


Find out in this report how the two Cloud Security Posture Management (CSPM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
We are able to scan all our assets with less human intervention and achieve overall effective outcomes.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
The solution provides a good ROI, especially for regular customers, offering discounts for three-year licenses.
I don't think the tool in itself is very capable of doing that, but we have XSOAR and other tool integrations done on the platform, so this can be accomplished.
On a scale from one to ten, I would rate customer support a ten.
Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA.
A more efficient solution would be to provide instant call options with engineers, comparable to features offered by other tools.
If I make it a high priority, they have resolved one query within 20 minutes.
If local Indian support cannot resolve an issue, global tech support aligns promptly within the agreed SLA.
Fast response times and knowledgeable staff who understand the intricacies of the system.
I see a lot of lack of knowledge and lack of training.
We never had major issues to report or request support.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
I would rate its scalability a ten out of ten.
The scalability of Qualys TotalCloud is excellent, and I would rate it as ten out of ten.
For stability, scalability, mean time to response, and potential incident investigation improvements, I would give it a nine or probably even a ten.
Onboarding endpoints and assets on Cortex Cloud by Palo Alto Networks is very easy.
The platform is able to auto-shut certain resources that are not in use through the agentless scan feature.
It has a lot of scanning mechanisms, which are agentless APIs, eBPF, and cloud agents, that are highly reliable.
It is a stable solution, which is why we chose it.
It offers 99.9 percent uptime.
My impression of Cloud Runtime Security in stopping attacks in real-time is that I have never had an issue where it has let something through, causing an outage or concerns to the customer.
However, now in Cortex Cloud, I have not seen any lag or buffer.
My evaluation of how stable and reliable Cortex Cloud by Palo Alto Networks is very positive.
Until version six or seven, it was perfect.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
If we find a critical or high vulnerability on an IP or server, the remediation steps should be communicated clearly.
Regarding the generative AI security tool, I know for sure it's Agentic.
The solution is quite premium in cost compared to alternatives such as Wiz.
There is not a clear MSP model compared to other vendors such as CrowdStrike.
VCF 9 will bring VCF Automation and VCF Operations, the new product line of VMware.
It operates for both of my products, however, as a product, it is complicated to integrate and automate with other products.
In our case, replacing the tool will give us better functionalities without increasing the cost compared to what we pay today for the competitor.
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
Qualys TotalCloud offers good pricing that is affordable and competitive with the market.
The solution is costly, with high-end capabilities suitable for enterprises.
Today, it is smart and easy to calculate the licenses.
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans.
This user-friendly platform provides a comprehensive inventory of all assets and allows for customized policy and control design.
AI/ML aids in anticipating remediation for misconfigurations and vulnerabilities, and automatic remediation can be easily configured.
Cortex Cloud by Palo Alto Networks has reduced the time spent on incident investigations, and if I had to estimate, I would say it has cut our investigation time in half.
This simplifies the management of shared responsibility among different people and entities, allowing you to use one single tool instead of having dozens of different tools to orchestrate and integrate.
We leverage VRO when the going gets tough. When something is not doable with the tools we have with VMware Aria Automation, we use the capabilities of VRO because it has many plugins for many things.
It helps us automate the workflow of creating many VMs and the TensorFlow key method.
We have strong regulations for maintaining compliance and mitigating risks with this product.
| Product | Mindshare (%) |
|---|---|
| Qualys TotalCloud | 2.1% |
| Cortex Cloud by Palo Alto Networks | 2.1% |
| VMware Aria Automation | 1.0% |
| Other | 94.8% |

| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 11 |
| Large Enterprise | 38 |
| Company Size | Count |
|---|---|
| Small Business | 7 |
| Midsize Enterprise | 1 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 33 |
| Midsize Enterprise | 24 |
| Large Enterprise | 131 |
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
Cortex Cloud by Palo Alto Networks enhances cloud security with features like AI/ML threat detection and automated remediation, ensuring real-time protection and efficient management across cloud environments.
Cortex Cloud by Palo Alto Networks offers comprehensive cloud security posture management and runtime protection. It reduces manual tasks and accelerates incident investigation through advanced threat detection and AI-driven anomaly detection. With integration to the MITRE ATT&CK framework, it boosts threat response while reducing incident resolution time. Although users find the UI complex and pricing high, its capabilities in securing AWS, Azure, and other environments, as well as its potential integration with CyberArk, emphasize its enterprise-ready design for cloud transformation across diverse industry sectors.
What are the key features of Cortex Cloud by Palo Alto Networks?Cortex Cloud by Palo Alto Networks is deployed across industries like telecom, BFSI, and manufacturing for robust cloud security. It's leveraged for detecting misconfigurations and vulnerabilities, aiding cloud transformation and compliance with standards such as GDPR and NIST. The integration across cloud infrastructures, including AWS and Azure, supports policy creation and threat management strategies for diverse enterprises.
VMware Aria Automation is known for its automation capabilities, integrating with VMware and third-party tools to enhance workflow efficiency, save time, and manage resources effectively.
VMware Aria Automation offers a diverse set of features including a self-service portal and a streamlined user-friendly interface, which make it ideal for organizations aiming to automate virtual machine provisioning. The platform supports extensive automation capabilities across multi-cloud environments, featuring flexible blueprint designs and comprehensive integration with platforms like AWS, Azure, and ServiceNow. Though improvements are desired in areas like logging, template management, and vCenter integration, its robust framework facilitates IT infrastructure services, disaster recovery, and development operations. It is specifically beneficial for orchestrating workflows, automating routine tasks, and managing workloads efficiently in private and hybrid cloud environments.
What are the most important features of VMware Aria Automation?VMware Aria Automation is implemented across industries for automating the provisioning of virtual machines and managing cloud environments. It is used in sectors requiring efficient server deployment, network configurations, and seamless integration with tools such as AWS and Azure. It aids in reducing manual efforts, supporting IT infrastructure services, and enhancing disaster recovery protocols.
We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.