No more typing reviews! Try our Samantha, our new voice AI agent.

Flow Security vs Imperva Data Security Fabric comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
41
Ranking in other categories
Vulnerability Management (10th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (7th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
Flow Security
Average Rating
9.0
Reviews Sentiment
7.7
Number of Reviews
1
Ranking in other categories
Database Security (19th), Data Security Posture Management (DSPM) (34th), Data Security Platforms (DSP) (13th)
Imperva Data Security Fabric
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
65
Ranking in other categories
Database Security (2nd), Data Security Posture Management (DSPM) (11th), Data Security Platforms (DSP) (4th)
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
reviewer2231631 - PeerSpot reviewer
Chief Information Security Officer at a computer software company with 51-200 employees
It gives us a risk report that helps us refine our process management by highlighting where we might be exposed
Flow's distinctive capability to analyze both data at rest and data in motion grants us the ability not only to get full visibility and classification of the data within our managed databases but also to visualize the data flows both within and beyond our environment. This enables us to achieve a comprehensive understanding of all our sensitive data, even as it traverses through applications, shadow databases, and external services such as third-party entities and SaaS applications. What we aspire to achieve with Flow is extended visibility into the external services themselves, which will allow us to see the data they contain.
reviewer1876449 - PeerSpot reviewer
BDM at a comms service provider with 51-200 employees
Has provided wide data coverage and supports flexible implementation for growing database environments
Imperva SecureSphere Database Security offers the most comprehensive coverage range of database types, which is a significant advantage. It has very flexible implementation modes and an understandable console. Even someone who is not a database administrator could work with it, understand the security events, and comprehend the data activity monitoring events.Data is the most important asset in any organization and the primary target of hackers. Imperva SecureSphere Database Security provides one of the best solutions to analyze data, maintain GDPR compliance, and help investigate any incidents. It is user-friendly and can start with a small scope. Unlike competitors such as IBM Guardium and Oracle, customers can start with a small scope and scale every year. This advantage allows them to invest less money initially while learning the solution. Year after year, they can add value scope and cover more databases in their organization with high quality. We have been working with Imperva SecureSphere Database Security for about 10 years. I started working with this project about five years ago.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"TotalCloud's best feature is the integration of cloud accounts. It helps with the risk and security posture management of our cloud infrastructure."
"By integrating TotalCloud, we have significantly reduced vulnerabilities in our deployment pipeline."
"Qualys TotalCloud provides unified vulnerability and threat assessment for IaaS and SaaS and a single prioritized view of risk, which helps reduce my workload by not having to combine multiple sources."
"TotalCloud provides the easiest and the best approach for cloud infrastructure management."
"Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."
"Qualys TotalCloud is an excellent platform, and the beauty of the platform is that we can get all the vulnerabilities, see all the reports in a single dashboard, view them segregated, and easily learn about critical, high, and medium findings with appropriately provided remediation steps."
"Its dashboards are brilliant. It provides in-depth insights."
"It is a cloud-native app that integrates with both IaaS and SaaS. It seamlessly integrates with other platforms."
"Before implementing Flow Security, we had no mechanism to alert us when third-party contractors were accessing sensitive data or moving it to locations with lower security. Now we know precisely where the data is stored and can assess the risk when someone wants to develop something. Flow Security lowers our risk of a data breach."
"This tool helped us mitigate audit risks by 100 percent."
"It allows us to run models against it and do reports against it without understanding the different database technologies."
"The company focuses on and has a passion for security."
"Ability to send event monitoring and administrative activities."
"It was well worth implementing Imperva SecureSphere and found the rate of productivity increased by using it."
"We have seen our security risk decreased due to customization and meeting all the security needs for every application."
"The discovery module provides good visibility."
"SecureSphere fulfills so many requirements for our clients."
 

Cons

"Qualys TotalCloud's increasing complexity, due to the development and deployment of multiple solutions, is making the GUI difficult to navigate."
"I think Qualys TotalCloud needs to improve its handling of zero-day vulnerabilities and supply chain management because modern ransomware attacks not only target prime critical infrastructures but also the supply chain system."
"Their support could be improved."
"The main area needing improvement is integration. Although the team is strengthening TotalCloud, integration can be enhanced with SIEM, SOAR, ITSM, and other sources."
"The vulnerability part is good, but the policy compliance module needs improvement because it involves a lot of manual work. Specifically, the remediation part of the controls requires enhancements."
"In TotalCloud, I would suggest improvements in policy checks to cater to various inventory types like VPCs, subnets, S3 buckets, or IAMs. There is a lack of data segregation according to criticality or inventory."
"To be honest, I would move out from this tool because it does not give a full view of vulnerability."
"It is already perfect, but they can bring some newer dashboards and customization options for the dashboard. It would be great to be able to include on-prem assets on the dashboard."
"It provides a good overview of our infrastructure, but I need more end-to-end visibility, and SaaS is one of the gaps."
"The product is under high development and the amount of bugs is bit disappointing."
"The solution could improve by having more integration."
"Performance can be slow under heavy loads, but this should be adjusted by scaling."
"I would like to see improvement in the integration part of the tool. This should be an easy process."
"Imperva needs to improve their cloud capabilities."
"Imperva SecureSphere Database Security could improve the database defense feature called camouflage. This feature was responsible for the data mask but now it does not work well and we need another solution. All our banks have teams that are regarded with care and they need to mask sensitive data in order to provide testing to developers."
"Reporting could be improved."
"Agent on z/OS does not have a limit for CPU usage like on other platforms. If you specify filter too wide, the agent would consume too much CPU so that could cause more cost for your mainframe."
 

Pricing and Cost Advice

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
Information not available
"There is an annual licensing fee for upgrading the device."
"Its pricing could be cheaper for the African countries or developing economies. The British pound is valued way more than the currency of most African countries. A better or cheaper pricing model for Nigerian and African customers would be better. It has a per-year subscription model. You pay exactly for what you need. That's all. You don't have to buy what you don't need."
"They have introduced new price models, which makes the product more affordable now."
"The product is expensive."
"I know it's not cheap."
"It is quite expensive. We wanted it in my former organization, but the price was very high. So, we couldn't purchase it. I moved to a different organization, and this organization has purchased it."
"The price of the solution is reasonable. The cost of the solution depends on the customer, they have the flex protect licensing which can vary in price."
"The pricing over-all depends on the entry level. For example, if support and maintenance are about $20,000 - $25,000, the initial cost can be five times more. It is less expensive for the company to maintain the client than to make the deployment."
report
Use our free recommendation engine to learn which Database Security solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
13%
Outsourcing Company
12%
Comms Service Provider
10%
Financial Services Firm
10%
No data available
Financial Services Firm
20%
Manufacturing Company
7%
Comms Service Provider
6%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise5
Large Enterprise30
No data available
By reviewers
Company SizeCount
Small Business28
Midsize Enterprise9
Large Enterprise32
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...
Ask a question
Earn 20 points
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
Imperva SecureSphere Database Security, jSonar, Imperva's Data Security Posture Management
 

Overview

 

Sample Customers

Information Not Available
Information Not Available
BlueCross BlueShield, eHarmony, EMF Broadcasting, GE Healthcare, Metro Bank, The Motley Fool, Siemens
Find out what your peers are saying about IBM, Imperva, Oracle and others in Database Security. Updated: July 2026.
908,800 professionals have used our research since 2012.