No more typing reviews! Try our Samantha, our new voice AI agent.

Flow Security vs Varonis Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 15, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Vulnerability Management (11th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (8th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (6th)
Flow Security
Average Rating
9.0
Reviews Sentiment
7.7
Number of Reviews
1
Ranking in other categories
Database Security (19th), Data Security Posture Management (DSPM) (26th)
Varonis Platform
Average Rating
8.4
Reviews Sentiment
6.3
Number of Reviews
20
Ranking in other categories
Email Security (15th), Data Loss Prevention (DLP) (6th), User Entity Behavior Analytics (UEBA) (5th), Data Governance (5th), SaaS Security Posture Management (SSPM) (3rd), Data Security Posture Management (DSPM) (3rd), Compliance Management (7th), Ransomware Protection (7th), Identity Threat Detection and Response (ITDR) (6th), Insider Risk Management (1st), AI Security (6th)
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
reviewer2231631 - PeerSpot reviewer
Chief Information Security Officer at a computer software company with 51-200 employees
It gives us a risk report that helps us refine our process management by highlighting where we might be exposed
Flow's distinctive capability to analyze both data at rest and data in motion grants us the ability not only to get full visibility and classification of the data within our managed databases but also to visualize the data flows both within and beyond our environment. This enables us to achieve a comprehensive understanding of all our sensitive data, even as it traverses through applications, shadow databases, and external services such as third-party entities and SaaS applications. What we aspire to achieve with Flow is extended visibility into the external services themselves, which will allow us to see the data they contain.
TarunKumar11 - PeerSpot reviewer
Member Of Leadership Advisory Council at a tech company with 10,001+ employees
Data governance has strengthened and automation now reduces risk and manual compliance work
Varonis Platform offers key features including data discovery, data classification, data analysis, governance, user and entity behavior analysis, also known as UEBA, which helps in ransomware detection, insider threat detection, and compliance reporting. It does a lot of automation from a remediation standpoint, as well as investigation and forensics. The number one feature that makes the biggest difference for my clients is visibility into unstructured data; that is the most difficult for organizations to achieve. They do not have a good understanding of where sensitive data resides, who has access to this data, whether this access is appropriate, and how data is being used. Varonis Platform provides visibility, governance, threat detection, and automated remediation around data. Varonis Platform is a great data discovery platform that provides visibility into sensitive data estimates and how it is being used. Clients have been able to reduce excessive permissions, strengthen their compliance posture, detect insider threats, and ransomware activity, which would otherwise be difficult and manual. Varonis Platform is deployed in my clients' organizations in a combination of all types. Many clients use Varonis Platform in a largely SaaS-based model since it is a data security platform consumed in this way, and many organizations still operate hybrid environments. As far as Varonis Platform is in a position to get the data source and identify systems, it can discover and classify more secure data. Deployment in most of our clients is cloud-based, connecting to Microsoft 365, AWS, or other SaaS applications such as Salesforce. In other environments, it is a hybrid deployment with SaaS and on-premises, including file servers, NAS devices, and AD servers.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"TotalCloud has been excellent in providing us with immediate access to all the products and features we need, such as CSPM, TruRisk Insights, and compliance reports, including CIS and HIPAA."
"Qualys TotalCloud provides unified vulnerability and threat assessment for IaaS and SaaS and a single prioritized view of risk, which helps reduce my workload by not having to combine multiple sources."
"Qualys TotalCloud provides a single, prioritized view based on requirements such as identifying the most vulnerable assets and calculating the average time to remediate vulnerabilities."
"Qualys TotalCloud's most valuable feature is its ability to link clusters of assets, providing a clear model of deployments, vulnerabilities, and statuses."
"One of the features I appreciate is the ability to generate daily reports without relying on anyone else."
"Qualys TotalCloud has improved our security posture."
"I highly recommend Qualys TotalCloud to other users."
"TotalCloud offers a comprehensive suite of features, including EDR, XDR, and TrueRisk, providing a centralized platform for managing vulnerabilities and security risks."
"Before implementing Flow Security, we had no mechanism to alert us when third-party contractors were accessing sensitive data or moving it to locations with lower security. Now we know precisely where the data is stored and can assess the risk when someone wants to develop something. Flow Security lowers our risk of a data breach."
"The 24/7 support is the most valuable feature, and they have been able to answer support questions pretty quickly."
"There's also a 90-day policy where if a user is not using the warehouse, it will automatically delete that username."
"The example I used with the hospital gives a very clear picture of the ROI."
"The telemetry to capture everything and the reports are very easy to configure without having a developer degree."
"Varonis Platform is transparent and captures everything in the environment without impacting the performance. The tool helps us unify data feeds into a single reporting system."
"In my experience, the best features that Varonis Platform offers are data labeling, data classification, along with all the integrations and its easy-to-use platform."
"Varonis Platform has definitely reduced the risk of data breaches at many client sites and has definitely lowered manual effort; manual effort has decreased by seventy percent due to automating data classification and permission reviews."
"I also appreciate the reporting feature, which allows for the extraction of various reports based on specific needs. These reports can be used for audit purposes, such as tracking changes in file locations or deletions."
 

Cons

"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."
"The areas in the solution that have room for improvement include the UI/UX design, which should be improved, and they should integrate more artificial intelligence into the product."
"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."
"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."
"Some major banks and insurance companies require an on-premises solution for comprehensive vulnerability management, which TotalCloud does not offer."
"From a downside perspective, the UI is not user-friendly and feels dated compared to other tools like Prisma Cloud."
"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."
"It provides a good overview of our infrastructure, but I need more end-to-end visibility, and SaaS is one of the gaps."
"There is one thing that if I add something manually, I get so many alerts. That's the biggest bad thing."
"For unstructured data monitoring, it's one of the top ones, if not the top one, due to its usability."
"Varonis Platform could be improved because when I used it, we had a significant issue related to the large volume of data on that file share."
"The product is very complicated."
"The troubleshooting capabilities could be improved. It has so many interconnected components."
"I'd like to see automatic updates for this solution. Currently, it's a manual process to update all the keywords."
"It would be beneficial if the reporting in Varonis Platform could use PDFs instead of Excel for better graphs, as the dashboards are really good, and it would be nice to have simplified dashboards in PDF for business reporting purposes."
"While Varonis Platform is powerful, the initial data scanning and indexing can take significant time in large environments."
 

Pricing and Cost Advice

"TotalCloud's price is about right where I would expect it to be."
"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
Information not available
"You could do a subscription, where you pay yearly, or you could purchase it outright. The licensing cost is based on the number of users on the system that you are monitoring."
"I would rate the pricing an eight out of ten, with ten being the most expensive."
"Licensing is on an annual basis. Maintenance and renewal fees are separate. Varonis Datalert is quite expensive."
"The platform is expensive. I rate the pricing a nine out of ten."
"Varonis Platform wasn't certainly the cheapest solution."
"The pricing is good. It neither expensive nor cheap. It is average."
"It's expensive, kind of, really expensive."
report
Use our free recommendation engine to learn which Data Security Posture Management (DSPM) solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
18%
Financial Services Firm
14%
Construction Company
7%
Comms Service Provider
7%
No data available
Financial Services Firm
15%
Manufacturing Company
11%
Healthcare Company
7%
Insurance Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise29
No data available
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise15
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
Ask a question
Earn 20 points
What needs improvement with Varonis Platform?
Varonis Platform could be improved because when I used it, we had a significant issue related to the large volume of ...
What is your primary use case for Varonis Platform?
My main use case for Varonis Platform is to monitor access to sensitive data across file shares, Microsoft 365, and S...
What advice do you have for others considering Varonis Platform?
Varonis Platform receives a rating of seven out of ten. I chose seven out of ten because the user experience was easy...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
SlashNext Complete
 

Overview

 

Sample Customers

Information Not Available
Information Not Available
Nottingham Building Society
Find out what your peers are saying about Wiz, Palo Alto Networks, Varonis and others in Data Security Posture Management (DSPM). Updated: June 2026.
900,644 professionals have used our research since 2012.