No more typing reviews! Try our Samantha, our new voice AI agent.

HackerOne vs SecureWorks Taegis VDR comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
5th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
54
Ranking in other categories
Container Security (8th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (6th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
HackerOne
Ranking in Vulnerability Management
34th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
11
Ranking in other categories
Application Security Tools (20th), Bug Bounty Platforms (2nd), Penetration Testing Services (2nd), Attack Surface Management (ASM) (6th), AI Observability (20th)
SecureWorks Taegis VDR
Ranking in Vulnerability Management
47th
Average Rating
8.0
Reviews Sentiment
7.6
Number of Reviews
4
Ranking in other categories
Risk-Based Vulnerability Management (15th)
 

Mindshare comparison

As of November 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.2%, up from 1.0% compared to the previous year. The mindshare of HackerOne is 0.9%, up from 0.4% compared to the previous year. The mindshare of SecureWorks Taegis VDR is 0.5%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.2%
HackerOne0.9%
SecureWorks Taegis VDR0.5%
Other97.4%
Vulnerability Management
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
NitishKumar - PeerSpot reviewer
Consultant at a manufacturing company with 10,001+ employees
Crowdsourced security has strengthened our bug discovery and improved vulnerability response
HackerOne is already doing well, although I believe implementing stricter SLAs for the time to first response and time to bounty would help prevent researchers' burnout, especially regarding duplicate submissions. I suggest systematic bug rewards because currently, if a researcher finds one bug in multiple places, they often only get paid for one. Improving the handling of systemic vulnerabilities would encourage deeper research. Additionally, improving multi-currency and crypto payout options would help make the platform more accessible globally.
Jayaprakash Bojanapu - PeerSpot reviewer
Head of IT at Gokaldas Images (USA), Inc.
Automated risk assessment has improved data security but still needs finer file-level controls
In my opinion, SecureWorks Taegis VDR can be improved by adding some other important data security features. Since we are using a couple of backup devices through EDR only, my suggestion would be that additional security features are required so that we can smoothen the data flow. Data protection is a very significant concern for us, and we need security features that work at each file or directory level. I would like to see security features such as user level security, end user level security, group-wise security, and super user-wise security in the future. Time stamping is also very important for us. In the future, I would like to see additional features such as time stamping and file level stamping, as these are more important for us.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The scalability is good as well. I would rate it ten out of ten."
"If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."
"The most valuable feature is the consolidated information that it provides from various platforms."
"I found the initial setup user-friendly."
"Qualys TotalCloud's most valuable feature is its agent versatility."
"Qualys TotalCloud has positively impacted my organization by providing visibility into the environment."
"I would definitely recommend Qualys TotalCloud to other users."
"The best part I like is the on-demand scans."
"HackerOne is a very good platform with the trust of different companies including Shopify, PayPal, and Uber, which creates a stronger brand perception and competitive market positioning."
"Apart from getting all the bug bounty opportunities, we also get the chance to practice in a safe environment, like a demo setup. These features are great for beginners who want to explore bug bounties in the future."
"One of the biggest strengths is combining a large community of ethical hackers with a structured platform that helps organizations discover, manage, and remediate security vulnerabilities efficiently."
"HackerOne has been the right fit for our current situation from both a functionality and cost-effectiveness perspective."
"Using HackerOne has definitely improved the security of my web application, identifying security gaps I didn't realize as a web developer."
"The most valuable feature of HackerOne is its variety of programs. These programs provide depth into various areas, such as mobile, API, and websites."
"I notice a return on investment through the group of researchers at HackerOne identifying vulnerabilities, saving us money, time, and manpower, with the efficiency of HackerOne allowing them to accomplish in three to four hours what would take two red teamers a whole day."
"HackerOne is larger than WebCloud and has a better reputation than BugCloud, which results in a smoother process."
"SecureWorks Taegis VDR's best features include unified detection and response, as it pulls in alerts and logs from all my different tools such as EDR, SIEM, firewall, cloud services, and Windows machines, collecting everything into one clean dashboard where I can view all these items and eliminate the need to hunt through ten dashboards to piece a threat together."
"I chose SecureWorks Taegis VDR because I trust SecureWorks, having worked with McAfee, Symantec, Trend Micro, Kaspersky, Carbon Black, Cylance, CrowdStrike, Palo Alto Cortex XDR, and more, and I would say SecureWorks Taegis VDR is outstanding among all the other vendors in terms of functionality, ease of access, and UI friendliness."
"It is a one-stop solution for different needs with separate APIs. The product offers different solutions for different companies."
"I would assess the impact of SecureWorks Taegis VDR on my organization's threat detection efficiency as very positive because we have a couple of devices."
 

Cons

"To improve the user experience, reporting could be simplified for better comprehension by end users and project managers, facilitating issue resolution."
"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."
"TotalCloud could improve the classification of vulnerabilities. Specifically, it could enhance the categorization of what aspects fall under patches resolved by OS or software updates and what pertains to configuration adjustments."
"Qualys TotalCloud's increasing complexity, due to the development and deployment of multiple solutions, is making the GUI difficult to navigate."
"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."
"In my opinion, the combination of detection and protection features in Qualys TotalCloud cannot protect but can only detect."
"Overall, we are satisfied with it. However, the response part of the Cloud Detection and Response (CDR) module can be improved. It is not yet in place according to requirements; it is not completely available even though the module has been released."
"Regarding improvements to Qualys TotalCloud, I suggest that user navigation can be enhanced because initially, many users found it complicated and had trouble understanding the platform due to information being spread across multiple tabs."
"One issue I've experienced is traffic. Many people try to participate when an opportunity with a bounty of around 1,000-15,000 dollars comes up. In this case, the first person to report the vulnerability gets the bounty. If a second person reports the same vulnerability, they are marked as duplicated instead of receiving some recognition. The second person also invested time finding the issue, so I think this can be improved."
"Triage response time is a significant issue. The response time and triage speed are not fast enough, and this is causing many people to leave HackerOne."
"HackerOne provides a "HackBot" which helps identify other relevant reports, including duplicates, public reports from other companies, etc. However, the functionality is limited and it would be nice to integrate it with broader services offered like auto responses, triggers, etc."
"Customer support can improve, as there are instances of ghosting that need to be addressed."
"The ability to view the conversation between the triagers and the programs will be really good."
"Sometimes new users don't receive invites just because they are new, despite potentially being very skilled hackers, so I feel new users should get more chances and opportunities."
"Everything has become slower on HackerOne. I have noticed that older researchers receive all the private invites while newer ones receive fewer."
"Everything has become slower on HackerOne."
"There is always room for improvement in SecureWorks Taegis VDR, especially regarding user interface and navigation, as the platform is powerful but the UI can feel complex for new users."
"SecureWorks Taegis VDR is very stable, though there is scope for improvement."
"Regarding technical support, I would say it is not that much up to the mark. That is one of the biggest concerns for us."
"I would like to improve SecureWorks Taegis VDR by enhancing the dashboard to provide a holistic view with granular data."
 

Pricing and Cost Advice

"The cost is high, but it meets our organizational needs."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"Qualys TotalCloud is expensive."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"TotalCloud's price is about right where I would expect it to be."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"The solution is free."
"The tool is open-source and free for bug bounty hunters."
Information not available
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
11%
Manufacturing Company
11%
Financial Services Firm
10%
Comms Service Provider
13%
Manufacturing Company
11%
Financial Services Firm
10%
Outsourcing Company
8%
Comms Service Provider
18%
Construction Company
14%
Manufacturing Company
11%
Wholesaler/Distributor
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise11
Large Enterprise38
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise1
Large Enterprise7
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...
What needs improvement with Qualys TotalCloud?
I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...
What is your experience regarding pricing and costs for HackerOne?
I'm not very sure about pricing, setup costs, and licensing, as those are managed by our management team.
What needs improvement with HackerOne?
HackerOne can be improved, and the insights can be a little better. I chose a nine for my rating because it has very ...
What is your primary use case for HackerOne?
My main use case for HackerOne is bug bounties and getting paid through that platform. Companies like Fastify and Ora...
What is your experience regarding pricing and costs for SecureWorks Taegis VDR?
I think the pricing of SecureWorks Taegis VDR is also higher compared to other options. The pricing is also more.
What is your primary use case for SecureWorks Taegis VDR?
The features I find most valuable in SecureWorks Taegis VDR include data security, which is the main concern for us. ...
What advice do you have for others considering SecureWorks Taegis VDR?
I have used SecureWorks Taegis VDR's automated risk assessment. The metrics I use to measure the impact of SecureWork...
 

Also Known As

Qualys TotalCloud with FlexScan
HackerOne Assets, HackerOne Pentesting Services, HackerOne Security Assessments, HackerOne Vulnerability Management
No data available
 

Overview

 

Sample Customers

Information Not Available
Anthropic, Crypto.com, General Motors, GitHub, Goldman Sachs, Uber, and the U.S. Department of Defense
Information Not Available
Find out what your peers are saying about HackerOne vs. SecureWorks Taegis VDR and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.