Try our new research platform with insights from 80,000+ expert users

AWS Security Hub vs Qualys TotalCloud comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Customer Service

Sentiment score
7.0
AWS Security Hub support is praised for its prompt technical assistance but could improve email response efficiency.
Sentiment score
8.2
Qualys TotalCloud customer service is praised for responsiveness and knowledge but criticized for inconsistency and long response times.
AWS ProLogitech Support is very helpful and timely, especially at the enterprise level.
They are helpful, respond to my queries, and can answer any question.
Qualys's tech support is highly responsive, providing multiple ways to interact with them.
Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA.
 

Room For Improvement

Sentiment score
4.5
AWS Security Hub needs real-time scanning improvements, better integrations, enhanced compliance, cost control, and user-friendly features.
Sentiment score
5.6
Qualys TotalCloud needs simplified licensing, better dashboard reporting, Windows support, enhanced UI, and improved cost-effectiveness for wider appeal.
A more user-friendly experience programmatically in writing queries and configuring custom security rules.
Ideally, the scanner should automatically detect and scan all subdomains, even if not explicitly defined, ensuring comprehensive vulnerability assessment.
An area for improvement would be to focus on risks related to AI, such as large language models and potential data leakage.
The response part of the Cloud Detection and Response (CDR) module can be improved.
 

Scalability Issues

Sentiment score
7.6
AWS Security Hub is scalable and efficient for multi-account operations but less effective in multi-cloud environments.
Sentiment score
8.8
Qualys TotalCloud is highly scalable, supporting diverse businesses and locations, with consistently high ratings for handling expanding workloads.
Qualys TotalCloud receives a perfect ten out of ten for scalability due to its effortless setup of new instances.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
Our organization currently uses it to manage over 1200 web applications.
 

Setup Cost

Sentiment score
5.0
AWS Security Hub offers flexible, cost-effective subscription models, appealing to enterprises for its affordability and included cloud security features.
Sentiment score
7.7
Qualys TotalCloud offers high but justified pricing, seen as competitive and valuable with flexible licensing and comprehensive features.
I would rate the price of Qualys TotalCloud eight out of ten with ten being the most expensive.
Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive.
Pricing is managed by our finance team; however, Qualys TotalCloud offers cost-effective licensing flexibility.
 

Stability Issues

Sentiment score
8.3
AWS Security Hub is highly regarded for its stability, frequent updates, and reliable performance, though improvement is suggested by some.
Sentiment score
8.6
Qualys TotalCloud is highly rated for stability and reliability, ensuring smooth, consistent performance with prompt support for any issues.
Overall, the support provided has been excellent.
It is a stable solution, which is why we chose it.
Continuous monitoring is crucial to ensure system stability and avoid vulnerabilities or threats.
 

Valuable Features

Sentiment score
7.6
AWS Security Hub enhances cloud security by integrating services, offering centralized management, real-time alerts, and compliance evaluations.
Sentiment score
8.3
Qualys TotalCloud enhances security with automatic vulnerability detection, seamless integration, comprehensive risk management, and advanced monitoring capabilities.
The most beneficial aspect of Security Hub is its proactive capability, allowing us to identify potential security issues before they escalate.
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
It will help cybersecurity professionals monitor the cloud and find vulnerabilities.
We are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs.
 

Categories and Ranking

AWS Security Hub
Ranking in Cloud Security Posture Management (CSPM)
14th
Average Rating
7.6
Reviews Sentiment
7.2
Number of Reviews
20
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (5th)
Qualys TotalCloud
Ranking in Cloud Security Posture Management (CSPM)
22nd
Average Rating
8.8
Reviews Sentiment
7.9
Number of Reviews
22
Ranking in other categories
Vulnerability Management (30th), Container Security (25th), Cloud Workload Protection Platforms (CWPP) (20th), SaaS Security Posture Management (SSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (17th)
 

Mindshare comparison

As of November 2024, in the Cloud Security Posture Management (CSPM) category, the mindshare of AWS Security Hub is 5.8%, up from 4.2% compared to the previous year. The mindshare of Qualys TotalCloud is 1.0%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Security Posture Management (CSPM)
 

Featured Reviews

CobusFrey - PeerSpot reviewer
Not only does it easily integrate with third-party tools but also allows auto synchronization of logs
AWS Security Hub has advanced quite a bit over the last couple of years. The features are quite rich now. Before purchasing, one should develop an understanding of the product. I believe AWS Security Hub is one of the most friendly solutions for integration with third-party tools. I find the integration of AWS Security Hub to be the easiest with tools from Microsoft and a bit difficult with Google solutions. AWS Security Hub is compliant in many different ways. The development business I am part of is SOC compliant for AWS Security Hub, while the banks our organization works with have been PCI compliant for AWS Security Hub for three years. I would definitely recommend AWS Security Hub to others, yet I would also inquire about their purpose and knowledge of cloud solutions. If you know how to use AWS Security Hub, it can be a great solution to work with. The solution is more suitable for people working in the cloud instead of on-premises. I would rate AWS Security Hub a nine out of ten.
Sushant Samantara - PeerSpot reviewer
Helps us minimize attack surfaces by identifying root accounts and encryption issues
TotalCloud provides written explanations to guide remediation and eliminate cyber risks. While all cloud platforms offer security features, it's challenging to consolidate them into a single dashboard. Qualys TotalCloud effectively addresses this by consolidating multiple cloud platforms and subscriptions onto one dashboard. This allows users to quickly identify and mitigate misconfigurations and risks, simplifying security management. Before implementing TotalCloud, our compliance rate was approximately 50 to 60 percent. However, after adopting the platform, it has increased to 80 to 90 percent. TotalCloud also helps us minimize attack surfaces by identifying root accounts and encryption issues, thereby enhancing our overall security by 40 percent. TotalCloud offers a unified platform for assessing vulnerabilities and threats across both IaaS and PaaS environments. This unified view has improved our cloud security posture management. We gain a single, prioritized view of risks through TotalCloud's TruRisk Insights feature. This feature considers not only the QDA score but also factors in cost and other relevant elements to provide a comprehensive risk assessment. From a potentially overwhelming list of findings, TruRisk Insights prioritizes the most critical risks, allowing us to focus our efforts and resources on addressing these high-priority tasks efficiently. A single, prioritized view of risk streamlines the risk assessment process by eliminating the need to consolidate multiple sources. This comprehensive view is instrumental in communicating with other business customers who may be unaware of potential risks or misconfigurations within their resources. By identifying and informing them of these issues, we can guide them towards compliance and ensure a more secure environment. TruRisk Insights provides valuable findings by identifying vulnerabilities and misconfigurations, displaying them on a dashboard, and offering deeper insights into the attack surface. It analyzes not only internet-facing devices but also those indirectly connected, providing a comprehensive understanding of potential risks. This is crucial because even devices not directly connected to the internet can be vulnerable if they have an attack surface. TruRisk Insights also offers mitigation strategies, making it a highly useful tool for managing security risks. With the VMDR feature enabled and the Qualys Agent installed on various assets, we can identify existing vulnerabilities. TruRisk Insights then calculates risk scores, prioritizes tasks, and presents the number of findings. This allows us to focus on mitigating high-priority vulnerabilities while deferring those with lower priority, ultimately reducing overall risk. TruRisk Insights provides device details, allowing for containerization of misconfigured devices. This process involves isolating problematic devices and rectifying misconfigurations, ultimately enhancing our security posture.
report
Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
816,406 professionals have used our research since 2012.
 

Comparison Review

it_user186927 - PeerSpot reviewer
Feb 16, 2015
Cybereason vs. Interset vs. SQRRL
Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
13%
Manufacturing Company
9%
Government
7%
Computer Software Company
21%
Financial Services Firm
13%
Government
12%
Manufacturing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?
We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...
What do you like most about AWS Security Hub?
The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.
What needs improvement with AWS Security Hub?
AWS Security Hub could improve its guidance links to resolve findings related to multiple resources. The implementation of more guidance links could enhance issue resolution. Additionally, shorteni...
What is your experience regarding pricing and costs for Qualys TotalCloud?
The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription.
What needs improvement with Qualys TotalCloud?
I have already put in a few feature requests. There are features that I would like to have. I would like the ability to disable certain default built-in policies as they can be misleading when crea...
What is your primary use case for Qualys TotalCloud?
We use Qualys TotalCloud for compliance monitoring and compliance checking.
 

Also Known As

SQRRL
Qualys TotalCloud with FlexScan
 

Overview

 

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com
Information Not Available
Find out what your peers are saying about AWS Security Hub vs. Qualys TotalCloud and other solutions. Updated: October 2024.
816,406 professionals have used our research since 2012.