Qualys TotalCloud Reviews

Name: Qualys TotalCloud
Brand: Qualys
Rating: 4.4 (24 reviews)

4.4 out of 5

24 reviews
100% willing to recommend

What is Qualys TotalCloud?

TotalCloud is the Qualys approach to Cloud Native Application Protection Platform (CNAPP) for cloud infrastructure and SaaS environments. With TotalCloud, customers extend TruRisk insights (transparent cyber risk scoring methodology) from the Qualys Enterprise TruRisk Platform to their cloud environments allowing for a seamless unified view of cyber risk across on-prem, hybrid, and multi-cloud environments.

Get the Qualys TotalCloud Buyer's Guide and find out what your peers are saying about Qualys TotalCloud, Wiz, Prisma Cloud by Palo Alto Networks and more!

Qualys TotalCloud is the #2 ranked solution in top SaaS Security Posture Management (SSPM) solutions, #9 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #10 ranked solution in Cloud Workload Protection Platforms, #10 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #11 ranked solution in Container Security Solutions, and #13 ranked solution in top Vulnerability Management solutions. PeerSpot users give Qualys TotalCloud an average rating of 8.8 out of 10. Based on the analysis of the 24 most recent Qualys TotalCloud reviews, the overall sentiment is positive, with a sentiment score of 7.8. (Among the highest in the category). Qualys TotalCloud is most commonly compared to Wiz: Qualys TotalCloud vs Wiz. Qualys TotalCloud is popular among the large enterprise segment, accounting for 68% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 22% of all views.

Helped 823,875 peers since 2012

Featured reviews

Sushant Samantara

IT Manager at Capgemini

TotalCloud provides written explanations to guide remediation and eliminate cyber risks. While all cloud platforms offer security features, it's challenging to consolidate them into a single dashboard. Qualys TotalCloud effectively addresses this by consolidating multiple cloud platforms and subscriptions onto one dashboard. This allows users to quickly identify and mitigate misconfigurations and risks, simplifying security management. Before implementing TotalCloud, our compliance rate was approximately 50 to 60 percent. However, after adopting the platform, it has increased to 80 to 90 percent. TotalCloud also helps us minimize attack surfaces by identifying root accounts and encryption issues, thereby enhancing our overall security by 40 percent. TotalCloud offers a unified platform for assessing vulnerabilities and threats across both IaaS and PaaS environments. This unified view has improved our cloud security posture management. We gain a single, prioritized view of risks through TotalCloud's TruRisk Insights feature. This feature considers not only the QDA score but also factors in cost and other relevant elements to provide a comprehensive risk assessment. From a potentially overwhelming list of findings, TruRisk Insights prioritizes the most critical risks, allowing us to focus our efforts and resources on addressing these high-priority tasks efficiently. A single, prioritized view of risk streamlines the risk assessment process by eliminating the need to consolidate multiple sources. This comprehensive view is instrumental in communicating with other business customers who may be unaware of potential risks or misconfigurations within their resources. By identifying and informing them of these issues, we can guide them towards compliance and ensure a more secure environment. TruRisk Insights provides valuable findings by identifying vulnerabilities and misconfigurations, displaying them on a dashboard, and offering deeper insights into the attack surface. It analyzes not only internet-facing devices but also those indirectly connected, providing a comprehensive understanding of potential risks. This is crucial because even devices not directly connected to the internet can be vulnerable if they have an attack surface. TruRisk Insights also offers mitigation strategies, making it a highly useful tool for managing security risks. With the VMDR feature enabled and the Qualys Agent installed on various assets, we can identify existing vulnerabilities. TruRisk Insights then calculates risk scores, prioritizes tasks, and presents the number of findings. This allows us to focus on mitigating high-priority vulnerabilities while deferring those with lower priority, ultimately reducing overall risk. TruRisk Insights provides device details, allowing for containerization of misconfigured devices. This process involves isolating problematic devices and rectifying misconfigurations, ultimately enhancing our security posture.

Read full review

Vikasha Sharma

Deputy Vice President at a financial services firm with 10,001+ employees

TotalCloud provides written explanations that guide remediation and eliminate risk. We have used Qualys for over ten years, and TotalCloud and TruRisk for the last two to three years, successfully leveraging their benefits. Our technical account manager is responsive to our requests for additional features or suggestions, ensuring our needs are met. I would rate the helpfulness of written explanations compared to visualizations of attack paths a nine out of ten. The explanations effectively detail how the scores are derived, making them verifiable and useful for regulatory audits. This allows us to clearly justify the chosen approach and the tool's output. Qualys TotalCloud has significantly benefited our organization by reducing our vulnerability count and overall team size. The platform's user-friendly interface has streamlined management, eliminating the need for additional staff and enabling us to efficiently handle our workload. With the support of our technical account manager and their team, we saw initial benefits within a month, achieving full utilization within six months due to the minimal learning curve. TotalCloud provides a single, prioritized view of risk. We are also evaluating Qualys' new Enterprise Threat Management module, part of their enterprise risk platform, recently launched at the Qualys Security Conference. While we are still assessing this module, the dashboards are well-designed, configurable, and useful. The single, prioritized view of risk has significantly streamlined our workload by consolidating multiple sources, resulting in an estimated 60 percent reduction in effort due to the tool's prioritization capabilities. Our use of TruRisk allows us to effectively justify our risk management processes to regulators and auditors. The system provides clear and verifiable risk assessments, which facilitates a smooth audit process and ensures compliance with regulatory requirements. The comprehensiveness of range of risk found by TruRisk Insights is an eight out of ten. The TruRisk Insights feature has helped us identify assets with high vulnerability scores, significantly impacting our business by enabling us to mitigate and prioritize risks, ultimately reducing our attack surface for critical assets. Previously, we applied the same logic to all assets, but TruRisk now allows us to pinpoint the areas of maximum risk and prioritize our efforts accordingly. We've improved our security posture by 30 to 40 percent and reduced our attack surface, consistently maintaining good security scores, such as our Bitsight Security Rating, since implementing Qualys TruRisk over two years ago.

Read full review

Himanshun Singh

IT Architect at LTIMindtree

Qualys TotalCloud offers comprehensive guidance for addressing cyber risks through clear remediation steps. The platform provides a centralized solution for vulnerability assessment, identification, and remediation, streamlining the entire security process. Over the past four years of using Qualys, I've witnessed continuous improvements to their technologies. Initially offering only VMDR, they now provide ADR, SCA policies, EDR, and numerous other features. Their detection capabilities, particularly on the Windows side, have also seen significant advancements. While previously facing challenges with Linux identification, Qualys now demonstrates accurate identification with minimal false positives. Qualys TotalCloud boasts a 99.999 percent true positive rate in Windows environments. Qualys TotalCloud offers a unified view of vulnerabilities across both Infrastructure as a Service and Software as a Service environments. Its integration of AI and anomaly detection databases significantly enhances its ability to identify and prioritize potential security threats. The unified view integrates multiple policy standards into its modules, eliminating the need to consult various sources. By simply importing the policies, we obtain the desired results. Additionally, TotalCloud can scan for vulnerabilities and assess policies, thereby removing the necessity for deploying separate tools. It efficiently gathers all the required data from a single agent. TotalCloud offers a centralized, prioritized view of risk tailored to specific needs. Customization of risk assessments is possible through factors such as vulnerability identification, organizational treatment, and asset criticality, each classified as critical, high, or medium. Further organization is achieved using tags or groups. This streamlined approach eliminates the need to consolidate multiple sources for risk prioritization. While organizations often utilize ticketing systems like ServiceNow and Jira integrated with Qualys for simplified workflows, Qualys also provides a reporting mechanism for those without a dedicated ticketing solution. Qualys TotalCloud simplifies vulnerability assessment and policy management by providing everything in one straightforward interface. TruRisk Insights, based on our critical asset assessment, provides improved results by enabling a more comprehensive understanding of risk and vulnerability, leading to better-informed decisions and more effective mitigation strategies. TruRisk Insights enhances our security posture by combining multiple factors: attack vectors, criticality assessments, asset criticality evaluations, and analysis of the top ten Common Vulnerabilities and Exposures. This comprehensive approach provides a more accurate and holistic view of our security risks.

Read full review

Qualys TotalCloud mindshare

Product category:

As of December 2024, the mindshare of Qualys TotalCloud in the Cloud-Native Application Protection Platforms (CNAPP) category stands at 1.0%, up from 0.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cloud-Native Application Protection Platforms (CNAPP)

PeerAnalyst reports

Type	Title	Date
Category	Cloud-Native Application Protection Platforms (CNAPP)	Dec 18, 2024	Download
Product	Reviews, tips, and advice from real users	Dec 18, 2024	Download
Comparison	Qualys TotalCloud vs Prisma Cloud by Palo Alto Networks	Dec 18, 2024	Download
Comparison	Qualys TotalCloud vs Wiz	Dec 18, 2024	Download
Comparison	Qualys TotalCloud vs SentinelOne Singularity Cloud Security	Dec 18, 2024	Download

Title	Rating	Mindshare	Recommending
Wiz	4.5	26.2%	100%	20 interviews Add to research
Prisma Cloud by Palo Alto Networks	4.2	20.9%	98%	108 interviews Add to research

Valuable Features

Qualys TotalCloud offers valuable features, including automatic inventory detection and extensive security posture assessment. It provides a unified view of vulnerabilities, automates threat detection, and supports custom controls. Its graphical interface simplifies scanning. Features like FlexScan and TruRisk Insights enhance cloud security, while single-agent deployment optimizes visibility. Real-time remediation enhances efficiency. Automated reporting and customized dashboards aid risk analysis. Integrations with platforms like Power BI offer comprehensive data visualization.

"The scalability is good as well. I would rate it ten out of ten."
"The best feature would be the ability to create policies. It is easy to control and update policies as required."
"Qualys TotalCloud has significantly improved our organization by automating our reporting processes, reducing the time spent on report creation from two hours to less than fifteen to twenty minutes."

Room for Improvement

Qualys TotalCloud could benefit from a simplified licensing model and improved scanning capabilities, particularly for IP domains and niche devices. Users find the interface complex and request better support, especially for PaaS environments and policy compliance. There is a need for clearer compliance features, faster vulnerability detection, and enhanced integration with AI risks. Additionally, users want more comprehensive management for both cloud and on-premises infrastructures and better support for non-Windows operating systems.

"There is a lack of data segregation according to criticality or inventory."
"In TotalCloud, I would suggest improvements in policy checks to cater to various inventory types like VPCs, subnets, S3 buckets, or IAMs. There is a lack of data segregation according to criticality or inventory."
"Two areas for improvement in Qualys TotalCloud are the speed of the public cloud platform and vulnerability detection."

ROI

Qualys TotalCloud has significantly increased efficiency, performing the work of three individuals, and reduced time and resources by up to 90%. Organizations have noted over 50% improvements and more than 40% savings in time and resources despite cost implications. Risk management is enhanced with lower risk levels and daily report benefits. They are exploring capabilities further with successful TAM and engineer collaborations, suggesting a beneficial return that could reach up to 20% cost savings.

Pricing

Qualys TotalCloud is perceived as expensive but provides substantial value and a comprehensive suite of features. Pricing is competitive in the market and often justifiable by the product's capabilities and integration options. Some users appreciate its cost-effectiveness and licensing flexibility, such as leveraging existing VMware licenses. Feedback highlights that while pricing may be higher than expected, many organizations find it aligns with their needs and continues to be a preferred choice for its advanced features.

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."

Popular Use Cases

Primary use cases of Qualys TotalCloud include vulnerability management, compliance monitoring, and security posture assessment for cloud environments like Azure, AWS, and GCP. Users engage modules like CSPM, CDR, and SDR for continuous monitoring, patching, and remediation. By integrating TotalCloud, they enhance security through automated workflows, real-time data insights, and regulatory compliance, streamlining processes for multi-cloud operations, configuration compliance, and policy management, while reducing vulnerabilities across diverse cloud infrastructure.

Service and Support

Qualys TotalCloud customer service delivers satisfactory responses and detailed solutions, although response times can be inconsistent. Many users report high satisfaction with support quality, citing timely responses and effective issue resolution, including proactive engagement in follow-up calls. Some note delays in handling technical issues and overburdened support staff, expressing the need for improved response times and consistent expertise. Overall, service satisfaction ratings vary with some users rating it highly, while others see room for improvement.

Deployment

Qualys TotalCloud's initial setup is often straightforward and efficient, requiring minimal time with clear documentation aiding the process. Some users experienced challenges with permissions and found setups complex in hybrid environments. Typically, deployment durations vary from days to a few weeks. Maintenance needs differ, with some requiring regular updates and others minimal involvement. Users found the graphical interface intuitive, making deployment manageable even for those without prior experience.

Scalability

Organizations report that Qualys TotalCloud offers impressive scalability, effectively adapting to diverse environments and user expansions. It scores high ratings consistently for handling both smaller companies and large enterprises. Users appreciate its seamless integration with existing infrastructure, supporting growth and ensuring secured assets across global locations. Feedback highlights Qualys TotalCloud's ability to manage a vast number of applications, new branches, and auto-scaling instances, pointing to a reliable, scalable experience.

Stability

Qualys TotalCloud is highly stable, often rated between eight to ten out of ten. Users frequently commend its reliability, noting minimal issues with lagging, crashing, or downtime. Support is praised for quickly resolving minor bugs, and effective maintenance schedules ensure business continuity. With 99.9% uptime, Qualys TotalCloud provides a smooth and positive experience, making it a preferred choice for those seeking robust cloud stability.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Qualys TotalCloud Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

22%

Government

12%

Financial Services Firm

12%

Manufacturing Company

Insurance Company

Educational Organization

Energy/Utilities Company

Healthcare Company

University

Media Company

Comms Service Provider

Logistics Company

Consumer Goods Company

Performing Arts

Wholesaler/Distributor

Hospitality Company

Retailer

Legal Firm

Recreational Facilities/Services Company

Real Estate/Law Firm

Transportation Company

Non Profit

Agriculture

Construction Company

Compare Qualys TotalCloud with alternative products

Learn more about Qualys TotalCloud

Features and capabilities of Qualys TotalCloud include, but are not limited to:

Discover: Complete visibility and insights into cyber-risk exposure across multi-cloud. Continuously discover and monitor all your workloads across a multi-cloud environment for a 360-degree view of your cloud footprint. Identify known and previously unknown internet-facing assets for 100% visibility and tracking of risks.

Assess: Comprehensive cloud-native assessments with FlexScanTM. Extensive scanning capabilities with Qualys FlexScan, including no-touch, agentless, API- and snapshot-based scanning, along with agent- and network-based scanning for in-depth assessment. Use these multiple scanning methods to scan a workload to get a unified and comprehensive view of vulnerabilities and misconfigurations.

Prioritize: Unified security view to prioritize cloud risk with TruRiskTM. Experience a unified risk-based view of cloud security with insights across workloads, services, and resources. Qualys TruRisk quantifies security risk by workload criticality and vulnerabilities; it correlates with ransomware, malware, and exploitation threat intelligence to prioritize, trace, and reduce risk.

Defend: Real-time protection against evolving and unknown threats with InstaProtectTM. Qualys enables continuous monitoring of all cloud assets to ensure they are protected against threats and attacks at runtime. Qualys keeps your cloud runtime safe by detecting known and unknown threats across the entire kill chain in near real-time across a multi-cloud environment.

Remediate: Fast remediation with QFlow – no code, drag-and-drop workflows. The integration of QFlow technology into Qualys TotalCloud saves security and DevOps teams valuable time and resources. Automation and no-code, drag-and-drop workflows help simplify the time-consuming operational tasks of assessing vulnerabilities on ephemeral cloud assets, alerting on high-priority threats, remediating misconfigurations, and quarantining high-risk assets.

Qualys TotalCloud was previously known as Qualys TotalCloud with FlexScan.