No more typing reviews! Try our Samantha, our new voice AI agent.

Runecast vs VMware Aria Automation comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Cloud Security Posture Management (CSPM)
8th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Vulnerability Management (11th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (8th), SaaS Security Posture Management (SSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (6th)
Runecast
Ranking in Cloud Security Posture Management (CSPM)
47th
Average Rating
9.0
Reviews Sentiment
7.0
Number of Reviews
1
Ranking in other categories
GRC (52nd), Vulnerability Management (71st), Container Security (46th), Cloud Workload Protection Platforms (CWPP) (39th), Cloud-Native Application Protection Platforms (CNAPP) (30th), Compliance Management (24th)
VMware Aria Automation
Ranking in Cloud Security Posture Management (CSPM)
20th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
172
Ranking in other categories
Cloud Management (3rd), Configuration Management (8th), Network Automation (5th), Cloud Infrastructure Entitlement Management (CIEM) (6th)
 

Mindshare comparison

As of June 2026, in the Cloud Security Posture Management (CSPM) category, the mindshare of Qualys TotalCloud is 1.6%, up from 1.2% compared to the previous year. The mindshare of Runecast is 0.8%, up from 0.1% compared to the previous year. The mindshare of VMware Aria Automation is 1.0%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Security Posture Management (CSPM) Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.6%
VMware Aria Automation1.0%
Runecast0.8%
Other96.6%
Cloud Security Posture Management (CSPM)
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
Burak AKCAGUN - PeerSpot reviewer
Business Development Manager at Axoft Ukraine
Helps with risk assessments for containers, assessing security, and ensuring container compliance
I rate the overall product a nine out of ten. Customers can conveniently view all companies in a single dashboard if they have different companies. This feature eliminates the need for different solutions and separate installations. Moreover, the solution extends beyond servers, encompassing various platforms such as VMware and Kubernetes. Additionally, end-users can install the solution from their client's perspective.
VasilisGiannitsiotis - PeerSpot reviewer
Senior IT at ITSolutions
Automation has streamlined complex financial workflows but still needs more intuitive orchestration
Something to improve in VMware Aria Automation would be related to VCF 9, as I do not know what it is trying to bring because they exposed it as the solution of everything. So VCF 9 will bring VCF Automation and VCF Operations, the new product line of VMware. I have not seen what this brings or what else it includes. Maybe in the area of vRealize Orchestrator, this would be beneficial because VRO can do everything. Perhaps a more user-friendly way to use that tool would be helpful because the possibilities there are endless. I am looking for more user-friendly navigation in VMware Aria Automation.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution."
"With TotalCloud, we can scan through the API. If we are not able to deploy cloud agents on the machine, we can use the API."
"Qualys TotalCloud is an excellent platform, and the beauty of the platform is that we can get all the vulnerabilities, see all the reports in a single dashboard, view them segregated, and easily learn about critical, high, and medium findings with appropriately provided remediation steps."
"I appreciate TotalCloud's real-time protection and remediation features. The remediation options include automated one-click remedies and custom changes that help manage vulnerabilities efficiently."
"Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."
"One of the most valuable features of Qualys TotalCloud is FlexScan, which is specifically for internet-facing VMs. We found this feature to be very useful. It was a key differentiator for us."
"Qualys TotalCloud's most valuable feature is its agent versatility."
"TruRisk Insights is the most important innovation they've released this year."
"Runecast is a good partner for VMware. Once we have installed it, we can see all the problems and issues. It also has VMware knowledge-based articles."
"It provides velocity both from management and customer perspectives, from ingesting new catalog items, developing new workflows for additional features, and/or allowing customer access to multiple guest OS instances at scale in a shorter time frame."
"Our time to deliver a fully unified three-tier app, at the right version, is one-twentieth what it was before. There is no manual intervention. No IP management. It just dramatically simplifies all of our processes."
"It cuts out a lot of waste, unutilized hardware, and improves performance."
"Overall, VMware is very good, it's very stable, very extensible, but it does have a relatively high learning curve."
"He liked the way SaltStack (on the entire cluster) was up and running in a few minutes, and also gave him flexibility to generate traffic, make config changes, etc. on the fly."
"The product’s most valuable feature is its ability to provide environmental security."
"Currently, the primary feature we're using in VMware Aria Automation is its ability to execute tasks quickly. However, we haven't explored other features like workload management or the full stack yet. So it's hard to make comparisons or fully utilize its potential until we expand our usage."
"I personally spend a lot of time in vRealize Orchestrator, so being able to directly tie into the back end on the APIs, I find that to be what really is the most advantageous thing for me."
 

Cons

"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."
"Two areas for improvement in Qualys TotalCloud are the speed of the public cloud platform and vulnerability detection."
"Overall, we are satisfied with it. However, the response part of the Cloud Detection and Response (CDR) module can be improved. It is not yet in place according to requirements; it is not completely available even though the module has been released."
"TotalCloud could improve its scanning of niche devices like Wi-Fi dongles and USB modems because they are often untested. It covers everything else, like laptops, mobile devices, and Bluetooth IoT devices. They can improve on the small IoT devices because hackers and testers use these."
"Qualys TotalCloud needs to improve its accuracy for non-Windows operating systems."
"Qualys TotalCloud needs to enhance its scanning capabilities in the IP domain, as it currently lacks the functionality to resolve IPs to their corresponding domain names."
"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."
"Qualys TotalCloud has the potential to improve by integrating a hybrid platform for comprehensive management of both on-premises and cloud infrastructures."
"The product lacks network assessment capabilities. We cannot view our network assets or scan switches, routers, or IPs for vulnerabilities and issues."
"We found some intermittent issues with the Windows minion connection."
"Licensing's expensive."
"If you are using Aria Automation by itself, you won't get the features you want, and the license cost is high."
"I would not recommend this product. I think that there are better products to meet your needs that are competitors on the market."
"vRO can get out of sync with vRA. We've run into every once in a while."
"The online documentation is lackluster at best."
"Improvements in the API. Make it easier because that's where we tend to struggle when we were working with other groups."
"They can improve on the dashboard representations and the options for non-technical people."
 

Pricing and Cost Advice

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"TotalCloud's price is about right where I would expect it to be."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"The cost is high, but it meets our organizational needs."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"Qualys TotalCloud is expensive."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"Runecast's pricing is cheaper than that of its competitors."
"I'm very interested in the integration with Puppet. However, my organization doesn't have the funding for something like Puppet right now. If VMware would integrate that feature set (Puppet) into vRA. That would be very awesome."
"vRealize automation really should be a front door to the whole VMware suite of products."
"From a budget point of view, the pricing is a bit on the higher side."
"They should provide one license for all the sub-products."
"So much can be done with the Open Source side, and especially for smaller shops. I personally think the pricing for Enterprise is hard to justify."
"It is an open-source product."
"I would rate it high because, compared to other solutions, VMware’s pricing is quite expensive. VMware products have become significantly more costly in recent years, leading to higher costs."
"The tool is expensive since it is an enterprise product."
report
Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
18%
Financial Services Firm
14%
Construction Company
7%
Comms Service Provider
7%
Construction Company
24%
Comms Service Provider
12%
Educational Organization
12%
Financial Services Firm
7%
Financial Services Firm
11%
Manufacturing Company
9%
Computer Software Company
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise29
No data available
By reviewers
Company SizeCount
Small Business33
Midsize Enterprise24
Large Enterprise131
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
Ask a question
Earn 20 points
What's the difference between VMware vRA (automation) and vROps (operations)?
vROP is a virtualization management solution from VMWare. It is efficient and easy to manage. You can find anything y...
Is there any way to try VMware Aria Automation for free?
When it comes to VMware Aria Automation, you have three choices for free runs: Hands-on Lab (HOL) Advanced lab A fre...
Which sectors can benefit the most from VMware Aria Automation?
I was looking at VMware Aria Automation case studies recently and I got the impression that three main kinds of compa...
 

Also Known As

Qualys TotalCloud with FlexScan
Runecast Analyzer
VMware vRealize Automation, vRA, VMware DynamicOps Cloud Suite, SaltStack
 

Overview

 

Sample Customers

Information Not Available
Our customers tell us regularly how Runecast benefits CIOs, CISOs, and both Security and Operations teams across verticals with a proactive approach that results in major time and cost savings, increased uptime and security standards complianceSuccess Highlight 75-85% troubleshooting time savings – Kiel Municipal Hospital90% time savings on reactive troubleshooting – Near East Bank90% time savings in upgrade planning– FLEXdata80% reduction in monthly incidents and issues – University of St Andrews78,000 EUR/year minimum annual cost savings – Notino100s of hours saved on security compliance with remediation scripts alone – Kiel Municipal Hospital75% time saved on troubleshooting and root cause analysis – de Volksbank
Rent-a-Center, Amway, Vistra Energy, Liberty Mutual
Find out what your peers are saying about Wiz, Palo Alto Networks, SentinelOne and others in Cloud Security Posture Management (CSPM). Updated: June 2026.
900,644 professionals have used our research since 2012.