No more typing reviews! Try our Samantha, our new voice AI agent.

ORION Security vs Wazuh comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
54
Ranking in other categories
Vulnerability Management (5th), Container Security (8th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (6th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
ORION Security
Average Rating
9.0
Reviews Sentiment
7.5
Number of Reviews
2
Ranking in other categories
Data Security Posture Management (DSPM) (21st), Insider Risk Management (13th)
Wazuh
Average Rating
7.4
Reviews Sentiment
5.9
Number of Reviews
51
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (5th), Extended Detection and Response (XDR) (5th)
 

Mindshare comparison

Data Security Posture Management (DSPM) Mindshare Distribution
ProductMindshare (%)
ORION Security0.2%
Wiz11.9%
Prisma Cloud by Palo Alto Networks10.4%
Other77.5%
Data Security Posture Management (DSPM)
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Wazuh3.8%
Splunk Enterprise Security8.2%
IBM Security QRadar5.6%
Other82.4%
Security Information and Event Management (SIEM)
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Dvir Dahan - PeerSpot reviewer
Information Security Specialist at Tufin
Data protection has become automated and AI now simplifies managing sensitive information
By using ORION Security, we experience false positives, and we are working with the team every week to fine-tune the system. They listen to us for every feature request and everything we need. We work very closely to mitigate all false positives, but they still occur at approximately 10 to 20 percent. In terms of areas for improvement, false positives continue to occur, and the data categorization and sensitivity label level of alerts could be improved. We receive some alerts marked as critical and high, but they are not critical or high for our organization. This aspect can improve, including the alert severity levels.
Sudarson Prabhu - PeerSpot reviewer
Security Consultant at Payatu
File integrity monitoring has strengthened our data protection and supports compliance needs
I expected one thing from the dashboard in Wazuh. In ManageEngine, when you use ManageEngine, you can assign a unique ID to all employees. Then with the unique ID, if you search any unique ID in the dashboard itself, you can get the unique ID everywhere, including where the laptop has been logged in, when the logout happened, and what actions have been done for that unique ID. I expected the same in Wazuh, but whenever we want to check any monitoring activities for a specific person, we need to search for the endpoint and then get the endpoint details from our Active Directory or wherever we have the endpoint name stored in our resources, and then search for the endpoint to see the history for that specific endpoint only. This made a simple thing a bit complex. If we had a correlation of logs where I could just search one unique ID and then the unique ID pulls every system in a time-wise manner, that would be a great improvement I would suggest.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I would definitely recommend Qualys TotalCloud to other customers."
"Qualys TotalCloud helps you not just to identify misconfigurations, but you can actually also fix issues."
"Qualys TotalCloud has great accuracy and reliability, as it is a very complete program with tools that help experts understand the vulnerabilities of today."
"Its dashboards are brilliant. It provides in-depth insights."
"The best part I like is the on-demand scans."
"We were able to realize its benefits within 24 to 48 hours."
"Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."
"Qualys TotalCloud has positively impacted my organization by providing visibility into the environment."
"With Orion, setup was fast, the insights are actually useful, and we are not drowning in false alerts."
"ORION Security helps me manage sensitive data when it moves across endpoints, browsers, SaaS, email, cloud tools, and AI, and we control almost everything and see almost everything, including emails, the browser, the AI agent, external storage, or network shares."
"I like the cloud-native infrastructure and that it's free. We didn't have to pay anything, and it has the capabilities of many premium solutions in the market. We could integrate all of our services and infrastructure in the cloud with Wazuh. From an integration point of view, Wazuh is pretty good. I had a good experience with this platform."
"It allows you to aggregate all your logs in one place and provides a unified view to monitor your security environment."
"It offers built-in modules for file integrity and vulnerability management."
"The main thing I like about it is that it has an EDR."
"Wazuh's most valuable features include file monitoring and compliance reporting, which do not require excessive costs."
"It has efficient SCA capabilities."
"The product is easy to customize."
"It is excellent in terms of visualization and indexing services, making it a powerful tool for malware detection."
 

Cons

"It has been working very well, but it would be helpful if the dashboard could generate reports tailored to specific compliance needs. For example, in India, we have to comply with RBI and SEBI guidelines. It w"
"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."
"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."
"To improve the user experience, reporting could be simplified for better comprehension by end users and project managers, facilitating issue resolution."
"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."
"The areas in the solution that have room for improvement include the UI/UX design, which should be improved, and they should integrate more artificial intelligence into the product."
"I think Qualys TotalCloud needs to improve its handling of zero-day vulnerabilities and supply chain management because modern ransomware attacks not only target prime critical infrastructures but also the supply chain system."
"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."
"Granular alert customization would be helpful."
"By using ORION Security, we experience false positives, and we are working with the team every week to fine-tune the system."
"Its user interface for sure can be improved. It is not so comfortable to use if you're looking for specific logs."
"Wazuh's scalability and out-of-the-box functionality are slightly lagging behind, but Wazuh has improved a lot since the first time we saw it."
"Wazuh is not easily scalable. You have to consider the sources of events and maybe the amount of traffic."
"The deployment is a bit complex."
"Its configuration process is time-consuming."
"Wazuh requires substantial maintenance. The indexer frequently times out, requiring system restarts. When it comes to errors, debugging takes considerable time."
"The tool doesn't detect anomalies or new environments."
"Wazuh has a drawback with regard to Unix systems. The solution does not allow us to do real-time monitoring for Unix systems. If usage increases, it would be a heavy fall on the other SIEM solutions or event monitoring solutions."
 

Pricing and Cost Advice

"Qualys TotalCloud offers cost-effective licensing flexibility."
"The cost is high, but it meets our organizational needs."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"Qualys TotalCloud is expensive."
"TotalCloud's price is about right where I would expect it to be."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
Information not available
"It is a free-of-cost solution."
"We use the free version of Wazuh."
"Wazuh is a cheaply priced product."
"Wazuh is open-source, so I think it's an option for a small organization that cannot go for enterprise-grade solutions like Splunk."
"Wazuh has a community edition, and I was using that. It's free and open source."
"There is not a license required for Wazuh."
"My client uses the open-source version of Wazuh."
"The solution's cost is above the average."
report
Use our free recommendation engine to learn which Data Security Posture Management (DSPM) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
11%
Manufacturing Company
11%
Financial Services Firm
10%
Outsourcing Company
24%
Construction Company
19%
Healthcare Company
8%
Transportation Company
6%
Comms Service Provider
13%
University
9%
Manufacturing Company
8%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise11
Large Enterprise38
No data available
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise15
Large Enterprise9
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...
What needs improvement with Qualys TotalCloud?
I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...
What is your experience regarding pricing and costs for Orion Security DLP?
I am not aware of the pricing for ORION Security. I am not part of the pricing and contract process.
What needs improvement with Orion Security DLP?
By using ORION Security, we experience false positives, and we are working with the team every week to fine-tune the ...
What is your primary use case for Orion Security DLP?
ORION Security is used for data leak prevention.
What do you like most about Wazuh?
Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diver...
What needs improvement with Wazuh?
I expected one thing from the dashboard in Wazuh. In ManageEngine, when you use ManageEngine, you can assign a unique...
What is your primary use case for Wazuh?
Our organization is focusing on the integrity part for implementing Wazuh. We were checking solutions for File Integr...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
Wazuh All-In-One Deployment
 

Overview

Find out what your peers are saying about Wiz, Varonis, Orca Security and others in Data Security Posture Management (DSPM). Updated: October 2026.
920,769 professionals have used our research since 2012.