Qualys TotalCloud Reviews

Name: Qualys TotalCloud
Brand: Qualys
Rating: 4 (3 reviews)

4.3 out of 5

3 reviews
100% willing to recommend

What is Qualys TotalCloud?

TotalCloud is the Qualys approach to Cloud Native Application Protection Platform (CNAPP) for cloud infrastructure and SaaS environments. With TotalCloud, customers extend TruRisk insights (transparent cyber risk scoring methodology) from the Qualys Enterprise TruRisk Platform to their cloud environments allowing for a seamless unified view of cyber risk across on-prem, hybrid, and multi-cloud environments.

Get the Cloud-Native Application Protection Platforms (CNAPP) Buyer's Guide and find out what your peers are saying about Qualys TotalCloud, Wiz, Microsoft Defender for Cloud and more!

Qualys TotalCloud is the #5 ranked solution in top SaaS Security Posture Management (SSPM) solutions, #17 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #20 ranked solution in Cloud Workload Protection Platforms, #22 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #25 ranked solution in Container Security Solutions, and #30 ranked solution in top Vulnerability Management solutions. PeerSpot users give Qualys TotalCloud an average rating of 8.6 out of 10. Based on the analysis of the 3 most recent Qualys TotalCloud reviews, the overall sentiment is positive, with a sentiment score of 7.3. (Among the highest in the category). Qualys TotalCloud is most commonly compared to Wiz: Qualys TotalCloud vs Wiz. Qualys TotalCloud is popular among the large enterprise segment, accounting for 71% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 22% of all views.

Buyer's Guide

Cloud-Native Application Protection Platforms (CNAPP)

October 2024

Get the category report

Helped 814,763 peers since 2012

Featured reviews

Brad Mathis

Employee-Owner, Senior Consultant, Information Security at Keller Schroeder

TotalCloud offers written explanations to guide us through fixing security vulnerabilities and reducing cyber risks. For instance, if we click on a finding like "ensure public access level is set to private for block containers" a CIS Microsoft Azure Foundations benchmark, TotalCloud will not only tell us which specific container is failing but also provide remediation steps. These steps include a clear, step-by-step guide to fix the issue directly from the Azure console or command line, making it easy to address security risks. After deploying TotalCloud and configuring the connectors for Azure, we quickly gained visibility into our cloud security posture. While the initial setup gathers data, the overall process is swift and delivers immediate insights. TotalCloud offers a unified way to assess vulnerabilities and threats across both Asset-as-a-service and software-as-a-service applications. While an additional module, Software Detection Response, is required for the same level of detail in SaaS assessments, it integrates seamlessly with TotalCloud and gathers information through the Azure connector. Similarly, the SDR component is used for Microsoft 365 environments, consolidating all threat data into a single report. It has significantly enhanced our posture management insight and awareness. It provides a valuable third-party perspective, highlighting potential security issues we might have missed with Microsoft's built-in settings. This independent view offers a more objective assessment, similar to having a security expert unaffiliated with Microsoft or any specific platform. TotalCloud summarizes our cloud security risks in a single view, prioritizing the most important ones. It allows us to generate reports based on severity levels (critical, high, medium) and offers pre-built dashboards like the Azure one, which highlights the most critical control failures along with the number of affected resources. This way, we can focus on addressing the most urgent issues first. We can use TruRisk in TotalCloud to view a risk score for our virtual machines. This score indicates the overall security posture of the machine, along with details on identified vulnerabilities confirmed and potential. While the TruRisk score is a valuable integration, I haven't had the chance to fully explore its functionalities in our environment yet.

Read full review

Robert Gauna

Information Technology Security Analyst at a financial services firm with 10,001+ employees

TotalCloud provides written explanations to help guide remediation paths and eliminate cyber risk. It is very satisfactory. I could see its benefits immediately after the deployment. I was using another product, and I was trying to switch over to this product. TruRisk Insights provides a good view of the situation from different perspectives, such as the policy compliance side, the vulnerability side, and a few others. It gives us a better view of what is going on versus just piecemeal from one UI to another and then trying to make sense and sorting things or combining data together. TruRisk Insights feature found a small number of assets with high vulnerability scores. I reported them to the owner, and then they are going to work on it. TruRisk Insights are a good indicator, but long term, the managers still want to use the ServiceNow integration. We have this in our back pocket to verify.

Read full review

reviewer2540010

IT Engineer at a consultancy with 501-1,000 employees

Qualys TotalCloud helps identify vulnerabilities by providing written explanations to help guide remediation paths and eliminate cyber risk. The explanations are great compared to the visualizations of attack paths. The benefits of Qualys TotalCloud are significant. It lists all vulnerabilities, allowing us to patch them effectively. This safeguards the entire company and its environment, offering comprehensive protection. Qualys TotalCloud provides a single prioritized view of risk. Qualys TotalCloud has saved us 30 to 40 percent of time and costs. The TrueRisk Insights feature helps us keep our environment safe and to mitigate vulnerabilities. TrueRisk Insights found a smaller number of assets with high vulnerability scores. Using information from TrueRisk Insights, we informed our clients about vulnerabilities and immediately resolved them.

Read full review

Qualys TotalCloud mindshare

Product category:

As of November 2024, the mindshare of Qualys TotalCloud in the Cloud-Native Application Protection Platforms (CNAPP) category stands at 0.8%, up from 0.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cloud-Native Application Protection Platforms (CNAPP)

Key learnings from peers

Last updated Oct 29, 2024

Valuable Features

Users have highlighted Qualys TotalCloud's comprehensive security coverage, easy integration with existing systems, automated compliance checks, detailed vulnerability assessments, and seamless deployment process. They appreciate its scalability, real-time monitoring, user-friendly interface, and powerful reporting tools. Users also value the platform's ability to identify and remediate threats quickly, along with its efficient asset management capabilities. The flexibility and customization options offered by Qualys TotalCloud are also frequently mentioned as significant strengths.

"The most valuable feature is extensibility."
"Its excellent graphical interface makes the scanning process simple."
"While automatic inventory detection upon connection is a helpful feature, a truly valuable capability would be assessing an environment's security posture against Azure and CIS best practices."

Room for Improvement

Several users noted that Qualys TotalCloud needs improved customer support and more detailed documentation. Some mentioned that the reporting capabilities could be more comprehensive and customizable, while a few expressed the need for better integration with third-party tools. Additionally, certain users found that the initial setup process could be simplified and that regular updates should include more new features rather than just bug fixes and minor enhancements.

"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."
"Qualys TotalCloud needs to enhance its scanning capabilities in the IP domain, as it currently lacks the functionality to resolve IPs to their corresponding domain names."
"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."

ROI

Users experienced significant ROI from Qualys TotalCloud through cost savings in infrastructure management, enhanced security measures, streamlined compliance processes, and reduced manual efforts. Companies reported increased efficiency in identifying and mitigating vulnerabilities, thus preventing potential breaches. The scalable nature of Qualys TotalCloud enabled businesses to adjust resources according to demand, which further optimized operational costs. The easy integration with existing systems was an added advantage, facilitating a smooth transition and quick deployment.

Pricing

Qualys TotalCloud provides scalable cloud security tools. Pricing follows a subscription model, typically starting from $30,000 per year for mid-sized enterprises. Users often mention costs increase significantly with added features and higher data volumes. They appreciate the transparent pricing model but note potential additional costs for customization and support services.

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"Qualys TotalCloud is expensive."
"TotalCloud's price is about right where I would expect it to be."

Popular Use Cases

Users primarily utilize Qualys TotalCloud for comprehensive cloud asset security, covering vulnerability management, compliance, and workload protection. It effectively identifies risks and provides actionable insights, facilitating seamless integration with existing workflows. Qualys TotalCloud is valued for its scalability, real-time threat detection, and ease of deployment, ensuring robust cloud infrastructure protection.

Service and Support

Users consistently praise Qualys TotalCloud for its responsive customer service and knowledgeable support team. They appreciate the prompt assistance and effective problem-solving capabilities. Users frequently mention that Qualys TotalCloud staff is well-informed and provides clear guidance. Customers acknowledge the team’s expertise and valuable insights, enhancing their experience. Many find the support reliable and accessible, significantly contributing to their satisfaction with the platform.

Deployment

Users indicate that Qualys TotalCloud's initial setup is straightforward and efficient. They appreciate the clear instructions provided, which make the implementation process smooth. Many highlight the easy integration with existing systems and the quick deployment time. Setup is described as user-friendly with minimal complications, allowing teams to start utilizing the platform's features promptly. Users consistently express satisfaction with how quickly they can get Qualys TotalCloud up and running.

Scalability

Qualys TotalCloud is highly praised for its scalability, handling increasing workloads with ease. Users appreciated the cloud-centric approach, mentioning seamless integration with existing infrastructure. Feedback highlighted its adaptability for various environments, providing reliable performance even as needs grow. Flexibility allows businesses to scale up or down quickly without issues. Many noted its efficient resource management, making it ideal for both small setups and large enterprises.

Stability

Users mention that Qualys TotalCloud has remarkable stability and handles heavy workloads efficiently. It performs consistently with minimal downtime and is known for its reliability. Users appreciate its ability to integrate seamlessly with existing infrastructure. Frequent updates do not impact its performance negatively. It accommodates scaling demands well and maintains high performance even in complex environments, making it suitable for various enterprise-level tasks.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Cloud-Native Application Protection Platforms (CNAPP) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

22%

Financial Services Firm

12%

Government

12%

Manufacturing Company

10%

Insurance Company

Energy/Utilities Company

Educational Organization

Healthcare Company

University

Logistics Company

Comms Service Provider

Media Company

Retailer

Consumer Goods Company

Wholesaler/Distributor

Legal Firm

Performing Arts

Real Estate/Law Firm

Transportation Company

Hospitality Company

Agriculture

Construction Company

Recreational Facilities/Services Company

Compare Qualys TotalCloud with alternative products

Learn more about Qualys TotalCloud

Features and capabilities of Qualys TotalCloud include, but are not limited to:

Discover: Complete visibility and insights into cyber-risk exposure across multi-cloud. Continuously discover and monitor all your workloads across a multi-cloud environment for a 360-degree view of your cloud footprint. Identify known and previously unknown internet-facing assets for 100% visibility and tracking of risks.

Assess: Comprehensive cloud-native assessments with FlexScanTM. Extensive scanning capabilities with Qualys FlexScan, including no-touch, agentless, API- and snapshot-based scanning, along with agent- and network-based scanning for in-depth assessment. Use these multiple scanning methods to scan a workload to get a unified and comprehensive view of vulnerabilities and misconfigurations.

Prioritize: Unified security view to prioritize cloud risk with TruRiskTM. Experience a unified risk-based view of cloud security with insights across workloads, services, and resources. Qualys TruRisk quantifies security risk by workload criticality and vulnerabilities; it correlates with ransomware, malware, and exploitation threat intelligence to prioritize, trace, and reduce risk.

Defend: Real-time protection against evolving and unknown threats with InstaProtectTM. Qualys enables continuous monitoring of all cloud assets to ensure they are protected against threats and attacks at runtime. Qualys keeps your cloud runtime safe by detecting known and unknown threats across the entire kill chain in near real-time across a multi-cloud environment.

Remediate: Fast remediation with QFlow – no code, drag-and-drop workflows. The integration of QFlow technology into Qualys TotalCloud saves security and DevOps teams valuable time and resources. Automation and no-code, drag-and-drop workflows help simplify the time-consuming operational tasks of assessing vulnerabilities on ephemeral cloud assets, alerting on high-priority threats, remediating misconfigurations, and quarantining high-risk assets.

Qualys TotalCloud was previously known as Qualys TotalCloud with FlexScan.