AWS Security Hub vs Qualys TotalCloud comparison

Amazon Web Services (AWS) and Qualys are both solutions in the Cloud Security Posture Management (CSPM) category. Amazon Web Services (AWS) is ranked #16 with an average rating of 7.6, while Qualys is ranked #8 with an average rating of 8.7. Amazon Web Services (AWS) holds a 3.9% mindshare in CSPM, compared to Qualys’s 1.3% mindshare. Additionally, 89% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 100% of Qualys users who would recommend it.

AWS Security Hub

Read 26 AWS Security Hub reviews

7,113 Views
3,130 Comparison Views

89% willing to recommend

Qualys TotalCloud

Read 34 Qualys TotalCloud reviews

2,622 Views
1,416 Comparison Views

100% willing to recommend

AWS Security Hub

Qualys TotalCloud

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between AWS Security Hub and Qualys TotalCloud based on real PeerSpot user reviews.

Find out in this report how the two Cloud Security Posture Management (CSPM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed AWS Security Hub vs. Qualys TotalCloud Report (Updated: December 2025).

Buyer's Guide

AWS Security Hub vs. Qualys TotalCloud

December 2025

Download the complete report

Helped 880,511 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Security Hub

Ranking in Cloud Security Posture Management (CSPM)

16th

Average Rating

7.6

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Security Orchestration Automation and Response (SOAR) (6th)

Qualys TotalCloud

Ranking in Cloud Security Posture Management (CSPM)

8th

Average Rating

8.6

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Vulnerability Management (10th), Container Security (12th), Cloud Workload Protection Platforms (CWPP) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)

Mindshare comparison

As of January 2026, in the Cloud Security Posture Management (CSPM) category, the mindshare of AWS Security Hub is 3.9%, down from 4.6% compared to the previous year. The mindshare of Qualys TotalCloud is 1.3%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM) Market Share Distribution
Product	Market Share (%)
Qualys TotalCloud	1.3%
AWS Security Hub	3.9%
Other	94.8%

Cloud Security Posture Management (CSPM)

Featured Reviews

Karthik Ekambaram

Director at Scybers

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Read full review

Arshad N. R.

Cyber Security Specialist at UBS Financial

A centralized tool for vulnerability and misconfiguration management in a multiple cloud environment

Qualys TotalCloud provides written explanations to help guide the remediation paths and eliminate cyber risk. We are using TruRisk for the remediations. The TruRisk shows anything critical, and we can then focus on that. We also assess manually whether an asset is a critical target or not. Qualys TotalCloud provides a single, prioritized view of risk. We are using CIS-CAT standards to harden our clouds, such as AWS, Google Cloud, and Azure. We are able to analyze the scans and identify which policies have failed and how we can remediate them. We can customize policies as per our organization's requirements. That is very helpful for us. With the TruRisk Insights feature, security has significantly improved. In six months of using it, we see that everything is under control. We've solved many problems related to asset management, cloud configuration, and the new asset identification. If an application team has onboarded any cloud asset, we can see that. We have that information now.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"AWS Security Hub brings many features into one table that is quite useful, and the app team finds it easier to see what is missing."

"The most beneficial aspect of Security Hub is its proactive capability, allowing us to identify potential security issues before they escalate."

"One of the most effective features of AWS Security Hub is the easy access to a dashboard with a ready-to-use security score."

"AWS Security Hub's unified dashboard does help streamline my process of identifying vulnerabilities, but we don't use Inspector."

"Security Hub provides insightful information about what is running and where there might be weaknesses."

"The most beneficial aspect of Security Hub is its proactive capability, allowing us to identify potential security issues before they escalate."

"The advantage is that it is cloud-native, and we do not need to install agents or sensors to find findings."

"I rate Security Hub ten out of ten for stability."

More AWS Security Hub pros

"TotalCloud's best feature is the integration of cloud accounts. It helps with the risk and security posture management of our cloud infrastructure."

"Qualys TotalCloud has helped us view our risk structure, vulnerabilities, and security posture."

"The agent and agentless scanning in TotalCloud, particularly the FlexScan method, is incredibly valuable. With traditional scanning approaches, we had to give IP ranges and whitelist IPs. All that is now simplified. FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans."

"Qualys TotalCloud provides a single, prioritized view based on requirements such as identifying the most vulnerable assets and calculating the average time to remediate vulnerabilities."

"I found the initial setup user-friendly."

"TotalCloud has been excellent in providing us with immediate access to all the products and features we need, such as CSPM, TruRisk Insights, and compliance reports, including CIS and HIPAA."

"The best feature would be the ability to create policies. It is easy to control and update policies as required."

"Qualys TotalCloud has significantly reduced our workload in terms of managing risks, helping us to be more efficient and save substantial resources."

More Qualys TotalCloud pros

Cons

"We need more granular-level customizations to enable or disable the rules in AWS Security Hub."

"AWS Security Hub's configuration and integration are areas where it lacks and needs to improve."

"The user interface, graphs, and dashboards of the solution could improve in the future. They are not very sophisticated and could use an update."

"Security needs to be measured based on their own criteria. We can't add custom criteria specific to our organization. For example, having an S3 bucket publicly available might be flagged as a critical alert, but it might not be critical in a sandbox environment. So, it gets flagged as critical, which becomes a false positive. So, customization options and creating custom dashboards would be areas for improvement."

"The solution lacks self-sufficiency."

"The solution should be easier to learn and use"

"Shortening the response time for support tickets, particularly in production issues, could make the service more efficient."

"Many findings are too generic or irrelevant to the environment, which can lead to false positives."

More AWS Security Hub cons

"There is a lack of data segregation according to criticality or inventory."

"The patching process with Qualys Patch Management, which is part of TotalCloud, does not cover installing certain prerequisites on the servers or workstations."

"In TotalCloud, I would suggest improvements in policy checks to cater to various inventory types like VPCs, subnets, S3 buckets, or IAMs. There is a lack of data segregation according to criticality or inventory."

"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."

"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."

"Qualys TotalCloud needs to enhance its scanning capabilities in the IP domain, as it currently lacks the functionality to resolve IPs to their corresponding domain names."

"Qualys's ticketing system can be confusing when assigning tasks to individuals, and support could be improved by offering instant call solutions with engineers in addition to ticket replies."

"We would like to see Windows-based sensors available in Qualys, as this would make the platform more versatile and support a broader range of environments."

More Qualys TotalCloud cons

Pricing and Cost Advice

"Security Hub is not an expensive solution."

"AWS Security Hub's pricing is pretty reasonable."

"The pricing is fine. It is not an expensive tool."

"The price of AWS Security Hub is average compared to other solutions."

"There are multiple subscription models, like yearly, monthly, and packaged."

"The price of the solution is not very competitive but it is reasonable."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

"Qualys TotalCloud offers cost-effective licensing flexibility."

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."

More Qualys TotalCloud pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

880,511 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at a comms service provider with 10,001+ employees

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Computer Software Company

11%

Manufacturing Company

11%

Government

Financial Services Firm

16%

Manufacturing Company

11%

Computer Software Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	5
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	2
Large Enterprise	25

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...

See all answers

What do you like most about AWS Security Hub?

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.

See all answers

What needs improvement with AWS Security Hub?

See all answers

What is your experience regarding pricing and costs for Qualys TotalCloud?

Regarding pricing and setup cost, it was not the most expensive. While checking tools for container scanning, we considered Wiz and a startup, but we believe having one tool for as much as possible...

See all answers

What needs improvement with Qualys TotalCloud?

I think Qualys TotalCloud needs to improve its handling of zero-day vulnerabilities and supply chain management because modern ransomware attacks not only target prime critical infrastructures but ...

See all answers

What is your primary use case for Qualys TotalCloud?

I have approximately three to four years of experience working with Qualys TotalCloud. I have been using Qualys TotalCloud while working with EY, Ernst & Young, where I utilize cloud tools for ...

See all answers

Comparisons

Microsoft Sentinel vs AWS Security Hub

Compared 35% of the time

Wiz vs AWS Security Hub

Compared 9% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 8% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 5% of the time

Splunk Enterprise Security vs AWS Security Hub

Compared 2% of the time

More AWS Security Hub Competitors

Wiz vs Qualys TotalCloud

Compared 23% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 11% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 7% of the time

Qualys VMDR vs Qualys TotalCloud

Compared 5% of the time

Nucleus vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Product Reports

Buyer's Guide

AWS Security Hub

January 2026

Download AWS Security Hub product report

Buyer's Guide

Qualys TotalCloud

January 2026

Download Qualys TotalCloud product report

Also Known As

SQRRL

Qualys TotalCloud with FlexScan

Overview

AWS Security Hub is a comprehensive security service that provides a centralized view of security alerts and compliance status across an AWS environment. It collects data from various AWS services, partner solutions, and AWS Marketplace products to provide a holistic view of security posture. With Security Hub, users can quickly identify and prioritize security issues, automate compliance checks, and streamline remediation efforts.

The service offers a range of features including continuous monitoring, threat intelligence integration, and customizable dashboards. It also provides automated insights and recommendations to help users improve their security posture. Security Hub integrates with other AWS services like Amazon GuardDuty, AWS Config, and AWS Macie to provide a unified security experience. Additionally, it supports integration with third-party security tools through its API, allowing users to leverage their existing security investments.

With its user-friendly interface and powerful capabilities, AWS Security Hub is a valuable tool for organizations looking to enhance their security and compliance posture in the cloud.

Amazon Web Services (AWS)

TotalCloud is the Qualys approach to Cloud Native Application Protection Platform (CNAPP) for cloud infrastructure and SaaS environments. With TotalCloud, customers extend TruRisk insights (transparent cyber risk scoring methodology) from the Qualys Enterprise TruRisk Platform to their cloud environments allowing for a seamless unified view of cyber risk across on-prem, hybrid, and multi-cloud environments.

Features and capabilities of Qualys TotalCloud include, but are not limited to:

Discover: Complete visibility and insights into cyber-risk exposure across multi-cloud. Continuously discover and monitor all your workloads across a multi-cloud environment for a 360-degree view of your cloud footprint. Identify known and previously unknown internet-facing assets for 100% visibility and tracking of risks.

Assess: Comprehensive cloud-native assessments with FlexScanTM. Extensive scanning capabilities with Qualys FlexScan, including no-touch, agentless, API- and snapshot-based scanning, along with agent- and network-based scanning for in-depth assessment. Use these multiple scanning methods to scan a workload to get a unified and comprehensive view of vulnerabilities and misconfigurations.

Prioritize: Unified security view to prioritize cloud risk with TruRiskTM. Experience a unified risk-based view of cloud security with insights across workloads, services, and resources. Qualys TruRisk quantifies security risk by workload criticality and vulnerabilities; it correlates with ransomware, malware, and exploitation threat intelligence to prioritize, trace, and reduce risk.

Defend: Real-time protection against evolving and unknown threats with InstaProtectTM. Qualys enables continuous monitoring of all cloud assets to ensure they are protected against threats and attacks at runtime. Qualys keeps your cloud runtime safe by detecting known and unknown threats across the entire kill chain in near real-time across a multi-cloud environment.

Remediate: Fast remediation with QFlow – no code, drag-and-drop workflows. The integration of QFlow technology into Qualys TotalCloud saves security and DevOps teams valuable time and resources. Automation and no-code, drag-and-drop workflows help simplify the time-consuming operational tasks of assessing vulnerabilities on ephemeral cloud assets, alerting on high-priority threats, remediating misconfigurations, and quarantining high-risk assets.

Qualys

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com

Information Not Available

Buyer's Guide

AWS Security Hub vs. Qualys TotalCloud

December 2025

Free Report: AWS Security Hub vs. Qualys TotalCloud

Find out what your peers are saying about AWS Security Hub vs. Qualys TotalCloud and other solutions. Updated: December 2025.

DOWNLOAD NOW

880,511 professionals have used our research since 2012.

See our AWS Security Hub vs. Qualys TotalCloud report.

See our list of best Cloud Security Posture Management (CSPM) vendors.

We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.