

Qualys TotalCloud and Varonis Platform compete in the cybersecurity market, with a focus on cloud security and data governance, respectively. Qualys seems to have the upper hand in cloud security due to its comprehensive risk analysis and cloud-native integrations.
Features: Qualys TotalCloud provides Web Application Scanning, comprehensive risk analysis through TruRisk scores, and seamless cloud-native integrations. It offers total asset management, automated scan configurations, and a single prioritized risk view to enhance cloud visibility. Varonis Platform specializes in data access governance, threat management, and user behavior analytics, including detailed integrations for unstructured data sources and comprehensive compliance tracking.
Room for Improvement: Qualys TotalCloud could improve AI integration, onboarding processes, and scanning for niche devices. Its support system needs efficiency improvements, and features like Cloud Detection and Response should expand beyond AWS. Varonis Platform can enhance data scanning speed, integrate tighter DLP capabilities, and simplify report generation, with an overly complex setup that would benefit from better third-party integrations.
Ease of Deployment and Customer Service: Qualys TotalCloud is suited for hybrid cloud deployments with flexible integration options and solid, albeit sometimes time-consuming, customer support. Varonis Platform operates primarily on-premises and in the public cloud but offers limited cloud integration, with a proactive support system that needs faster response times and a simpler setup process.
Pricing and ROI: Qualys TotalCloud offers competitive pricing and significant ROI through efficient risk management and cost-effective integration. Varonis Platform, while more expensive, justifies its cost with robust data governance solutions appealing to larger enterprises. Both provide valuable ROI, with Qualys focusing on operational efficiencies and Varonis on data management value.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
CallStream helps us integrate and automate tasks.
I definitely say that we have had time savings by using the DataVantage module and also time savings using the AD module when we are dealing with different incidents.
I have seen a return on investment mainly through time savings and improved security for sensitive data, making it a valuable investment.
They are helpful, respond to my queries, and can answer any question.
Qualys's tech support is highly responsive, providing multiple ways to interact with them.
Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA.
The customer support is above par; it is what I think other organizations should look at to be comparable to.
They respond quickly to anything we need, which is not common among platforms.
I would rate the customer support for Varonis Platform at nine out of ten.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
Our organization currently uses it to manage over 1200 web applications.
It is absolutely scalable, and I would rate its scalability as nine out of ten.
Varonis Platform is highly rated for scalability.
Varonis's scalability as eight to eight point five out of ten.
Overall, the support provided has been excellent.
It is a stable solution, which is why we chose it.
Continuous monitoring is crucial to ensure system stability and avoid vulnerabilities or threats.
Ideally, the scanner should automatically detect and scan all subdomains, even if not explicitly defined, ensuring comprehensive vulnerability assessment.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
Varonis requires more access permissions for its core functions compared to competitors, which can be a concern for companies about data safety.
A phishing email module would be great; I look forward to when that comes out.
Enhancing tighter integration with third-party solutions, such as SIEM or SOAR platforms, for smoother incident response workflows.
Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive.
Pricing is managed by our finance team; however, Qualys TotalCloud offers cost-effective licensing flexibility.
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
Varonis is known for its high licensing cost, which can include the cost of multiple servers required for its operations, called collectors.
My experience with pricing, setup costs, and licensing for Varonis Platform has been good, with competitive costs.
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
It will help cybersecurity professionals monitor the cloud and find vulnerabilities.
We are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs.
Varonis is excellent for scanning unstructured data sources like file shares, OneDrive, SharePoint, Azure Blob Storage, and S3s.
Varonis Platform is agent-based and AI-driven for detection and response, identifying data based on its content and context.
We have created automatic scripts in case there is a chance that it is a ransomware malicious actor, and it will automatically disable the user, log them out, and disable the actual workstation.
| Product | Mindshare (%) |
|---|---|
| Qualys TotalCloud | 2.5% |
| Varonis Platform | 9.5% |
| Other | 88.0% |

| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 3 |
| Large Enterprise | 26 |
| Company Size | Count |
|---|---|
| Small Business | 3 |
| Midsize Enterprise | 2 |
| Large Enterprise | 13 |
TotalCloud is the Qualys approach to Cloud Native Application Protection Platform (CNAPP) for cloud infrastructure and SaaS environments. With TotalCloud, customers extend TruRisk insights (transparent cyber risk scoring methodology) from the Qualys Enterprise TruRisk Platform to their cloud environments allowing for a seamless unified view of cyber risk across on-prem, hybrid, and multi-cloud environments.
Features and capabilities of Qualys TotalCloud include, but are not limited to:
Discover: Complete visibility and insights into cyber-risk exposure across multi-cloud. Continuously discover and monitor all your workloads across a multi-cloud environment for a 360-degree view of your cloud footprint. Identify known and previously unknown internet-facing assets for 100% visibility and tracking of risks.
Assess: Comprehensive cloud-native assessments with FlexScanTM. Extensive scanning capabilities with Qualys FlexScan, including no-touch, agentless, API- and snapshot-based scanning, along with agent- and network-based scanning for in-depth assessment. Use these multiple scanning methods to scan a workload to get a unified and comprehensive view of vulnerabilities and misconfigurations.
Prioritize: Unified security view to prioritize cloud risk with TruRiskTM. Experience a unified risk-based view of cloud security with insights across workloads, services, and resources. Qualys TruRisk quantifies security risk by workload criticality and vulnerabilities; it correlates with ransomware, malware, and exploitation threat intelligence to prioritize, trace, and reduce risk.
Defend: Real-time protection against evolving and unknown threats with InstaProtectTM. Qualys enables continuous monitoring of all cloud assets to ensure they are protected against threats and attacks at runtime. Qualys keeps your cloud runtime safe by detecting known and unknown threats across the entire kill chain in near real-time across a multi-cloud environment.
Remediate: Fast remediation with QFlow – no code, drag-and-drop workflows. The integration of QFlow technology into Qualys TotalCloud saves security and DevOps teams valuable time and resources. Automation and no-code, drag-and-drop workflows help simplify the time-consuming operational tasks of assessing vulnerabilities on ephemeral cloud assets, alerting on high-priority threats, remediating misconfigurations, and quarantining high-risk assets.
Varonis Platform enhances data security and governance with advanced analytics, identifying unusual access patterns and sensitive areas. Its centralized interface manages permissions across systems, offering essential capabilities for alerting and reporting.
Varonis Platform provides continuous data protection and monitoring by identifying and alerting on unauthorized data access. It offers comprehensive insights into file access and user activities, supporting data classification and simplifying compliance with tracking and monitoring capabilities. Integration with storage systems enables users to manage permissions and access effectively. Room for improvement includes cloud integration and simplifying its interface and calculation engine for ease of use. Challenges include on-premises dependency, licensing costs, and a need for enhanced DLP capabilities.
What are the primary features of Varonis Platform?
What benefits and ROI should users expect?
In finance, Varonis aids in safeguarding sensitive financial data, while in healthcare, it secures patient records. Legal industries utilize it for protecting client information, and retail sectors manage sensitive customer data. These industries benefit from Varonis' ability to prevent unauthorized access and streamline compliance.
We monitor all SaaS Security Posture Management (SSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.