Prisma Cloud by Palo Alto Networks vs VMware Aria Operations for Applications comparison

Cloud-Native Application Protection Platforms (CNAPP)

Download the complete report

Helped 881,757 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
Product	Market Share (%)
Prisma Cloud by Palo Alto Networks	12.9%
Wiz	18.4%
Microsoft Defender for Cloud	9.3%
Other	59.400000000000006%

Cloud-Native Application Protection Platforms (CNAPP)

Cloud Monitoring Software Market Share Distribution
Product	Market Share (%)
VMware Aria Operations for Applications	2.1%
Zabbix	9.6%
Datadog	6.5%
Other	81.8%

Cloud Monitoring Software

Featured Reviews

Satyavijay Chavan

Information Security Engineer at DataVigilant Infotech

Enables us to prioritize and effectively address critical security issues

Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.

Read full review

reviewer2776578

Cyber Security Architect at a comms service provider with 10,001+ employees

Image scanning has supported consistent security practices during cloud deployment

On a scale of ten, we would say people are happy with Prisma Cloud by Palo Alto Networks for the part we use. People are okay with it. We probably would give an eight. We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view. We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts. People have other tools and in the end, we don't use the full capabilities of a product that we pay for. It's partially related to the difficulty to integrate Prisma Cloud by Palo Alto Networks runtime in our company's support process. We don't use the real-time monitoring part of Prisma Cloud by Palo Alto Networks. We don't know about the automated remediation feature of Prisma Cloud by Palo Alto Networks.

Read full review

Ajay Shukla

Consultant at HCLTech

Automation and insightful diagnostics elevate operations while improvements are welcome

The new version 8.18 has brought significant improvements. The main purpose of using this tool is having a single console to manage all entities. The cloud integration capabilities, including private, public, and hybrid, are already well-implemented. The ability to manage multiple vCenters across different geographical locations is very effective. The new Skyline health feature and certificate and licensing management are particularly useful improvements. The dashboard's overview tab provides comprehensive information about current vCenter status, resizable amounts, reclamation opportunities, anomalies, diagnostics, licensing, and certificates. However, there is room for improvement in application analysis. The current functionality lacks detailed monitoring at the kernel level, focusing mainly on CPU, memory, and storage matrices. Enhanced application monitoring capabilities, including tracking downtime for specific types of applications such as transactional or e-commerce applications, would be beneficial.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"All the features we use are equal and get the job done."

"The monitoring tool has comprehensive monitoring features."

"The offensive security feature is valuable because it publicly detects the offensive and vulnerable things present in our domain or applications. It checks any applications with public access. Some of the applications give public access to certain files or are present over a particular domain. It detects and lets us know with evidence. That is quite good. It is protecting our infrastructure quite well."

"The solution saves 40% of my time."

"SentinelOne Singularity Cloud Security has saved up to 50 percent in engineering time."

"We like SentinelOne Singularity Cloud Security's vulnerability assessment and management features, and its vulnerability databases."

"The remediation process is good."

"I would rate their support a ten out of ten."

More SentinelOne Singularity Cloud Security pros

"I have not seen any limitations. Everything is customizable. You can do whatever you want, defining the reporting and custom use cases. They recently updated the UI, so it's much better than before."

"It is a good solution. Each team should utilize it. Every good organization is now moving towards or trying to be provider agnostic, so if you are using multiple providers, you should at least give Prisma Cloud a try."

"The most valuable feature of Prisma Cloud for our clients is CSPM, as it helps clients gain visibility into all the assets with their cloud providers."

"The support is excellent."

"The Twistlock vulnerability scanning tool is its most valuable feature. It provides us insight into security vulnerabilities, running inside both on-premise and public cloud-based container platforms. It is filling a gap that we have with traditional vulnerability scanning tools, where we don't have the ability to scan inside containers."

"Syslog CLIs are the best feature."

"I would say Twistlock is a fairly sophisticated tool."

"The product is quite good for providing multi-clouds or cross-cloud security from a single-pane -of-glass."

More Prisma Cloud by Palo Alto Networks pros

"VMware comes with a support team, and if you have trouble, you can easily create a ticket, and VMware will help you. Therefore, the best aspect is the support."

"For us, the ease of deployment in combination with TMZ was the most important part because we don't have to manually deploy a complex monitoring solution. We can more or less do that with the click of a button, and we are not dependent on the developers to provide us with all the necessary features and functions to make that work. We can just deploy it on a workload cluster and monitor at least a good part of the workload. If we want to go into detail, we clearly need to make changes, but for a good part of application monitoring, it gives us good insights."

"It has a familiar interface, which makes it easy to get started."

"The most valuable aspects of the solution are its ease of use and its ease of implementation."

"The solution is great for virtualization and preparing the infrastructure in Tanzu to test products. It's very fast and has good visibility."

"Tanzu itself, integrated with multiple solutions, bestows support and security upon a container platform, especially when it comes to managing open-source container platforms such as Kubernetes."

"The solution provides single-console management for multiple VMware environments and cloud integrations, whether hybrid, private, or public cloud."

"I find VMware Aria Operations for Applications to be very stable, and I would rate it a ten out of ten."

More VMware Aria Operations for Applications pros

Cons

"The cloud-based operations might pose challenges in areas with limited or unavailable internet connectivity."

"When we request any changes, they must be reflected in the next update."

"It would be really helpful if the solution improves its agent deployment process."

"I would like SentinelOne Singularity Cloud Security's detections to be openly available online instead of only accessible through their portal. Other tools have detections that are openly available without going through the tool."

"The Automation tab is an add-on that doesn’t work properly. They provide a list of scripts that don’t work and I have asked support to assist but they won’t help. When running on various endpoints the script doesn’t work and if it does, it’s only a couple. There are a lot of useful scripts that would be beneficial to run forensics, event logs, and process lists running on the endpoint."

"There is no break-glass account feature. They should implement this as soon as possible because we can't implement SSO without a break-glass feature."

"I find the platform somewhat clunky at times, and SentinelOne Singularity Cloud Security does not always give me accurate data, which could also be due to fine tuning on our end."

"Whenever I view the processes and the process aspect, it takes a long time to load."

More SentinelOne Singularity Cloud Security cons

"When it comes to protecting the full cloud-native stack, it has the right breadth. They're covering all the topics I would care about, like container, cloud configuration, and serverless. There's one gap. There could be a better set of features around identity management—native AWS—IAM roles, and service account management. The depth in each of those areas varies a little bit. While they may have the breadth, I think there's still work to do in flushing out each of those feature sets."

"One thing that is missing is Cloud Run runtime security—serverless. That would be great to have in the tool. It's not that easy to have Cloud Run in specific environments."

"The UI could use some improvement; we usually find the information we're looking for, but what fields can be clicked on and what workflow to follow to get the required information is not always evident. Sometimes we're all over the place, clicking around to drill in and uncover the alert and investigation details we're looking for."

"They need to make the settings more flexible to fit our internal policies about data. We didn't want developers to see some data, but we wanted them to have access to the console because it was going to help them... It was a pain to have to set up the access to some languages and some data."

"When it comes to compliance, the issue is that when we are exporting the reports, there is only a single compliance option. If I need to report on multiple compliance requirements, that feature isn't available. For example, I made a single report for ISO 27000 but I can't correlate it with GDPR."

"Areas like the deployment of their defenders and their central control need manual intervention. They should focus more on automation. They have a very generic case for small companies. However, for bigger companies to work, we have to do a lot of changes to our system to accommodate it. Therefore, they should change their system or deployment models so it can be easy to integrate into existing architectures."

"The solution does not currently support servers for GCP."

"One of the requests is that Prisma Defender for the ECS solution is only supported for Linux. It does not support Windows."

More Prisma Cloud by Palo Alto Networks cons

"The documentation and integration with Kubernetes could be improved."

"Its billing model is consumption-based. I understand the consumption-based model, but it is not necessarily easy to estimate and guess how many points or how much we are going to consume on a specific application up until we get to that point. So, for us, it would be helpful to have more insights or predictability into what we can expect from a cost perspective if we are starting to use specific features. This can potentially also drive our consumption a bit more."

"It could use a URL document server. Everything in the market is moving towards automation and everybody's looking for the single click operations as well relational data locality."

"They could make it more easy to plug-in data so that a nontechnical person will be able to use it, like accountants or finance people. That way they don't have to ask us."

"VMware technical support has declined since the Broadcom acquisition. Previously, they were more focused on issue resolution, but now they prioritize licensing verification before providing support."

"I find that there could be improvements in the support service response time, as the urgency varies unless specified as Priority 2 or 1 cases."

"In the new version, I would love to see more prediction capabilities. It would be great if one could see the alerts get a little more enriched with information and become more human-friendly instead of the technical stuff that they put in there. I think those would be really awesome outcomes to get."

"The solution could be expensive, which might be a limiting factor."

More VMware Aria Operations for Applications cons

Pricing and Cost Advice

"It was reasonable pricing for me."

"I wasn't sure what to expect from the pricing, but I was pleasantly surprised to find that it was a little less than I thought."

"Singularity Cloud Workload Security's pricing is good."

"The cost for PingSafe is average when compared to other CSPM tools."

"It is a little expensive. I would rate it a four out of ten for pricing."

"Singularity Cloud Security by SentinelOne is cost-efficient."

"Its pricing is constant. It has been constant over the previous year, so I am happy with it. However, price distribution can be better explained. That is the only area I am worried about. Otherwise, the pricing is very reasonable."

"As a partner, we receive a discount on the licenses."

More SentinelOne Singularity Cloud Security pricing and cost advice

"Almost all the CSPM tools are pretty expensive."

"The Prisma Cloud pricing is good."

"If you pay for three years of Palo Alto, it's better. If you're planning on doing this, it's obviously not going to be for one year, so it's better if you go with a three-year license... The only challenge we have is with the public cloud vendor pricing. The biggest lesson I have learned is around the issues related to pricing for public cloud. So when you are doing your segmentation and design, it is extremely important that you work with someone who knows and understands what kinds of needs you will have in the future and how what you are doing will affect you in terms of costs."

"The price for Prisma Cloud is reasonable."

"You can expect a premium price because it is a premium quality product by a leading supplier."

"I find the pricing to be expensive."

"Prisma Cloud is quite scalable. In our current licensing model, we're able to heavily extend our cloud workload and onboard a lot of customers. It really helps, and it is on par with other solutions."

"In general, Prisma Cloud is much cheaper than cloud-native services."

More Prisma Cloud by Palo Alto Networks pricing and cost advice

"Different locations require different setups. In your terms, around 300 to around 400K USD."

"I would rate the pricing as three out of five."

"I don't have the details. In our case, there is a mixture in place. We have production usage, and we are also doing training for VMware. So, we also have a training instance. It is worth the money you would spend on it. That's because if you were to build all of this yourself by using some of the open source tools, then you would need a lot of time."

"The licensing costs are very high, particularly when you consider that we have to purchase a level 1 license for every integration, such as the load balancer, HAProxy, and the MSSP. And if you want to use vSAN, that's another license. Then, of course, Tanzu Observability has its own separate license."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

881,757 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Computer Software Company

12%

Manufacturing Company

10%

Government

Financial Services Firm

15%

Computer Software Company

10%

Manufacturing Company

Insurance Company

Financial Services Firm

12%

Manufacturing Company

11%

Government

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	48
Midsize Enterprise	22
Large Enterprise	54

By reviewers
Company Size	Count
Small Business	36
Midsize Enterprise	22
Large Enterprise	56

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	1
Large Enterprise	10

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

What is your experience regarding pricing and costs for PingSafe?

Regarding the pricing for SentinelOne Singularity Cloud Security, I do not think it is something I can compare.

What needs improvement with PingSafe?

Regarding the downsides of cloud security, I do not have much negative to discuss about cloud security, because it is...

What is your primary use case for Prisma Cloud by Palo Alto Networks?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

What is your experience regarding pricing and costs for VMware Tanzu Observability by Wavefront?

The solution includes cost drivers that can be configured according to your environment. You can input server-wise, C...

What needs improvement with VMware Tanzu Observability by Wavefront?

The new version 8.18 has brought significant improvements. The main purpose of using this tool is having a single con...

What is your primary use case for VMware Tanzu Observability by Wavefront?

I have been involved in several projects where I had to implement automation and monitoring alerting. I performed aut...

Wiz vs SentinelOne Singularity Cloud Security

Comparisons

Compared 10% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 6% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 5% of the time

CrowdStrike Falcon Cloud Security vs SentinelOne Singularity Cloud Security

Compared 5% of the time

FortiCNAPP vs SentinelOne Singularity Cloud Security

Compared 3% of the time

More SentinelOne Singularity Cloud Security Competitors

Wiz vs Prisma Cloud by Palo Alto Networks

Compared 10% of the time

Cyera vs Prisma Cloud by Palo Alto Networks

Compared 8% of the time

Check Point CloudGuard CNAPP vs Prisma Cloud by Palo Alto Networks

Compared 7% of the time

Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 4% of the time

More Prisma Cloud by Palo Alto Networks Competitors

Grafana vs VMware Aria Operations for Applications

Compared 6% of the time

Zabbix vs VMware Aria Operations for Applications

Compared 5% of the time

Datadog vs VMware Aria Operations for Applications

Compared 5% of the time

Dynatrace vs VMware Aria Operations for Applications

Compared 5% of the time

PRTG Network Monitor vs VMware Aria Operations for Applications

Compared 4% of the time

More VMware Aria Operations for Applications Competitors

Product Reports

SentinelOne Singularity Cloud Security

Download SentinelOne Singularity Cloud Security product report

SentinelOne Singularity Cloud Security report

Prisma Cloud by Palo Alto Networks

Download Prisma Cloud by Palo Alto Networks product report

Prisma Cloud by Palo Alto Networks report

VMware Aria Operations for Applications

Download VMware Aria Operations for Applications product report

VMware Aria Operations for Applications report

Also Known As

PingSafe

Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

Tanzu Observability, Wavefront, Wavefront by VMware, VMware Tanzu Observability

Overview

SentinelOne Singularity Cloud Security offers a streamlined approach to cloud security with intuitive operation and strong integration capabilities for heightened threat detection and remediation efficiency.

Singularity Cloud Security stands out for its real-time detection and response, effectively minimizing detection and remediation timelines. Its automated remediation integrates smoothly with third-party tools enhancing operational efficiency. The comprehensive console ensures visibility and support for forensic investigations. Seamless platform integration and robust support for innovation are notable advantages. Areas for development include improved search functionality, affordability, better firewall capabilities for remote users, stable agents, comprehensive reporting, and efficient third-party integrations. Clarity in the interface, responsive support, and real-time alerting need enhancement, with a call for more automation and customization. Better scalability and cost-effective integration without compromising capabilities are desired.

What are SentinelOne Singularity Cloud Security's standout features?

Ease of Use: Intuitive operation simplifies navigation across platforms.
Real-Time Detection: Quick identification and response to threats.
Automated Remediation: Streamlines recovery processes with integration capabilities.
Forensic Visibility: Aids in thorough threat analysis and prevention strategies.
Comprehensive Console: Offers full visibility and historical data tracking.
Platform Integration: Supports seamless operation across cloud and hybrid environments.

What benefits should users expect from SentinelOne Singularity Cloud Security?

Enhanced Efficiency: Automation and third-party integration improve threat response.
Improved Detection: Reduces mean time to detect and respond to threats.
Operational Support: Comprehensive visibility and forensic tools aid operational decisions.
Cost Efficiency: Affordable integration with scaling capabilities without high overhead.

SentinelOne Singularity Cloud Security is deployed in industries needing robust cloud security posture management, endpoint protection, and threat hunting. Utilized frequently across AWS and Azure, it assists in monitoring, threat detection, and maintaining compliance in diverse environments while providing real-time alerts and recommendations for proactive threat management.

SentinelOne

Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.

Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.

What are the important features of Prisma Cloud?

Dynamic Workload Identity: Enables unique workload identities for security purposes.
Automated Forensics: Offers detailed insights into threats and incidents automatically.
Runtime Protection: Provides ongoing detection and blocking of suspicious activities.
Multi-Cloud Security: Protects environments on AWS, Azure, and GCP simultaneously.
Compliance Management: Assists in meeting regulatory standards across cloud platforms.

What benefits or ROI should users consider in reviews?

Enhanced Security Posture: Strengthens cloud defense lines with proactive monitoring.
Centralized Dashboard: Offers unified oversight of multiple cloud environments.
Efficient Misconfiguration Handling: Quickly identifies and addresses security lapses.
Seamless CI/CD Integration: Integrates security within development workflows.
Improved Visibility: Provides transparent insights into security operations and alerts.

Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.

Palo Alto Networks

VMware Tanzu Observability by Wavefront is a powerful tool for monitoring and analyzing the performance and availability of applications and infrastructure in real-time.

With its comprehensive monitoring capabilities, visualizing and analyzing data becomes effortless. The real-time alerting system ensures timely issue resolution, while scalability and a user-friendly interface provide a seamless experience for smooth operations.

Broadcom

Sample Customers

Information Not Available

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

1. Atlassian 2. Cisco 3. Databricks 4. DigitalOcean 5. Equinix 6. Fidelity Investments 7. Google 8. Hewlett Packard Enterprise 9. Honeywell 10. IBM 11. Intel 12. JetBlue Airways 13. LinkedIn 14. Lyft 15. Mastercard 16. Microsoft 17. MongoDB 18. Netflix 19. Nvidia 20. Oracle 21. PayPal 22. Pinterest 23. Qualcomm 24. Red Hat 25. Salesforce 26. SAP 27. Spotify 28. Square 29. TMobile 30. Twitter 31. Uber 32. VMware

Cloud-Native Application Protection Platforms (CNAPP)