AWS Security Hub vs Skyhigh Security comparison

Why PeerSpot?

The compared Amazon Web Services (AWS) and Skyhigh Security solutions aren't in the same category. Amazon Web Services (AWS) is ranked #20 in CSPM , with an average rating of 7.8, and holds a 2.5% mindshare in the category. Skyhigh Security is ranked #10 in SASE , with an average rating of 7.8, and holds a 2.5% mindshare. Additionally, 89% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 93% of Skyhigh Security users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 3, 2026

Skyhigh Security and AWS Security Hub compete in the cloud security management category. Based on feature comparisons, Skyhigh has the upper hand in identifying shadow IT and managing risks, while AWS Security Hub excels in seamless integration with AWS services.

Features: Skyhigh Security is equipped with tools for identifying and managing shadow IT, providing detailed risk assessments, and enforcing data compliance through robust DLP features. It delivers insights into cloud service usage and aids in implementing security policies by monitoring anomalies. AWS Security Hub offers efficient integration with AWS native services, a centralized dashboard for security management, and real-time alerts within AWS environments, although it lacks extensive cross-platform capabilities.

Room for Improvement: Skyhigh Security's console can be slow, and it faces integration challenges, especially with unsanctioned apps and cross-platform support. There is also room for dynamic reporting feature enhancements and UI improvements. AWS Security Hub requires broader multi-cloud integration and enhanced real-time reporting. Dashboard customization limitations hinder alert specificity. Both solutions need improved flexibility in cloud integrations and more advanced user interfaces.

Ease of Deployment and Customer Service: Skyhigh Security supports diverse deployment options, including hybrid and on-premises setups, providing scalability and flexibility, with varying customer service quality. AWS Security Hub focuses on public and private cloud environments, seamlessly integrating within AWS infrastructure and benefiting from high scores in customer service and technical support. Skyhigh offers broader deployment flexibility, while AWS stands out for its customer service quality.

Pricing and ROI: Skyhigh Security is perceived as expensive, justified by its features, with suggestions for cost-effectiveness improvements. AWS Security Hub's PAYG model is seen as affordable due to AWS ecosystem integration. Both solutions offer positive ROI: Skyhigh delivers reduced risk and compliance benefits, while AWS Security Hub users value its threat detection and multi-compliance framework.

To learn more, read our detailed Cloud Security Posture Management (CSPM) Report (Updated: October 2026).

Buyer's Guide

Cloud Security Posture Management (CSPM)

October 2026

Download the complete report

Helped 920,043 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

Cloud Security Posture Management (CSPM) Mindshare Distribution
Product	Mindshare (%)
AWS Security Hub	2.5%
Wiz	10.3%
Prisma Cloud by Palo Alto Networks	7.5%
Other	79.7%

Cloud Security Posture Management (CSPM)

Secure Access Service Edge (SASE) Mindshare Distribution
Product	Mindshare (%)
Skyhigh Security	2.5%
Prisma Access by Palo Alto Networks	10.2%
Zscaler Zero Trust Exchange Platform	8.6%
Other	78.7%

Secure Access Service Edge (SASE)

Featured Reviews

reviewer2859021

Sr Security Engineer at a tech vendor with 5,001-10,000 employees

Risk-based triage has transformed container security and now prioritizes high-impact threats

The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.

Read full review

Misbah Mohammed Kollathodi

Engineering Technical Leader Sre (Cloud/Kubernetes Security) at Cisco

Centralized compliance monitoring has strengthened our cloud security posture and daily governance

AWS Security Hub is something which I basically use to see how much your infrastructure is compliant. It is basically what we call a CSPM, which is a cloud security posture management tool. You can automate the best practices and continue with security best practices; it will give you your misconfigurations and aggregate all your tickets in one place. The best thing about AWS Security Hub is that it is a single point of place where you can get all your misconfigurations without having to go to each service and check. For example, if your business deals with any compliance like PCI DSS or FSBP and ISD, you can check how much your infrastructure is compliant with these standards. Each standard has several security controls, and AWS Security Hub checks these security controls and tells us what percentage your application and infrastructure is compliant with these standards. It also has integration with GuardDuty, Inspector, and other AWS services. In that aspect, it provides a lot of findings. It also supports some third-party product sources. I believe it will reduce your effort to correct those findings and can automate the security tests, consolidate the view of findings across accounts and providers. You can also apply remediation for these findings and automate that; for example, if somebody opens the security group, you can use tools such as Amazon Inspector to close this port when this finding comes. So I would say it is a good tool for cloud security, cloud security posture management, compliance management, and all these things. If you are dealing with sensitive data, it is very critical. A lot of people are using AWS Security Hub today in our company, maybe in every account we have. It is a must for cloud security. I believe bigger organizations use that, so it is a need for our security strategy.

Read full review

DeepakGupta_

Deputy Manager at a comms service provider with 10,001+ employees

Centralized cloud security has improved DLP incident management and simplifies email protection

One major challenge is that downloading incidents during the investigation process takes a very long time, and this issue should be resolved. More customized columns and filtering options in incident review would be beneficial. File types should be included, such as file names along with file extensions, which are not currently available to my knowledge. Overall, Skyhigh Security is very good and just needs to improve in terms of the latency of downloading incidents.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"With TotalCloud, we can scan through the API. If we are not able to deploy cloud agents on the machine, we can use the API."

"I would definitely recommend Qualys TotalCloud to other customers."

"Qualys TotalCloud has significantly reduced our workload in terms of managing risks, helping us to be more efficient and save substantial resources."

"If I had to say something positive about the product that brings me the biggest benefit, I would say it has accurate reports, gets new update CVEs, zero-day attack detection, and is easy to manage with its GUI."

"Qualys TotalCloud fulfills all these needs."

"The most valuable feature is extensibility."

"Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."

"Qualys TotalCloud's most valuable features are its security capabilities that help identify and mitigate risk factors."

More Qualys TotalCloud pros

"The best feature of AWS Security Hub is that you can get compliance or your cloud's current security posture."

"AWS Security Hub can check your infrastructure against multiple compliance frameworks. You can turn on or off specific frameworks based on your needs."

"Finding out if your infrastructure is secure is a valuable feature."

"If someone asks your team how vulnerable or compliant you are with your infrastructure, you can show findings from AWS Security Hub that demonstrate a ninety-plus percentage compliance rate."

"Security Hub provides insightful information about what is running and where there might be weaknesses."

"AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS. They have partners, such as Amazon Preferred Network Partners (APN). If you have different security tools around APN, we can integrate those findings with AWS Security Hub reducing the need to refer to different portals or different UIs. You can have AWS Security Hub act as a single common go-to dashboard."

"One of the most effective features of AWS Security Hub is the easy access to a dashboard with a ready-to-use security score."

"The most beneficial aspect of Security Hub is its proactive capability, allowing us to identify potential security issues before they escalate."

More AWS Security Hub pros

"We use this solution for controlling web content that the users are accessing, and you can control your employees when they are in the office and out of the office, without using a VPN in the same fashion."

"In that way, it gives in-depth visibility and a granular monitoring facility for the company: What is happening inside the company, what people are using, what kind of data is going through the company."

"Good anti-virus filtering, URL categorization, and reporting capabilities."

"Skyhigh Security has impacted my organization positively because we could provide and roll out cloud services across all our users while protecting intellectual property."

"Skyhigh Security is a good product that is very easy to integrate with any tools, and the dashboards are user-friendly and easy to understand."

"We are able to see what cloud services are being used with more clarity than with our proxies."

"It gives us visibility into how the data is being used within our cloud environment."

"Improves creation of security alerts on web proxy logs by having a separate system interpret said logs."

More Skyhigh Security pros

Cons

"The cost of Qualys TotalCloud is high and could be more competitive."

"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."

"Qualys's ticketing system can be confusing when assigning tasks to individuals, and support could be improved by offering instant call solutions with engineers in addition to ticket replies."

"Their support could be improved."

"Enhancing clarity regarding its compliance capabilities would be beneficial, as the current scope is limited in geographic coverage."

"The support process is inefficient due to the excessive number of replies required when submitting tickets."

"Qualys TotalCloud needs to enhance its scanning capabilities in the IP domain, as it currently lacks the functionality to resolve IPs to their corresponding domain names."

"The main area needing improvement is integration. Although the team is strengthening TotalCloud, integration can be enhanced with SIEM, SOAR, ITSM, and other sources."

More Qualys TotalCloud cons

"From an improvement perspective, there is a need to add more compliance since, right now, AWS Security Hub only provides four to five compliances to control the tool."

"The solution should be easier to learn and use"

"The solution will only give you insight if you have configure rule enabled. It should work more like Prisma Cloud and Dome9 which have a better approach."

"AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS."

"There is room for improvement in implementing AI capabilities."

"It's not user-friendly. Too much going on, too many unnecessary findings, not very visual. You can't do much compared to other similar tools that are cheaper and better."

"However, the sheer number of services can be overwhelming when implementing something new."

"There is room for improvement in implementing AI capabilities. It would be beneficial for Security Hub to implement preventative measures and to directly apply recommendations instead of just suggesting them."

More AWS Security Hub cons

"The cloud capability needs to be improved in terms of scalability. More generally, both scalability and performance on the cloud need to be improved."

"I have experienced a few cases where I provided a direct contact name (who was expecting a call from someone at Skyhigh) for the cloud service provider being evaluated, and have received feedback from the contact that no one reached out to them after several days or, in some cases, weeks."

"I would like to see more power being given to the admin."

"Reports."

"The cloud needs improvement with respect to DLP."

"Though the Skyhigh Dashboard is processing large amounts of data, the speed of the Dashboard could be improved."

"The pricing of the solution could be adjusted to make it more reasonable."

"It has many gaps, so I think some customers take three months and up to six months for the deployment of Skyhigh Security, and after the deployment, they use it for years."

More Skyhigh Security cons

Pricing and Cost Advice

"TotalCloud's price is about right where I would expect it to be."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"Qualys TotalCloud offers cost-effective licensing flexibility."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."

"Qualys TotalCloud is expensive."

More Qualys TotalCloud pricing and cost advice

"There are multiple subscription models, like yearly, monthly, and packaged."

"The price of the solution is not very competitive but it is reasonable."

"AWS Security Hub's pricing is pretty reasonable."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"The price of AWS Security Hub is average compared to other solutions."

"Security Hub is not an expensive solution."

"The pricing is fine. It is not an expensive tool."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"The solution's hardware is expensive."

"Pricing is not out of reach."

"This is an expensive product, but you have to compare that with other solutions that are on the market."

"Pricing for Skyhigh Security is okay, though there's always a scope for price improvements. Its pricing is okay compared to other products because other products have very expensive licensing costs. Along with the licensing, support is also provided for Skyhigh Security, so pricing is reasonable, but if there's proactive or better support, that will justify the pricing. I haven't interacted with the Skyhigh Security technical support team yet, so I'd give pricing a four out of five rating for now."

"The biggest thing to watch for is the difference in price per monitored user for the different API integrations."

"Skyhigh provided a FedRAMP solution, tokenization, a better shadow IT capability, and lower cost."

"The tool is not expensive."

"The price of the solution is good and we pay an annual license."

More Skyhigh Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

920,043 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at a comms service provider with 10,001+ employees

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Comms Service Provider

18%

Outsourcing Company

12%

Manufacturing Company

11%

Financial Services Firm

10%

Financial Services Firm

11%

Manufacturing Company

11%

Comms Service Provider

Computer Software Company

Financial Services Firm

13%

Manufacturing Company

10%

Comms Service Provider

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	11
Large Enterprise	38

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	5
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	34
Midsize Enterprise	6
Large Enterprise	49

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...

See all answers

What needs improvement with Qualys TotalCloud?

I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...

See all answers

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...

See all answers

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel...

See all answers

What needs improvement with AWS Security Hub?

I do not see any areas for improvement in AWS Security Hub itself, but the cost factor is something that is the main ...

See all answers

What is your primary use case for AWS Security Hub?

AWS Security Hub is something I have used daily as it is a part of my job for cloud security purposes. If you are dea...

See all answers

What needs improvement with McAfee Web Gateway?

From my perspective as a distributor and based on feedback from my clients, Skyhigh Security has a bit of a disadvant...

See all answers

What is your primary use case for McAfee Web Gateway?

I do not use Skyhigh Security firsthand, but M.Tech Philippines distributes Skyhigh Security as one of the authorized...

See all answers

What advice do you have for others considering McAfee Web Gateway?

I always believe that Skyhigh Security works hand-in-hand with Trellix. What we are doing in our approach is to deliv...

See all answers

Comparisons

Wiz vs Qualys TotalCloud

Compared 11% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 7% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Orca Security vs Qualys TotalCloud

Compared 6% of the time

Nucleus Security vs Qualys TotalCloud

Compared 4% of the time

More Qualys TotalCloud Competitors

Microsoft Sentinel vs AWS Security Hub

Compared 31% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 5% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 4% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs AWS Security Hub

Compared 4% of the time

Datadog vs AWS Security Hub

Compared 2% of the time

More AWS Security Hub Competitors

Microsoft Defender for Cloud Apps vs Skyhigh Security

Compared 6% of the time

Netskope vs Skyhigh Security

Compared 6% of the time

Prisma Access by Palo Alto Networks vs Skyhigh Security

Compared 5% of the time

Forcepoint ONE vs Skyhigh Security

Compared 5% of the time

Acreto SASE Plus vs Skyhigh Security

Compared 4% of the time

More Skyhigh Security Competitors

Product Reports

Buyer's Guide

Qualys TotalCloud

October 2026

Download Qualys TotalCloud product report

Buyer's Guide

AWS Security Hub

October 2026

Download AWS Security Hub product report

Buyer's Guide

Skyhigh Security

October 2026

Download Skyhigh Security product report

Also Known As

Qualys TotalCloud with FlexScan

SQRRL

McAfee MVISION Cloud, McAfee MVISION Unified Cloud Edge, McAfee Web Gateway, McAfee MVISION CNAPP, and Skyhigh Networks, McAfee Web Gateway

Interactive Demo

Demo not available

Qualys

Demo not available

Amazon Web Services (AWS)

Skyhigh Security

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

AWS Security Hub provides multi-account management and compliance checks alongside integrations with AWS services and third-party tools. It centralizes vulnerability tracking and risk prioritization, delivering real-time alerts for proactive security management.

AWS Security Hub enhances cloud security management through a centralized dashboard that monitors infrastructure resources and compliance scores, ensuring adherence to AWS standards. With integrations for vulnerability detection and security posture management, users can streamline security operations. While the platform offers notable benefits, areas for improvement include customization options for findings suppression and integration with multi-cloud environments.

What are the key features of AWS Security Hub?

Multi-Account Management: Seamlessly manage security across numerous accounts.
Compliance Checks: Stay aligned with standards such as PCI through automated reviews.
AWS Integrations: Connect effortlessly with AWS and third-party services to enhance security posture.
Real-Time Alerts: Quickly respond to potential threats with immediate notifications.
Risk Prioritization: Focus on critical vulnerabilities to enhance resource allocation.

What benefits should users expect from using AWS Security Hub?

Proactive Security: Early threat detection enables quicker mitigation strategies.
Cloud-Native Functionality: Utilize tools tailored for cloud environments.
Compliance Insights: Simplified compliance management provides transparency.
Ease of Use: Streamlined interface facilitates efficient security management.

Industries implementing AWS Security Hub leverage its capabilities for comprehensive security across multiple accounts and regions. Health, finance, and retail sectors benefit by automating compliance checks and monitoring security infrastructures. This service aids in identifying misconfigurations, tracking alerts, and ensuring infrastructure integrity during cyber incidents.

Amazon Web Services (AWS)

Skyhigh Security provides comprehensive protection with features like user behavior analytics, shadow IT identification, and data loss prevention. Its integration with IT infrastructure offers robust security insights and helps maintain compliance.

Skyhigh Security offers a user-friendly interface that simplifies navigation while delivering substantial threat protection. It enhances existing IT infrastructure integration, such as DLP and Active Directory, to strengthen security. Yet, there is room for improvement in report generation speed, interface intuitiveness, and integration with other products. Organizations utilize Skyhigh Security to audit internet behavior, secure cloud environments and control web content. It effectively manages data movement and ensures compliance, while preventing unauthorized access and bandwidth misuse.

What are the key features of Skyhigh Security?

Shadow IT Identification: Detects unauthorized IT activity to maintain security.
Cloud Service Risk Assessments: Offers detailed evaluations of cloud services' risks.
Data Loss Prevention: Protects against accidental or deliberate data breaches.
User Behavior Analytics: Analyzes user actions for potential security threats.
Security Insights: Provides comprehensive reports to understand security posture.

What benefits should users look for in reviews?

Threat Protection: Offers robust measures against potential security risks.
Compliance: Assists with industry regulations and standards adherence.
Integration Capabilities: Enhances protection by integrating with existing infrastructure.
User Experience: Easy navigation despite needing interface improvements.
Cloud Security: Secures cloud environments effectively.

In sectors like finance, healthcare, and technology, companies implement Skyhigh Security for its comprehensive monitoring capabilities. It helps secure access to SaaS applications and protects against threats, ensuring adherence to regulatory requirements and preventing data breaches while optimizing performance in cloud environments.

Skyhigh Security

Sample Customers

Information Not Available

Edmunds, Frame.io, GoDaddy, Realtor.com

Western Union.Aetna.DirecTV.Adventist.Equinix.Perrigo.Goodyear.HP.Cargill.Sony.Bank of the West.Prudential.

Buyer's Guide

Cloud Security Posture Management (CSPM)

October 2026

Download Free Report

Find out what your peers are saying about Wiz, SentinelOne, Microsoft and others in Cloud Security Posture Management (CSPM). Updated: October 2026.

DOWNLOAD NOW

920,043 professionals have used our research since 2012.

We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.