No more typing reviews! Try our Samantha, our new voice AI agent.

SUSE Rancher vs Trivy comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Container Security
11th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
52
Ranking in other categories
Vulnerability Management (10th), Cloud Workload Protection Platforms (CWPP) (9th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
SUSE Rancher
Ranking in Container Security
17th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
12
Ranking in other categories
No ranking in other categories
Trivy
Ranking in Container Security
8th
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
12
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Container Security category, the mindshare of Qualys TotalCloud is 1.8%, up from 1.1% compared to the previous year. The mindshare of SUSE Rancher is 0.6%, up from 0.4% compared to the previous year. The mindshare of Trivy is 2.3%, down from 5.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Mindshare Distribution
ProductMindshare (%)
Trivy2.3%
Qualys TotalCloud1.8%
SUSE Rancher0.6%
Other95.3%
Container Security
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Shivamp Kachole - PeerSpot reviewer
Associate System Engineer at Dhanyaayai enterprise private limited
Centralized cluster management has improved daily operations and simplifies troubleshooting
I am happy with SUSE Rancher, but there are a few areas where it could be improved. During major version upgrades, the process can become a bit complex, especially in air-gapped environments where image management and dependencies require extra planning. Additionally, troubleshooting sometimes still requires switching to the command line because not every error is visible in the UI. If the UI provided more detailed diagnostic and troubleshooting information, it would make our issue resolution even faster. Other than that, it has been a reliable platform for all of us. I think the documentation is already very good, but for complex scenarios such as air-gapped environments, disaster recovery, or multi-cluster upgrades, having more step-by-step examples and troubleshooting guides would be very helpful. On the UI side, if SUSE Rancher could provide more detailed error messages and built-in diagnostic recognition, it would reduce the need to switch to logs and command lines. Those improvements would make our daily operations even easier and smoother, especially for new administrators and fresh team members.
Utsav Sharma - PeerSpot reviewer
Senior Security Consultant at Ernst & Young
Maintain operational efficiency by detecting misconfigurations and vulnerabilities
The vulnerability scanning feature is excellent as it supports various container capabilities like Docker and Sharma. It also offers repository scanning in the source code domain, allowing pre-push code scans. The misconfiguration detection works well for CloudFormation, Docker files, and Terraform. Its compliance support, like NIST, ensures that configurations align with standards. Trivy helps me significantly detect misconfigurations missed by the ops engineers or in Terraform by the naked eye. It ensures that my deployments are free of misconfigurations and vulnerabilities.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Qualys TotalCloud's most valuable features are its security capabilities that help identify and mitigate risk factors."
"Once you have your vulnerabilities fixed and your patches pushed out using Qualys TotalCloud, then you are able to eliminate threats and cyber risk."
"Qualys TotalCloud provides a single, prioritized view based on requirements such as identifying the most vulnerable assets and calculating the average time to remediate vulnerabilities."
"TotalCloud has been excellent in providing us with immediate access to all the products and features we need, such as CSPM, TruRisk Insights, and compliance reports, including CIS and HIPAA."
"We were able to realize its benefits within 24 to 48 hours."
"In my opinion, this is the best tool."
"I highly recommend Qualys TotalCloud to other users."
"I appreciate Qualys TotalCloud's ability to onboard any type of device with ease, including containers."
"Rancher Desktop provides support for Kubernetes setup on local machines."
"The end-to-end deployment was at least 30 percent cheaper than OpenShift, which was the biggest criterion since customers are cost-conscious."
"SUSE Rancher has positively impacted my organization by making the teams' work easier and reducing project delivery time."
"SUSE Rancher is best used for large-scale applications such as ours; it manages very high-end infrastructure, and it has very good customer support, and it is very easy to understand in terms of usage."
"With SUSE Rancher, everything is in one place and centralized, daily operations are much faster and easier for us, it has reduced manual efforts and helped us troubleshoot issues faster because we get a single view from all our clusters, and overall, it has improved our team efficiency and consistency."
"The most valuable features of SUSE Rancher include the user interface and the display features."
"SUSE Rancher has positively impacted my organization with increased efficiency in a 10x manner."
"We have been able to cut down the amount of time an expert needs to spend on upgrade and maintenance to a fifth of what it was before."
"I can see vulnerabilities in the images of any applications deployed in the Kubernetes environment or as container applications."
"What I find valuable is the ease of setup with Trivy, including pre-defined operators that require minimal configuration."
"Trivy's ability to scan files, images, GitHub repositories, Infrastructure as Code like Terraform, and Kubernetes is valuable."
"Trivy is easy to integrate with CI/CD and can be installed on desktops to scan images."
"One of the great features of Trivy is that it helps me scan items such as AWS credentials and GCP service accounts."
"Trivy's open source nature and wide functionality are incredibly valuable."
"Trivy is most valuable for its ability to scan all repository files and dependencies."
"Trivy is particularly useful for checking if Docker images have critical vulnerabilities before they reach production."
 

Cons

"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"An area for improvement would be to focus on risks related to AI, such as large language models and potential data leakage."
"Regarding improvements to Qualys TotalCloud, I suggest that user navigation can be enhanced because initially, many users found it complicated and had trouble understanding the platform due to information being spread across multiple tabs."
"The improvement needed in Qualys TotalCloud is mainly in the artificial intelligence automation agents, where we can customize and create what meets our needs, not necessarily having to use those provided in the tool."
"In my opinion, the combination of detection and protection features in Qualys TotalCloud cannot protect but can only detect."
"To improve the user experience, reporting could be simplified for better comprehension by end users and project managers, facilitating issue resolution."
"Qualys TotalCloud can be improved in the integration piece, especially with ServiceNow, where there's a bidirectional sync integrated, as there is no native capability from Qualys that can give monitoring metrics of how many assets came in and how many failed or were not properly reconciled or combined."
"There is a lack of data segregation according to criticality or inventory."
"Regarding the platform's features and advantages, it is unfortunate that observability and some artificial intelligence functionality work fully only with a paid subscription."
"I wish the container could be more lightweight so that anyone can test and verify SUSE Rancher Prime."
"I have noticed that SUSE Rancher's GUI is slow because we have more than 1,000 pods, and when searching for a pod name, the page takes some time to load."
"Some initial setup and configuration were required by the admin side for enabling security policies, which were not supported initially."
"Additional features for a paid solution should be included, such as more detailed insights, better graphics, and an improved user interface."
"All the tasks that SUSE Rancher does can be done in alternative methods, so it is not a must-have or a necessary tool in my view."
"During major version upgrades, the process can become a bit complex, especially in air-gapped environments where image management and dependencies require extra planning."
"It would be beneficial to have more support for the product."
"For malware detection, I need to use two tools: Trivy as my anomaly scanner and ClamAV. I am integrating these two tools into the CI pipeline. If both malware and anomaly detection could be managed by one tool, I would not need to depend on two tools. That would be my suggestion."
"One drawback I have observed with Trivy is the difficulty in building or integrating a UI, particularly for an operator in the NetSuite example."
"Having little experience can hinder the ability to connect it to a user-friendly UI effectively."
"Trivy can improve by providing an output in PDF format. Additionally, it takes longer to scan container images built with many layers."
"Trivy can improve by providing an output in PDF format."
"The only problem is that Trivy does not support reporting features such as generating reports in CSV, which is useful for auditing and reporting."
"The main area for improvement is in differentiating between OS and application-based vulnerabilities."
"The reporting could be a little better. When integrating Trivy with CI, the interpretation of the reports could be improved."
 

Pricing and Cost Advice

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"Qualys TotalCloud is expensive."
Information not available
Information not available
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
916,771 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
11%
Outsourcing Company
27%
Computer Software Company
23%
Financial Services Firm
9%
Comms Service Provider
7%
Financial Services Firm
13%
Manufacturing Company
11%
Comms Service Provider
9%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise10
Large Enterprise37
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise2
Large Enterprise7
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise9
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
I was not involved in pricing, setup cost, and licensing, but I can say that the setup was fast, within a quarter, an...
What needs improvement with Qualys TotalCloud?
In terms of improvements, the features we are using in Qualys TotalCloud are working in the best optimal way, and I d...
What is your primary use case for Qualys TotalCloud?
I have been using Qualys TotalCloud for the last eight months to scan the hardware and the virtual devices in our inf...
What is your experience regarding pricing and costs for SUSE Rancher?
I wasn't directly involved in the commercial side such as pricing, negotiation, or licensing decisions. Since we are ...
What needs improvement with SUSE Rancher?
I am happy with SUSE Rancher, but there are a few areas where it could be improved. During major version upgrades, th...
What is your primary use case for SUSE Rancher?
I have been working in the DevOps field and platform engineering field for around two years, approximately 1.9 years....
What needs improvement with Trivy?
Trivy's marketing and awareness need improvement. Not everyone knows about it, which isn't ideal given its capabiliti...
What is your primary use case for Trivy?
I use Trivy ( /products/trivy-reviews ) to scan code for vulnerabilities before deployment. Our projects, which are d...
What advice do you have for others considering Trivy?
I recommend Trivy to others due to its powerful and useful features. However, I suggest increasing its marketing to r...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
No data available
 

Overview

Find out what your peers are saying about SUSE Rancher vs. Trivy and other solutions. Updated: September 2026.
916,771 professionals have used our research since 2012.