No more typing reviews! Try our Samantha, our new voice AI agent.

AWS Security Hub vs Skyhigh Security comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
54
Ranking in other categories
Vulnerability Management (5th), Container Security (8th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (6th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
AWS Security Hub
Average Rating
7.6
Reviews Sentiment
6.5
Number of Reviews
27
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (8th), Cloud Security Posture Management (CSPM) (20th)
Skyhigh Security
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
72
Ranking in other categories
Secure Web Gateways (SWG) (7th), Data Loss Prevention (DLP) (15th), Cloud Access Security Brokers (CASB) (8th), ZTNA as a Service (10th), Secure Access Service Edge (SASE) (10th)
 

Mindshare comparison

Cloud Security Posture Management (CSPM) Mindshare Distribution
ProductMindshare (%)
AWS Security Hub2.5%
Wiz10.3%
Prisma Cloud by Palo Alto Networks7.5%
Other79.7%
Cloud Security Posture Management (CSPM)
Secure Access Service Edge (SASE) Mindshare Distribution
ProductMindshare (%)
Skyhigh Security2.5%
Prisma Access by Palo Alto Networks10.2%
Zscaler Zero Trust Exchange Platform8.6%
Other78.7%
Secure Access Service Edge (SASE)
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Misbah Mohammed Kollathodi - PeerSpot reviewer
Engineering Technical Leader Sre (Cloud/Kubernetes Security) at Cisco
Centralized compliance monitoring has strengthened our cloud security posture and daily governance
AWS Security Hub is something which I basically use to see how much your infrastructure is compliant. It is basically what we call a CSPM, which is a cloud security posture management tool. You can automate the best practices and continue with security best practices; it will give you your misconfigurations and aggregate all your tickets in one place. The best thing about AWS Security Hub is that it is a single point of place where you can get all your misconfigurations without having to go to each service and check. For example, if your business deals with any compliance like PCI DSS or FSBP and ISD, you can check how much your infrastructure is compliant with these standards. Each standard has several security controls, and AWS Security Hub checks these security controls and tells us what percentage your application and infrastructure is compliant with these standards. It also has integration with GuardDuty, Inspector, and other AWS services. In that aspect, it provides a lot of findings. It also supports some third-party product sources. I believe it will reduce your effort to correct those findings and can automate the security tests, consolidate the view of findings across accounts and providers. You can also apply remediation for these findings and automate that; for example, if somebody opens the security group, you can use tools such as Amazon Inspector to close this port when this finding comes. So I would say it is a good tool for cloud security, cloud security posture management, compliance management, and all these things. If you are dealing with sensitive data, it is very critical. A lot of people are using AWS Security Hub today in our company, maybe in every account we have. It is a must for cloud security. I believe bigger organizations use that, so it is a need for our security strategy.
DG
Deputy Manager at a comms service provider with 10,001+ employees
Centralized cloud security has improved DLP incident management and simplifies email protection
One major challenge is that downloading incidents during the investigation process takes a very long time, and this issue should be resolved. More customized columns and filtering options in incident review would be beneficial. File types should be included, such as file names along with file extensions, which are not currently available to my knowledge. Overall, Skyhigh Security is very good and just needs to improve in terms of the latency of downloading incidents.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."
"If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."
"I highly recommend Qualys TotalCloud to other users."
"With TotalCloud, we can scan through the API. If we are not able to deploy cloud agents on the machine, we can use the API."
"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"
"The biggest strengths of Qualys TotalCloud are that it is pretty good at cloud visibility, has easy integration, and also has multi-cloud compatibility."
"It is a cloud-native app that integrates with both IaaS and SaaS. It seamlessly integrates with other platforms."
"Once it is set up, Qualys has proved to be one of our greatest assets."
"This solution is for security posture management for the cloud, showing the security posture of your cloud infrastructure and giving you good insight into whether your infrastructure is secure or not."
"One of the most effective features of AWS Security Hub is the easy access to a dashboard with a ready-to-use security score."
"Security Hub provides insightful information about what is running and where there might be weaknesses."
"Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup."
"AWS Security Hub can check your infrastructure against multiple compliance frameworks. You can turn on or off specific frameworks based on your needs."
"The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud."
"AWS Security Hub's unified dashboard does help streamline my process of identifying vulnerabilities, but we don't use Inspector."
"Within AWS Security Hub, there is a feature for aggregating and prioritizing security findings which allows for better risk prioritization based on misconfiguration, as they know AWS thoroughly."
"The cloud risk registry has been great for getting a quick and clearer understanding of the risk of proposed services that we are looking at allowing."
"The most valuable features of MVISION Cloud are the automatic reports and modification incidents."
"It help us monitor high risk services, blocking them, and also feeding them to our egress points."
"They provide a variety of options for scalability, where we can use it over the cloud, or we can deploy it on-premises through our proxy, and we can also use agent-based installation."
"The cloud security features are the most valuable."
"Skyhigh Security has positively impacted my organization by easing my day-to-day job in managing policies and users."
"It is a very sophisticated and mature solution."
"Without Skyhigh, we had zero visibility, but now we are aware of so much more."
 

Cons

"Two areas for improvement in Qualys TotalCloud are the speed of the public cloud platform and vulnerability detection."
"Regarding improvements to Qualys TotalCloud, I suggest that user navigation can be enhanced because initially, many users found it complicated and had trouble understanding the platform due to information being spread across multiple tabs."
"It is already perfect, but they can bring some newer dashboards and customization options for the dashboard. It would be great to be able to include on-prem assets on the dashboard."
"We would like to see Windows-based sensors available in Qualys, as this would make the platform more versatile and support a broader range of environments."
"I think Qualys TotalCloud needs to improve its handling of zero-day vulnerabilities and supply chain management because modern ransomware attacks not only target prime critical infrastructures but also the supply chain system."
"To be honest, I would move out from this tool because it does not give a full view of vulnerability."
"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."
"The response part of the Cloud Detection and Response (CDR) module can be improved."
"The solution should be easier to learn and use"
"Security needs to be measured based on their own criteria. We can't add custom criteria specific to our organization. For example, having an S3 bucket publicly available might be flagged as a critical alert, but it might not be critical in a sandbox environment. So, it gets flagged as critical, which becomes a false positive. So, customization options and creating custom dashboards would be areas for improvement."
"The user interface, graphs, and dashboards of the solution could improve in the future. They are not very sophisticated and could use an update."
"We need more granular-level customizations to enable or disable the rules in AWS Security Hub."
"The solution is not wholly self-sufficient."
"AWS Security Hub should improve the time it takes to update. It takes a long period of time when updating. It can take 24 hours sometimes to update. Additionally, when integrating this solution with more security tools, takes time."
"Right now, there are some difficulties we're facing with AWS Security Hub, and we need our central team to mitigate the issues."
"The telemetry doesn't always go into the control center. When you have multiple instances running in AWS, you need a control tower to take feeds from Security Hub and analyze your results. Sometimes exemptions aren't passed between the control tower and Security Hub. The configuration gets mixed up or you don't get the desired results."
"There are no training videos available for the product."
"The biggest challenge we have with McAfee is their cross-cloud support."
"Regarding Skyhigh Security's AI capabilities, my experience shows it is still in a booming state or still scaling up, so it still needs improvement."
"McAfee needs to add more products that could be managed from the cloud."
"I think it's a very good product although the user interface is not very intuitive and could be improved."
"Its capabilities are still rather limited compared to other solutions."
"Skyhigh Security can be improved as it lacks debugging capabilities."
"The tool could improve flexibility with the creation of reports/querying data."
 

Pricing and Cost Advice

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."
"AWS Security Hub's pricing is pretty reasonable."
"Security Hub is not an expensive solution."
"The price of AWS Security Hub is average compared to other solutions."
"The pricing is fine. It is not an expensive tool."
"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."
"The price of the solution is not very competitive but it is reasonable."
"There are multiple subscription models, like yearly, monthly, and packaged."
"It's an expensive solution."
"Pricing is not out of reach."
"The biggest thing to watch for is the difference in price per monitored user for the different API integrations."
"Pricing for Skyhigh Security is fine."
"The solution is quite expensive. As we take add-ons continuously as per our customer's requirements, there are additional charges."
"This is an expensive product, although it is made for larger enterprises and not for small organizations."
"There is a license required to use this solution and it is paid annually. The price is reasonable."
"The licensing fees are based on what environments you are monitoring."
report
Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
921,028 professionals have used our research since 2012.
 

Comparison Review

it_user186927 - PeerSpot reviewer
Director of Operations at a comms service provider with 10,001+ employees
Feb 16, 2015
Cybereason vs. Interset vs. SQRRL
Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
11%
Manufacturing Company
11%
Financial Services Firm
10%
Manufacturing Company
11%
Financial Services Firm
11%
Comms Service Provider
7%
Computer Software Company
7%
Financial Services Firm
12%
Manufacturing Company
10%
Comms Service Provider
8%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise11
Large Enterprise38
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise5
Large Enterprise14
By reviewers
Company SizeCount
Small Business34
Midsize Enterprise6
Large Enterprise49
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...
What needs improvement with Qualys TotalCloud?
I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...
Which is better - Azure Sentinel or AWS Security Hub?
We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel...
What needs improvement with AWS Security Hub?
I do not see any areas for improvement in AWS Security Hub itself, but the cost factor is something that is the main ...
What is your primary use case for AWS Security Hub?
AWS Security Hub is something I have used daily as it is a part of my job for cloud security purposes. If you are dea...
What needs improvement with McAfee Web Gateway?
From my perspective as a distributor and based on feedback from my clients, Skyhigh Security has a bit of a disadvant...
What is your primary use case for McAfee Web Gateway?
I do not use Skyhigh Security firsthand, but M.Tech Philippines distributes Skyhigh Security as one of the authorized...
What advice do you have for others considering McAfee Web Gateway?
I always believe that Skyhigh Security works hand-in-hand with Trellix. What we are doing in our approach is to deliv...
 

Also Known As

Qualys TotalCloud with FlexScan
SQRRL
McAfee MVISION Cloud, McAfee MVISION Unified Cloud Edge, McAfee Web Gateway, McAfee MVISION CNAPP, and Skyhigh Networks, McAfee Web Gateway
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

Information Not Available
Edmunds, Frame.io, GoDaddy, Realtor.com
Western Union.Aetna.DirecTV.Adventist.Equinix.Perrigo.Goodyear.HP.Cargill.Sony.Bank of the West.Prudential.
Find out what your peers are saying about Wiz, SentinelOne, Microsoft and others in Cloud Security Posture Management (CSPM). Updated: October 2026.
921,028 professionals have used our research since 2012.