Try our new research platform with insights from 80,000+ expert users

AWS Security Hub vs Qualys TotalCloud comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AWS Security Hub
Ranking in Cloud Security Posture Management (CSPM)
11th
Average Rating
7.6
Reviews Sentiment
7.2
Number of Reviews
22
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (5th)
Qualys TotalCloud
Ranking in Cloud Security Posture Management (CSPM)
10th
Average Rating
8.8
Reviews Sentiment
7.8
Number of Reviews
26
Ranking in other categories
Vulnerability Management (13th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (10th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (9th)
 

Mindshare comparison

As of January 2025, in the Cloud Security Posture Management (CSPM) category, the mindshare of AWS Security Hub is 5.6%, up from 5.1% compared to the previous year. The mindshare of Qualys TotalCloud is 1.2%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Security Posture Management (CSPM)
 

Featured Reviews

MuhammadAzhar Khan - PeerSpot reviewer
Offers best practice recommendations and supports various compliance standards
Security Hub provides insightful information about what is running and where there might be weaknesses. It offers best practice recommendations and supports various compliance standards such as ISO and PCI DSS. Enabling these compliance checks helps identify non-compliant services and suggests steps to achieve compliance. The main advantage is providing information and compliance insights rather than prevention.
Vikasha Sharma - PeerSpot reviewer
Enables us to mitigate and prioritize risks, ultimately reducing our attack surface for critical assets
TotalCloud provides written explanations that guide remediation and eliminate risk. We have used Qualys for over ten years, and TotalCloud and TruRisk for the last two to three years, successfully leveraging their benefits. Our technical account manager is responsive to our requests for additional features or suggestions, ensuring our needs are met. I would rate the helpfulness of written explanations compared to visualizations of attack paths a nine out of ten. The explanations effectively detail how the scores are derived, making them verifiable and useful for regulatory audits. This allows us to clearly justify the chosen approach and the tool's output. Qualys TotalCloud has significantly benefited our organization by reducing our vulnerability count and overall team size. The platform's user-friendly interface has streamlined management, eliminating the need for additional staff and enabling us to efficiently handle our workload. With the support of our technical account manager and their team, we saw initial benefits within a month, achieving full utilization within six months due to the minimal learning curve. TotalCloud provides a single, prioritized view of risk. We are also evaluating Qualys' new Enterprise Threat Management module, part of their enterprise risk platform, recently launched at the Qualys Security Conference. While we are still assessing this module, the dashboards are well-designed, configurable, and useful. The single, prioritized view of risk has significantly streamlined our workload by consolidating multiple sources, resulting in an estimated 60 percent reduction in effort due to the tool's prioritization capabilities. Our use of TruRisk allows us to effectively justify our risk management processes to regulators and auditors. The system provides clear and verifiable risk assessments, which facilitates a smooth audit process and ensures compliance with regulatory requirements. The comprehensiveness of range of risk found by TruRisk Insights is an eight out of ten. The TruRisk Insights feature has helped us identify assets with high vulnerability scores, significantly impacting our business by enabling us to mitigate and prioritize risks, ultimately reducing our attack surface for critical assets. Previously, we applied the same logic to all assets, but TruRisk now allows us to pinpoint the areas of maximum risk and prioritize our efforts accordingly. We've improved our security posture by 30 to 40 percent and reduced our attack surface, consistently maintaining good security scores, such as our Bitsight Security Rating, since implementing Qualys TruRisk over two years ago.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Very good at detection and providing real-time alerts."
"The solution shows us our compliance score."
"AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS. They have partners, such as Amazon Preferred Network Partners (APN). If you have different security tools around APN, we can integrate those findings with AWS Security Hub reducing the need to refer to different portals or different UIs. You can have AWS Security Hub act as a single common go-to dashboard."
"I find all of the features to be highly valuable."
"AWS Security Hub provides comprehensive alerts about potential compliance issues with CIS standards. The integration with third-party tools is another excellent feature. All our workloads are on AWS."
"It's a security posture management tool from AWS. Basically, it identifies misconfigurations, similar to Trusted Advisor but on a larger scale."
"Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup."
"The most valuable feature of AWS Security Hub is the ability to track when monitoring is not enabled on any of my resources."
"It is a cloud-native app that integrates with both IaaS and SaaS. It seamlessly integrates with other platforms."
"Qualys TotalCloud fulfills all these needs."
"TotalCloud has been excellent in providing us with immediate access to all the products and features we need, such as CSPM, TruRisk Insights, and compliance reports, including CIS and HIPAA."
"The scalability is good as well. I would rate it ten out of ten."
"By integrating TotalCloud, we have significantly reduced vulnerabilities in our deployment pipeline."
"Its dashboards are brilliant. It provides in-depth insights."
"The most valuable feature of Qualys TotalCloud is the visibility it provides."
"I would definitely recommend Qualys TotalCloud to other customers."
 

Cons

"Adding SIEM features would be beneficial because of the limited customization of AWS Security Hub."
"The telemetry doesn't always go into the control center. When you have multiple instances running in AWS, you need a control tower to take feeds from Security Hub and analyze your results. Sometimes exemptions aren't passed between the control tower and Security Hub. The configuration gets mixed up or you don't get the desired results."
"There is room for improvement in implementing AI capabilities."
"The solution will only give you insight if you have configure rule enabled. It should work more like Prisma Cloud and Dome9 which have a better approach."
"The solution lacks self-sufficiency."
"Many findings are too generic or irrelevant to the environment, which can lead to false positives."
"From an improvement perspective, there is a need to add more compliance since, right now, AWS Security Hub only provides four to five compliances to control the tool."
"We need more granular-level customizations to enable or disable the rules in AWS Security Hub."
"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."
"A feature improvement could be the inclusion of Windows OS support for container security, as it is currently only supported for Linux."
"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."
"Qualys TotalCloud needs to enhance its scanning capabilities in the IP domain, as it currently lacks the functionality to resolve IPs to their corresponding domain names."
"There is room for improvement in the support."
"To enhance risk assessment and remediation, the platform should integrate with a wider range of tools, including data from sources like Cortex or other EDRs."
"The response part of the Cloud Detection and Response (CDR) module can be improved."
"Their support could be improved."
 

Pricing and Cost Advice

"Security Hub is not an expensive solution."
"The pricing is fine. It is not an expensive tool."
"The price of AWS Security Hub is average compared to other solutions."
"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."
"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."
"AWS Security Hub's pricing is pretty reasonable."
"The price of the solution is not very competitive but it is reasonable."
"There are multiple subscription models, like yearly, monthly, and packaged."
"TotalCloud's price is about right where I would expect it to be."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"I would rate the price of Qualys TotalCloud eight out of ten with ten being the most expensive."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
report
Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
831,265 professionals have used our research since 2012.
 

Comparison Review

it_user186927 - PeerSpot reviewer
Feb 16, 2015
Cybereason vs. Interset vs. SQRRL
Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
13%
Manufacturing Company
10%
Government
7%
Computer Software Company
20%
Financial Services Firm
14%
Government
12%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?
We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...
What do you like most about AWS Security Hub?
The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.
What needs improvement with AWS Security Hub?
There is room for improvement in implementing AI capabilities. It would be beneficial for Security Hub to implement preventative measures and to directly apply recommendations instead of just sugge...
What is your experience regarding pricing and costs for Qualys TotalCloud?
Qualys TotalCloud is cost-efficient and was selected for its value compared to other products.
What needs improvement with Qualys TotalCloud?
In TotalCloud, I would suggest improvements in policy checks to cater to various inventory types like VPCs, subnets, S3 buckets, or IAMs. There is a lack of data segregation according to criticalit...
What is your primary use case for Qualys TotalCloud?
We use TotalCloud for CSPM or Cloud Security Posture Management. We have integrated our cloud accounts with TotalCloud, allowing us to do the posture management of those accounts and virtual machin...
 

Also Known As

SQRRL
Qualys TotalCloud with FlexScan
 

Overview

 

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com
Information Not Available
Find out what your peers are saying about AWS Security Hub vs. Qualys TotalCloud and other solutions. Updated: December 2024.
831,265 professionals have used our research since 2012.