CDR) module can be improved."
"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."
"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."
"The product can be improved by optimizing performance."
"In my testing, Check Point CloudGuard Cloud Intelligence and Threat Hunting's scalability is not easy; it is a very challenging experience for me."
"Malware protection for my entire cloud environment is an area where improvements are needed."
"For some custom policies, we need more features."
"The UI is the worst."
"The visibility on the SIEM needs to be streamlined so we can get the data without any issues."
"To see the full picture, at least when I last used it in April or May, you needed to switch between the modules. To see the cloud infrastructure and pipeline configuration, you need to switch to that module. To see the code security part, you need to switch to the Code Security module. It is the same story with CSPM. Two competitors of Prisma Cloud do it in a better way. They show the full view of a risk. Prisma Cloud unfortunately lacks in that area, but they are catching up."
"Support is an area that needs improvement."
"In terms of improvement, there are some small things like hardening and making sure the Linux resources are deployed well but that's more at an operational level."
"The security automation capabilities are average."
"They need to make the settings more flexible to fit our internal policies about data. We didn't want developers to see some data, but we wanted them to have access to the console because it was going to help them... It was a pain to have to set up the access to some languages and some data."
 

Pricing and Cost Advice

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"Qualys TotalCloud is expensive."
"TotalCloud's price is about right where I would expect it to be."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"Qualys TotalCloud offers cost-effective licensing flexibility."
Information not available
"Prisma Cloud licensing works on credits."
"I don't know a better way to do it, but their licensing is a little confusing. That's due to the breadth of different types of technologies they are trying to cover. The way you license depends on where you're securing. When they were Twistlock it was a simple licensing scheme and you could tell what you were doing. Now that they've changed that scheme with Palo Alto, it is quite confusing. It's very difficult to predict what your costs are going to be as you try to expand coverage."
"Prisma Cloud is a high-end enterprise solution, making it quite expensive."
"Prisma Cloud is remarkably expensive."
"Prisma Cloud by Palo Alto Networks is a highly expensive solution."
"Prisma Cloud's licensing system functions as expected with a solid licensing infrastructure."
"The pricing and licensing are expensive compared to the other offerings that we considered."
"If a competitor came along and said, "We'll give you half the price," that doesn't necessarily mean that's the right answer, at all. We wouldn't necessarily entertain it that way. Does it do what we need it to do? Does it work with the things that we want it to work with? That is the important part for us. Pricing wasn't the big consideration it might be in some organizations. We spend millions on public cloud. In that context, it would not make sense to worry about the small price differences that you get between the products."
report
Use our free recommendation engine to learn which Cloud Detection and Response (CDR) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
11%
Manufacturing Company
11%
Financial Services Firm
10%
No data available
Financial Services Firm
13%
Outsourcing Company
8%
Manufacturing Company
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise11
Large Enterprise38
No data available
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise21
Large Enterprise58
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...
What needs improvement with Qualys TotalCloud?
I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...
What needs improvement with Check Point CloudGuard Cloud Intelligence and Threat Hunting?
I would like to see more flexibility in creating custom and scheduled reports in Check Point CloudGuard Cloud Intelli...
What is your primary use case for Check Point CloudGuard Cloud Intelligence and Threat Hunting?
I will honestly say that we are just testing Check Point CloudGuard Cloud Intelligence and Threat Hunting in my compa...
What is your experience regarding pricing and costs for Check Point CloudGuard Cloud Intelligence and Threat Hunting?
The payment pricing is a business matter I discuss directly with the key account manager, and it's not something rela...
What is your primary use case for Prisma Cloud by Palo Alto Networks?
Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.
What Cloud-Native Application Protection Platform do you recommend?
We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...
What do you think of Aqua Security vs Prisma Cloud?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto
 

Overview

 

Sample Customers

Information Not Available
Information Not Available
Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America
Find out what your peers are saying about Wiz, Orca Security, Microsoft and others in Cloud Detection and Response (CDR). Updated: October 2026.
920,769 professionals have used our research since 2012.