Qualys TotalCloud Reviews

Name: Qualys TotalCloud
Brand: Qualys
Rating: 4.4 (22 reviews)

4.4 out of 5

22 reviews
100% willing to recommend

What is Qualys TotalCloud?

TotalCloud is the Qualys approach to Cloud Native Application Protection Platform (CNAPP) for cloud infrastructure and SaaS environments. With TotalCloud, customers extend TruRisk insights (transparent cyber risk scoring methodology) from the Qualys Enterprise TruRisk Platform to their cloud environments allowing for a seamless unified view of cyber risk across on-prem, hybrid, and multi-cloud environments.

Get the Qualys TotalCloud Buyer's Guide and find out what your peers are saying about Qualys TotalCloud, Wiz, Microsoft Defender for Cloud and more!

Qualys TotalCloud is the #5 ranked solution in top SaaS Security Posture Management (SSPM) solutions, #17 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #20 ranked solution in Cloud Workload Protection Platforms, #22 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #25 ranked solution in Container Security Solutions, and #30 ranked solution in top Vulnerability Management solutions. PeerSpot users give Qualys TotalCloud an average rating of 8.8 out of 10. Based on the analysis of the 22 most recent Qualys TotalCloud reviews, the overall sentiment is positive, with a sentiment score of 7.9. (Among the highest in the category). Qualys TotalCloud is most commonly compared to Wiz: Qualys TotalCloud vs Wiz. Qualys TotalCloud is popular among the large enterprise segment, accounting for 70% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 21% of all views.

Helped 816,406 peers since 2012

Featured reviews

Sushant Samantara

IT Manager at Capgemini

TotalCloud provides written explanations to guide remediation and eliminate cyber risks. While all cloud platforms offer security features, it's challenging to consolidate them into a single dashboard. Qualys TotalCloud effectively addresses this by consolidating multiple cloud platforms and subscriptions onto one dashboard. This allows users to quickly identify and mitigate misconfigurations and risks, simplifying security management. Before implementing TotalCloud, our compliance rate was approximately 50 to 60 percent. However, after adopting the platform, it has increased to 80 to 90 percent. TotalCloud also helps us minimize attack surfaces by identifying root accounts and encryption issues, thereby enhancing our overall security by 40 percent. TotalCloud offers a unified platform for assessing vulnerabilities and threats across both IaaS and PaaS environments. This unified view has improved our cloud security posture management. We gain a single, prioritized view of risks through TotalCloud's TruRisk Insights feature. This feature considers not only the QDA score but also factors in cost and other relevant elements to provide a comprehensive risk assessment. From a potentially overwhelming list of findings, TruRisk Insights prioritizes the most critical risks, allowing us to focus our efforts and resources on addressing these high-priority tasks efficiently. A single, prioritized view of risk streamlines the risk assessment process by eliminating the need to consolidate multiple sources. This comprehensive view is instrumental in communicating with other business customers who may be unaware of potential risks or misconfigurations within their resources. By identifying and informing them of these issues, we can guide them towards compliance and ensure a more secure environment. TruRisk Insights provides valuable findings by identifying vulnerabilities and misconfigurations, displaying them on a dashboard, and offering deeper insights into the attack surface. It analyzes not only internet-facing devices but also those indirectly connected, providing a comprehensive understanding of potential risks. This is crucial because even devices not directly connected to the internet can be vulnerable if they have an attack surface. TruRisk Insights also offers mitigation strategies, making it a highly useful tool for managing security risks. With the VMDR feature enabled and the Qualys Agent installed on various assets, we can identify existing vulnerabilities. TruRisk Insights then calculates risk scores, prioritizes tasks, and presents the number of findings. This allows us to focus on mitigating high-priority vulnerabilities while deferring those with lower priority, ultimately reducing overall risk. TruRisk Insights provides device details, allowing for containerization of misconfigured devices. This process involves isolating problematic devices and rectifying misconfigurations, ultimately enhancing our security posture.

Read full review

Vikasha Sharma

Deputy Vice President at a financial services firm with 10,001+ employees

TotalCloud provides written explanations that guide remediation and eliminate risk. We have used Qualys for over ten years, and TotalCloud and TruRisk for the last two to three years, successfully leveraging their benefits. Our technical account manager is responsive to our requests for additional features or suggestions, ensuring our needs are met. I would rate the helpfulness of written explanations compared to visualizations of attack paths a nine out of ten. The explanations effectively detail how the scores are derived, making them verifiable and useful for regulatory audits. This allows us to clearly justify the chosen approach and the tool's output. Qualys TotalCloud has significantly benefited our organization by reducing our vulnerability count and overall team size. The platform's user-friendly interface has streamlined management, eliminating the need for additional staff and enabling us to efficiently handle our workload. With the support of our technical account manager and their team, we saw initial benefits within a month, achieving full utilization within six months due to the minimal learning curve. TotalCloud provides a single, prioritized view of risk. We are also evaluating Qualys' new Enterprise Threat Management module, part of their enterprise risk platform, recently launched at the Qualys Security Conference. While we are still assessing this module, the dashboards are well-designed, configurable, and useful. The single, prioritized view of risk has significantly streamlined our workload by consolidating multiple sources, resulting in an estimated 60 percent reduction in effort due to the tool's prioritization capabilities. Our use of TruRisk allows us to effectively justify our risk management processes to regulators and auditors. The system provides clear and verifiable risk assessments, which facilitates a smooth audit process and ensures compliance with regulatory requirements. The comprehensiveness of range of risk found by TruRisk Insights is an eight out of ten. The TruRisk Insights feature has helped us identify assets with high vulnerability scores, significantly impacting our business by enabling us to mitigate and prioritize risks, ultimately reducing our attack surface for critical assets. Previously, we applied the same logic to all assets, but TruRisk now allows us to pinpoint the areas of maximum risk and prioritize our efforts accordingly. We've improved our security posture by 30 to 40 percent and reduced our attack surface, consistently maintaining good security scores, such as our Bitsight Security Rating, since implementing Qualys TruRisk over two years ago.

Read full review

Harshal Mahajan

Senior Information Security Consultant at LTIMindtree

The agent and agentless scanning in TotalCloud, particularly the FlexScan method, is incredibly valuable. With traditional scanning approaches, we had to give IP ranges and whitelist IPs. All that is now simplified. FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans. We need to do some configuration in the connector, and it handles the rest of the things. Data compliance, vulnerability assessment, and remediation parts are taken care of by Qualys. We get all the required data. The connector collects all the metadata for our cloud environment. Scans are performed automatically. There is no intervention from our side.

Read full review

Qualys TotalCloud mindshare

Product category:

As of November 2024, the mindshare of Qualys TotalCloud in the Cloud-Native Application Protection Platforms (CNAPP) category stands at 0.8%, up from 0.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cloud-Native Application Protection Platforms (CNAPP)

Key learnings from peers

Last updated Nov 18, 2024

Valuable Features

Qualys TotalCloud's most valuable features include automatic inventory detection, vulnerability management, real-time protection, dashboard visualization, daily reporting, extensibility, CSPM, FlexScan, IoT scanning, API integration, centralized platform management, security posture assessment, TruRisk insights, web application scanning, seamless integration, agent versatility, and automation. It provides comprehensive asset visibility, advanced risk analysis, streamlined patching, and remediation. Users find its user-friendly interface, powerful controls, and enhanced compliance capabilities particularly beneficial for efficient cloud security management.

"Qualys TotalCloud has significantly reduced our workload in terms of managing risks, helping us to be more efficient and save substantial resources."
"I would rate Qualys TotalCloud ten out of ten."
"Its dashboards are brilliant. It provides in-depth insights."

Room for Improvement

Qualys TotalCloud requires improvements in cloud licensing clarity and IP scanning capabilities. Enhancing policy compliance features, such as disabling default policies and scheduled reporting, would be beneficial. Users seek Windows OS support for container security and better integration with on-premises systems. The user interface could be simplified, and vulnerability scanning for PaaS environments needs enhancement. Support services and cost competitiveness also need attention. Broader geographic compliance coverage and addressing AI-related risks would further enhance its offerings.

"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"Qualys TotalCloud needs to improve its accuracy for non-Windows operating systems."
"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."

ROI

Qualys TotalCloud has enabled users to save significant time and resources, equating to the work typically done by several personnel. Its capability to remediate vulnerabilities before issues arise and the generation of daily reports have enhanced efficiency by over 50%. Users report a 40% reduction in both resources and time. Financial teams manage cost specifics, but indications point to beneficial ROI, with estimated savings of twenty to forty percent in expenses.

Pricing

Many users find Qualys TotalCloud pricing competitive and cost-effective, especially for organizations leveraging existing licenses. While some consider it expensive, others value its comprehensive functionality and licensing flexibility, which often justifies the cost. It is often integrated as part of broader enterprise solutions, aiding in managing expenses. Despite mixed perceptions on its affordability, most agree its offerings compensate for the price, making it an attractive option for enterprises seeking robust security solutions.

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

Popular Use Cases

Organizations primarily use Qualys TotalCloud for cloud security and management across platforms like Azure, AWS, and GCP. It enhances vulnerability management, compliance, and security posture through automated workflows, tagging, and remedial actions. Features include Cloud Security Posture Management and vulnerability assessments to secure cloud and on-premises infrastructures, containers, and workloads, offering insights into security compliance and helping prioritize risk mitigation. Qualys eliminates the need for physical resources, utilizing cloud-based architecture for streamlined operations.

Service and Support

Qualys TotalCloud's customer service is generally rated highly, with quick response times and knowledgeable staff. Some users appreciate detailed issue resolution and proactive follow-up, while others find response delays and varying support quality frustrating. Availability and closure times can be inconsistent, affecting user satisfaction. Escalation options are available, and technical support is praised for its expertise. Service has improved over the years, though back-end consultations occasionally lead to delays. Customization assistance is well-received.

Deployment

Deployment of Qualys TotalCloud is mostly straightforward and user-friendly, often requiring minimal maintenance. Some users faced challenges due to permissions and infrastructure setup, especially involving Azure or AWS. Larger setups took more time, sometimes involving multiple team members. In smaller environments or when admin rights were available, deployment was quicker, sometimes within days. GUI interface and clear documentation helped ease the process, with some users requiring little maintenance or support after initial setup.

Scalability

Qualys TotalCloud effectively scales for businesses regardless of size, with most users rating its scalability between eight and ten out of ten. Organizations of various scales, from small teams to global enterprises with extensive deployments, report seamless adaptability and growth. Many have expanded their user base, locations, and managed assets without facing scalability issues, while some praise its capacity to handle thousands of web applications and increased cloud instance deployments effortlessly.

Stability

Qualys TotalCloud is praised for its stability, often rated eight to ten out of ten. Users report it as extremely stable, with no major issues such as crashes or downtime. Occasional lag or minor bugs like report download errors are quickly resolved by support. Monitoring ensures reliability and security. It offers 99.9% uptime, making it a strong choice for users seeking a stable cloud experience, as it performs well consistently without significant issues.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Qualys TotalCloud Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

21%

Financial Services Firm

13%

Government

12%

Manufacturing Company

10%

Insurance Company

Educational Organization

Energy/Utilities Company

Healthcare Company

University

Comms Service Provider

Logistics Company

Media Company

Consumer Goods Company

Retailer

Performing Arts

Wholesaler/Distributor

Hospitality Company

Legal Firm

Real Estate/Law Firm

Transportation Company

Agriculture

Construction Company

Recreational Facilities/Services Company

Compare Qualys TotalCloud with alternative products

Learn more about Qualys TotalCloud

Features and capabilities of Qualys TotalCloud include, but are not limited to:

Discover: Complete visibility and insights into cyber-risk exposure across multi-cloud. Continuously discover and monitor all your workloads across a multi-cloud environment for a 360-degree view of your cloud footprint. Identify known and previously unknown internet-facing assets for 100% visibility and tracking of risks.

Assess: Comprehensive cloud-native assessments with FlexScanTM. Extensive scanning capabilities with Qualys FlexScan, including no-touch, agentless, API- and snapshot-based scanning, along with agent- and network-based scanning for in-depth assessment. Use these multiple scanning methods to scan a workload to get a unified and comprehensive view of vulnerabilities and misconfigurations.

Prioritize: Unified security view to prioritize cloud risk with TruRiskTM. Experience a unified risk-based view of cloud security with insights across workloads, services, and resources. Qualys TruRisk quantifies security risk by workload criticality and vulnerabilities; it correlates with ransomware, malware, and exploitation threat intelligence to prioritize, trace, and reduce risk.

Defend: Real-time protection against evolving and unknown threats with InstaProtectTM. Qualys enables continuous monitoring of all cloud assets to ensure they are protected against threats and attacks at runtime. Qualys keeps your cloud runtime safe by detecting known and unknown threats across the entire kill chain in near real-time across a multi-cloud environment.

Remediate: Fast remediation with QFlow – no code, drag-and-drop workflows. The integration of QFlow technology into Qualys TotalCloud saves security and DevOps teams valuable time and resources. Automation and no-code, drag-and-drop workflows help simplify the time-consuming operational tasks of assessing vulnerabilities on ephemeral cloud assets, alerting on high-priority threats, remediating misconfigurations, and quarantining high-risk assets.

Qualys TotalCloud was previously known as Qualys TotalCloud with FlexScan.