No more typing reviews! Try our Samantha, our new voice AI agent.

Fortinet FortiDB [EOL] vs Qualys Exposure Management comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
54
Ranking in other categories
Vulnerability Management (5th), Container Security (8th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (6th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
Fortinet FortiDB [EOL]
Average Rating
8.2
Number of Reviews
7
Ranking in other categories
No ranking in other categories
Qualys Exposure Management
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
102
Ranking in other categories
IT Asset Management (5th), Vulnerability Management (2nd), Configuration Management Databases (4th), Container Security (11th), Risk-Based Vulnerability Management (1st)
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
VC
CEO & Technical Head Executive at ChellSoft Technologies
Stable with a good interface and excellent technical support
The solution overall is good. All of the features are useful and working well for us. The technical support provided is excellent. The solution is very good at preventing intrusions. You can definitely rely on this solution to cover your security. The pricing of the solution is fair. The interface of the solution is quite stable.
Ajay Paul - PeerSpot reviewer
System Engineer at a outsourcing company with 10,001+ employees
Vulnerability management has prioritized high‑risk patching and simplified bulk system reporting
The primary issue is with the reporting functionality. Even though we fix vulnerabilities, the reports do not reflect the changes immediately. Sometimes we need to manually run a script to scan the systems before Qualys Enterprise TruRisk Management will update the scan results. The main issue is the reporting delay, and sometimes the Qualys Enterprise TruRisk Management agent will not scan the system, which means we do not receive accurate reports in a timely manner. Additionally, there are many metrics for calculating vulnerabilities, such as the Qualys ID, severity scores, CVSS scores, and other metrics. The abundance of information can be confusing. These two aspects are the most significant negatives I have experienced with this tool.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best part I like is the on-demand scans."
"I would definitely recommend Qualys TotalCloud to other customers."
"Qualys TotalCloud is overall the best tool available in the market for scanning purposes."
"I would definitely recommend it because it is easy to handle any cloud resources."
"The most valuable feature is the consolidated information that it provides from various platforms."
"If I had to say something positive about the product that brings me the biggest benefit, I would say it has accurate reports, gets new update CVEs, zero-day attack detection, and is easy to manage with its GUI."
"Qualys TotalCloud provides unified vulnerability and threat assessment for IaaS and SaaS and a single prioritized view of risk, which helps reduce my workload by not having to combine multiple sources."
"If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."
"It is extremely stable, and can expand as per our needs due to its stability."
"We use it to protect files and to prevent users from browsing them while they are being used."
"It is a good solution for database monitoring."
"When you implement FortiDB in your environment, you get the benefit of three important features: VA, Auditing and Alerting."
"The solution is very good at preventing intrusions. You can definitely rely on this solution to cover your security."
"The solution overall is good, all of the features are useful and working well for us, the technical support provided is excellent, the solution is very good at preventing intrusions, you can definitely rely on this solution to cover your security, the pricing of the solution is fair, and the interface of the solution is quite stable."
"It is a very good solution, and every day the company is updating and developing its devices."
"Customer support for this solution is good."
"The most valuable features are vulnerability scanning, policy compliance scanning, and tablet for web application scanning."
"The most valuable feature is automation."
"The most valuable feature is the ability to run different capabilities with the same agent, and with only one agent, we can have EDR, vulnerability management, compliance and some basic SaaS security capabilities."
"I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even if tags aren't made."
"Qualys is a very good tool for companies, and the different tools this brand offers bring all the necessary tools for good development for these companies."
"I like the solution's web application security for scanning, the solution is flexible with good integration."
"The initial setup was good. We didn't have any problems with it."
"For a typical IT system, it is very good to go with this solution."
 

Cons

"I chose a rating of nine out of ten because there is a complex interface that sometimes overwhelms new engineers."
"To be honest, I would move out from this tool because it does not give a full view of vulnerability."
"The support process is inefficient due to the excessive number of replies required when submitting tickets."
"In my opinion, the combination of detection and protection features in Qualys TotalCloud cannot protect but can only detect."
"The downside is only in container security, but it has not been a long time since they introduced these models."
"Their support could be improved."
"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."
"From a downside perspective, the UI is not user-friendly and feels dated compared to other tools like Prisma Cloud."
"I would like better APIs and integration with other products, like Python and SQL."
"We had many issues with the performance and the appliance resource management."
"Some use case analyses could be improved."
"I'm an old-school guy. I really don't like web GUI interfaces."
"The pricing of this solution is a little bit on the high side and can be improved."
"I'm an old-school guy. I really don't like web GUI interfaces. They're always slow and laggy and their design is restricted, whereas a binary deployment for an admin tool is always faster, easier, more flexible. I would like that kind of functionality from Fortinet."
"We had some issues trying to fix some critical bugs, such as the SSL encryption."
"They need to improve the web filter to make it more user-friendly."
"I’m convinced it could be possible to do a simpler interface."
"Some of the older features could be polished instead of focusing on releasing new features."
"Qualys could be improved in its overall performance compared to other vulnerability management or scanning tools."
"Qualys VMDR is basically susceptible to false positives, and false negatives."
"I am not happy with the technical support because I had a very bad experience with them."
"Qualys should improve their customer experience. They need to improve the tech support experience and the turnaround time."
"If anything, I would like to see the user interface modernized a bit more."
"Second, the remedies provided by Qualys Enterprise TruRisk Management are sometimes not useful most of the time. In that case, we need to troubleshoot or find out the remedies by ourselves."
 

Pricing and Cost Advice

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"TotalCloud's price is about right where I would expect it to be."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"The cost is high, but it meets our organizational needs."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"It is not costly."
"In the licensing model, the licenses are a little bit expensive."
"It is not expensive."
"The cost needs to be reduced."
"It's relatively inexpensive in comparison to everything else that has the same functionality. If you're looking at SonicWall or if you're looking at WatchGuard, their prices are about a third higher with relatively the same functionality."
"An annual license for a single scanner costs around $3,000."
"Qualys VM is better suited for medium to large companies because the price can be too much for smaller customers."
"Qualys is cheaper and more affordable than other solutions."
"The solution is costly."
"The license is on a yearly basis."
"The pricing is very competitive."
"Usually every implementation is different and the quote is in function of number of assets."
"Qualys is a pay-as-you-go model, so there's flexibility to the pricing."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
11%
Manufacturing Company
11%
Financial Services Firm
10%
No data available
Financial Services Firm
13%
Outsourcing Company
9%
Comms Service Provider
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise11
Large Enterprise38
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise4
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise12
Large Enterprise75
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...
What needs improvement with Qualys TotalCloud?
I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...
Ask a question
Earn 20 points
What is your experience regarding pricing and costs for Qualys VMDR?
My experience with pricing, setup cost, and licensing shows that we can consider both time and money saved.
What needs improvement with Qualys VMDR?
I haven't explored Qualys VMDR's vulnerability lifecycle automation yet. One of my analysts mentioned that queries la...
What advice do you have for others considering Qualys VMDR?
I have some understanding about PeerSpot, and I have visited the website. PeerSpot is similar to TrustRadius. It take...
 

Also Known As

Qualys TotalCloud with FlexScan
FortiDB, FortiGuard Database Security
Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security
 

Overview

 

Sample Customers

Information Not Available
Chunghwa Telecom
Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx
Find out what your peers are saying about Wiz, Qualys, Tenable and others in Vulnerability Management. Updated: October 2026.
920,769 professionals have used our research since 2012.