No more typing reviews! Try our Samantha, our new voice AI agent.

Immuta vs Prisma Cloud by Palo Alto Networks comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 1, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
46
Ranking in other categories
Vulnerability Management (11th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (8th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
Immuta
Average Rating
7.6
Reviews Sentiment
7.6
Number of Reviews
5
Ranking in other categories
Data Governance (25th), Data Security Posture Management (DSPM) (15th), AI Data Analysis (25th)
Prisma Cloud by Palo Alto N...
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
114
Ranking in other categories
Web Application Firewall (WAF) (7th), Container Security (2nd), Cloud Security Posture Management (CSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (2nd), Data Security Posture Management (DSPM) (2nd)
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Dibyajyoti Rath - PeerSpot reviewer
Data Analyst at a consultancy with 10,001+ employees
Centralized access control has secured sensitive data and supports compliant self-service analytics
Immuta is very helpful, but it can be improved in a few areas. The initial setup and policy design can be complex and require a learning curve. The user interface could be more interactive, especially for non-technical users. Policy troubleshooting and debugging could be easier with better visibility into why access was allowed or denied. Performance optimization and deeper integration with more tools could make it even better. Additional improvements would strengthen Immuta further. The documentation and real-world examples would help teams onboard faster. More out-of-the-box policy templates could reduce setup time. Improved policy simulation and testing would help teams understand the impact of changes before applying them. Stronger alerting and monitoring features would help quickly identify access issues. Finally, more end-user training and simplified workflows would make it easier for business users to adopt.
reviewer2776578 - PeerSpot reviewer
Cyber Security Architect at a comms service provider with 10,001+ employees
Image scanning has supported consistent security practices during cloud deployment
On a scale of ten, we would say people are happy with Prisma Cloud by Palo Alto Networks for the part we use. People are okay with it. We probably would give an eight. We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view. We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts. People have other tools and in the end, we don't use the full capabilities of a product that we pay for. It's partially related to the difficulty to integrate Prisma Cloud by Palo Alto Networks runtime in our company's support process. We don't use the real-time monitoring part of Prisma Cloud by Palo Alto Networks. We don't know about the automated remediation feature of Prisma Cloud by Palo Alto Networks.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."
"Qualys TotalCloud is overall the best tool available in the market for scanning purposes."
"I would definitely recommend Qualys TotalCloud to other customers."
"Qualys TotalCloud has helped us view our risk structure, vulnerabilities, and security posture."
"Its excellent graphical interface makes the scanning process simple."
"The best features in Qualys TotalCloud include the total asset management of the cloud environment. It is very easy to export the report and see the vulnerabilities related to the cloud specifically."
"Qualys TotalCloud has positively impacted our organization by helping us save time and manage all assets and remediation, allowing us to achieve quarterly and half-yearly goals."
"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"
"What I appreciate the most is its user-friendliness."
"The tool's most valuable feature is restriction."
"Immuta has had a very positive impact on our organization, helping us strengthen data security by ensuring sensitive data is only accessible to the right users, simplifying compliance with clear audit trails and consistent policy enforcement, reducing manual access management to save time for data and security teams, and enabling safe self-service analytics so our team can access data faster while still meeting governance and regulatory requirements."
"All features available are good."
"Instead of manually tagging data, Immuta’s auto-discovery capability identifies sensitive information, such as country labels, gender information, and other personal data."
"Prisma was extremely comprehensive. It's easy to drill down to gather more information and keep going. It seemed like you could drill down forever to see what the vulnerability was linked to."
"Cloud security posture management is the preferred feature among other vendors."
"CSPM is the most valuable feature."
"I would rate Prisma Cloud by Palo Alto Networks ten out of ten."
"Prisma Cloud provides the needed visibility and control regardless of how complex and distributed the cloud environments become."
"What I appreciate about Prisma Cloud by Palo Alto Networks is the agentless feature, which means we do not have to deploy agents."
"Prisma Cloud has good integrations, provides the visibility and control we need, is far more reasonable for the customers cost-wise, and is a very good preventative tool for helping us identify misconfigurations, reduce false positives, and focus on the real risks in our cloud environment."
"The most valuable feature is that the rule set is managed and that it can be run on a regularly scheduled basis."
 

Cons

"An area for improvement would be to focus on risks related to AI, such as large language models and potential data leakage."
"One of the things that could be improved is the alerts. Qualys is a fantastic tool, especially with the TruRisk feature, but one challenge that most leaders face involves alert fatigue."
"The support is not up to the mark and seems to be overburdened."
"To be honest, I would move out from this tool because it does not give a full view of vulnerability."
"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."
"Their support could be improved."
"The main area needing improvement is integration. Although the team is strengthening TotalCloud, integration can be enhanced with SIEM, SOAR, ITSM, and other sources."
"Immuta is behind in updating upgrades and software releases."
"The implementation process with Immuta was quite challenging, primarily due to issues related to database handling and the syncing of user groups."
"Immuta is very helpful, but it can be improved in a few areas."
"There is room for improvement in enhancing the monitoring capabilities."
"We have had some challenges with their support when we were migrating to the cloud version. We we had some issues, and it took us several attempts to get a proper responses as part of that migration."
"The security automation capabilities are average."
"A better correlation between the multiple products Prisma Cloud contains would be crucial. It would reduce the time spent looking at reports and enable you to get all the actionable insights across products. I think that Palo Alto is working on it, but they need to work faster because it doesn't make sense to have all these products in a single pane of glass without any correlation between them."
"These tools have a set of signatures or rules that will alert you whenever something meets the criteria. In the future, they might include some machine learning or AI feature that allows you to ask questions about the context of the alert, and it will provide you answers based on the data that they have. Most vendors are doing it, and I believe they will do it in the future. The reporting bar could also use AI to add context based on the environment."
"In our testing, we have found the Check Point product CloudGuard Dome9 to be more user-friendly at this point. Palo Alto Prisma's interface was not as user-friendly."
"They could improve more features for the enterprise version of the solution."
"Prisma Cloud is very comprehensive, but there should be better support for the customization of the reports. If Palo Alto can have more customized reports available or give an option to the users to customize the reports, that would be great."
"We are encountering issues with the new permissions required for AWS integration with Prisma."
"The deployment and onboarding are plug-and-play, but somewhat hard to handle in terms of integration with external operations tools. The product design isn't up to the current standard. I would recommend having higher standards in terms of integration with other tools, especially operationalized tools."
 

Pricing and Cost Advice

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"Qualys TotalCloud is expensive."
"TotalCloud's price is about right where I would expect it to be."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
"The cost is high, but it meets our organizational needs."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"Immuta's pricing is expensive."
"We are encountering some resistance in the African market regarding the cost of Prisma Cloud."
"The pricing is competitive; for the most part, the security firms have similar prices."
"Prisma Cloud is more expensive than some other solutions, but when we consider all of its use cases, the cost averages out."
"The pricing is competitive. From what I have seen in the past, it is on par with the others."
"Prisma Cloud by Palo Alto Networks carries a higher cost, but its enhanced security measures justify the expense."
"It is an expensive tool. It is not cheap technology. It is a serious investment for any customer. Customers typically buy it together with services. In my experience, customers buying Prisma Cloud are prepared to pay for the implementation and the tool itself."
"The cost was not on the higher side. Overall, the cost gets recovered with its implementation."
"Prisma Cloud is quite scalable. In our current licensing model, we're able to heavily extend our cloud workload and onboard a lot of customers. It really helps, and it is on par with other solutions."
report
Use our free recommendation engine to learn which Data Security Posture Management (DSPM) solutions are best for your needs.
913,806 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
16%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Financial Services Firm
16%
Construction Company
11%
Manufacturing Company
10%
Computer Software Company
9%
Financial Services Firm
13%
Computer Software Company
8%
Manufacturing Company
8%
Outsourcing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise5
Large Enterprise34
No data available
By reviewers
Company SizeCount
Small Business37
Midsize Enterprise21
Large Enterprise58
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is regarding the cloud visibility that we were not having previously. Previous...
What needs improvement with Immuta?
Immuta is very helpful, but it can be improved in a few areas. The initial setup and policy design can be complex and...
What is your primary use case for Immuta?
My main use case for Immuta is data governance. In my project, which is a data governance project, I use Immuta as a ...
What advice do you have for others considering Immuta?
My advice for others considering Immuta would be to plan your policies carefully. Think through roles, data sensitivi...
What is your primary use case for Prisma Cloud by Palo Alto Networks?
Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.
What Cloud-Native Application Protection Platform do you recommend?
We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...
What do you think of Aqua Security vs Prisma Cloud?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto
 

Overview

 

Sample Customers

Information Not Available
Information Not Available
Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America
Find out what your peers are saying about Immuta vs. Prisma Cloud by Palo Alto Networks and other solutions. Updated: August 2026.
913,806 professionals have used our research since 2012.