Cortex Cloud by Palo Alto Networks vs Trivy comparison

The compared Palo Alto Networks and Aqua Security solutions aren't in the same category. Aqua Security is ranked #19 in Container Security , with an average rating of 8.5, and holds a 4.8% mindshare. Additionally, 98% of Palo Alto Networks users are willing to recommend the solution, compared to 100% of Aqua Security users who would recommend it.

Cortex Cloud by Palo Alto N...

Read 108 Cortex Cloud by Palo Alto Networks reviews

98% willing to recommend

Trivy

Read 8 Trivy reviews

2,564 Views
2,057 Comparison Views

100% willing to recommend

Cortex Cloud by Palo Alto N...

Trivy

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 19, 2025

Cortex Cloud by Palo Alto Networks and Trivy are competing in cybersecurity and vulnerability scanning, with Cortex Cloud noted for its robust functionality and support, whereas Trivy is favored for ease of integration and cost-effectiveness.

Features: Cortex Cloud provides dynamic workload identity creation, a combination of metadata from orchestration layers, and offers insights into security vulnerabilities across cloud environments. It automates forensics and manages scheduled rule sets. Trivy integrates easily with CI/CD pipelines, performs fast vulnerability scans, and supports Docker and Kubernetes security. It also detects secrets and misconfigurations, making it suitable for developers focusing on container environments.

Room for Improvement: Cortex Cloud could enhance the pricing structure to be more accessible for smaller enterprises and simplify integration with other security tools. Improvements could also be made in real-time alert handling to reduce time to insights. Trivy could expand its deeper infrastructure insights and offer more extensive enterprise support. Enhanced compliance reporting and broader multi-cloud capability would be beneficial.

Ease of Deployment and Customer Service: Cortex Cloud offers extensive deployment options with substantial customer support, ideal for enterprises, though it could be complex for smaller teams. Trivy provides straightforward deployment, suitable for quick setups, but might require additional support channels for enterprise environments.

Pricing and ROI: Cortex Cloud's pricing may be higher due to its comprehensive suite, potentially slowing ROI for smaller setups. Trivy’s open-source nature offers a lower entry barrier with faster ROI, but the absence of enterprise-level features or support might be a limitation for larger organizations.

To learn more, read our detailed Cortex Cloud by Palo Alto Networks vs. Trivy Report (Updated: January 2025).

Buyer's Guide

Cortex Cloud by Palo Alto Networks vs. Trivy

January 2025

Download the complete report

Helped 838,713 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex Cloud by Palo Alto N...

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

108

Ranking in other categories

Cloud Workload Protection Platforms (CWPP) (1st), Cloud Security Posture Management (CSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (1st), Data Security Posture Management (DSPM) (1st)

Trivy

Average Rating

8.6

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

Container Security (19th)

Featured Reviews

Mohammad Qaw

Senior Security Consultant at helpag

It gives you one console to see all of your assets, review their configurations, and build your processes

Most customers use Prisma Cloud for visibility and compliance. Prisma has so many features, but many organizations do not use them. They primarily use the visibility part to connect all their cloud accounts and hosts for visibility to see if they are missing any security controls or if they have any misconfigurations. You can connect it to cloud environments such as Azure, AWS, Oracle Cloud, Alibaba, etc., or to an on-prem data center. Prisma Cloud gives you so many options to automate processes related to your daily operations. When it comes to cybersecurity, you can automate things with their existing APIs. They also have out-of-the-box integrations with many solutions. I have not seen any limitations. Everything is customizable. You can do whatever you want, defining the reporting and custom use cases. They recently updated the UI, so it's much better than before.

Read full review

Utsav Sharma

Senior Security Consultant at Ernst & Young

Maintain operational efficiency by detecting misconfigurations and vulnerabilities

The vulnerability scanning feature is excellent as it supports various container capabilities like Docker and Sharma. It also offers repository scanning in the source code domain, allowing pre-push code scans. The misconfiguration detection works well for CloudFormation, Docker files, and Terraform. Its compliance support, like NIST, ensures that configurations align with standards. Trivy helps me significantly detect misconfigurations missed by the ops engineers or in Terraform by the naked eye. It ensures that my deployments are free of misconfigurations and vulnerabilities.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of Prisma Cloud for our clients is CSPM, as it helps clients gain visibility into all the assets with their cloud providers."

"Most of the customers we are tackling have different tools and solutions, like Qualys, Nessus, and vulnerability management assessment solutions. There are plugins for them, and we can integrate Prisma Cloud with them. We can enrich our telemetry with their data and use the predefined correlation rules in Prisma Cloud. That means we have that work done in seconds."

"It scans our containers in real time. Also, as they're built, it's looking into the container repository where the images are built, telling us ahead of time, "You have vulnerabilities here, and you should update this code before you deploy." And once it's deployed, it's scanning for vulnerabilities that are in production as the container is running."

"The support is excellent."

"Prisma Cloud's most valuable asset is its ability to provide detailed visibility into container activity."

"CSPM is the most valuable feature."

"I would say Twistlock is a fairly sophisticated tool."

"The most valuable feature of Prisma Cloud is WAF (web application firewall)."

More Cortex Cloud by Palo Alto Networks pros

"I can see vulnerabilities in the images of any applications deployed in the Kubernetes environment or as container applications."

"Trivy is particularly useful for checking if Docker images have critical vulnerabilities before they reach production."

"Trivy is easy to integrate with CI/CD and can be installed on desktops to scan images."

"It's customizable, allowing me to add any rules and format HTML templates as I wish."

"One of the great features of Trivy is that it helps me scan items such as AWS credentials and GCP service accounts."

"The most valuable feature of Trivy is its easy integration with the CI/CD pipeline."

"It is open-source."

"The vulnerability scanning feature is excellent as it supports various container capabilities like Docker and Sharma."

More Trivy pros

Cons

"Prisma Cloud supports generating CSV files, but I would also like it to generate PDF files for reporting."

"Prisma Cloud is very comprehensive, but there should be better support for the customization of the reports. If Palo Alto can have more customized reports available or give an option to the users to customize the reports, that would be great."

"The innovation side of the solution could be more efficient and more detailed."

"Prisma Cloud's application security capabilities should be enhanced."

"One of the main backlogs in their development is in the area of integration. For example, we have ServiceNow in place for ticket management and Prisma Cloud is supposed to send closure emails for incidents. But from time to time, it fails to do so. We have several other mismatches between Prisma Cloud and ServiceNow."

"The tool's UI is an area with certain shortcomings where improvements are required."

"I would like Prisma Cloud to improve its mapping feature to increase usability."

"Prisma Cloud lags behind in terms of security automation capabilities."

More Cortex Cloud by Palo Alto Networks cons

"For malware detection, I need to use two tools: Trivy as my anomaly scanner and ClamAV. I am integrating these two tools into the CI pipeline. If both malware and anomaly detection could be managed by one tool, I would not need to depend on two tools. That would be my suggestion."

"Trivy generates many false positives, flagging non-existent vulnerabilities. Improvements could include better contextual analysis or granular filtering."

"One drawback I have observed with Trivy is the difficulty in building or integrating a UI, particularly for an operator in the NetSuite example."

"A dynamic scanning capability during runtime would be a significant advantage."

"The reporting could be a little better."

"In our CI/CD pipelines, Trivy lacks built-in functionality for report analysis."

"Trivy can improve by providing an output in PDF format."

More Trivy cons

Pricing and Cost Advice

"The Prisma Cloud pricing is good."

"The pricing is competitive; for the most part, the security firms have similar prices."

"The pricing of the solution is fair."

"You can expect a premium price because it is a premium quality product by a leading supplier."

"It is fairly priced. However, its price can be better so that small banks or small organizations can afford it and adopt it to secure their environment and data."

"Its licensing cost depends on the type of license such as the business license or the enterprise license. The enterprise license is costlier than the business license, but we get more visibility and more modules. If you have a multi-cloud environment and subscribe to each cloud's native CSPM tool, it is costly. If you are using a single tool like Prisma Cloud, with a single license, you can monitor all environments, such as Google Cloud, Azure, AWS, and Oracle Cloud. The cost of Prisma Cloud is less than the cost of subscribing to the CSPM tool of each cloud provider. This is where Prisma Cloud can save costs."

"In general, Prisma Cloud is much cheaper than cloud-native services."

"Prisma Cloud is more expensive than Check Point CloudGuard."

More Cortex Cloud by Palo Alto Networks pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Detection and Response (CDR) solutions are best for your needs.

See recommendations

838,713 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

18%

Financial Services Firm

13%

Computer Software Company

13%

Manufacturing Company

Computer Software Company

16%

Financial Services Firm

15%

Manufacturing Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your primary use case for Prisma Cloud by Palo Alto Networks ?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

See all answers

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We are able to easily see where our container vulnerabilities lie and and where cl...

See all answers

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valuable feature and their speed of integration is very good. The initial setup was ...

See all answers

What needs improvement with Trivy?

One drawback I have observed with Trivy is the difficulty in building or integrating a UI, particularly for an operator in the NetSuite example. It is not intuitive or pre-packaged, making it chall...

See all answers

What is your primary use case for Trivy?

The main use case for Trivy is to scan Docker images or packages for CVEs, specifically for vulnerabilities. I use the tool to ensure that newly built Docker images do not have critical vulnerabili...

See all answers

What advice do you have for others considering Trivy?

I rate Trivy an eight out of ten. This rating reflects its open-source nature, comprehensive scanning capabilities, and its regular updates. The only downside is the absence of a native UI, which w...

See all answers

Comparisons

Wiz vs Cortex Cloud by Palo Alto Networks

Compared 22% of the time

Microsoft Defender for Cloud vs Cortex Cloud by Palo Alto Networks

Compared 12% of the time

CrowdStrike Falcon Cloud Security vs Cortex Cloud by Palo Alto Networks

Compared 5% of the time

Aqua Cloud Security Platform vs Cortex Cloud by Palo Alto Networks

Compared 5% of the time

Lacework FortiCNAPP vs Cortex Cloud by Palo Alto Networks

Compared 2% of the time

More Cortex Cloud by Palo Alto Networks Competitors

JFrog Xray vs Trivy

Compared 21% of the time

Snyk vs Trivy

Compared 19% of the time

Kubescape vs Trivy

Compared 8% of the time

Wiz vs Trivy

Compared 7% of the time

SUSE NeuVector vs Trivy

Compared 6% of the time

More Trivy Competitors

Product Reports

Buyer's Guide

Cortex Cloud by Palo Alto Networks

February 2025

Cortex Cloud by Palo Alto Networks report

Download Cortex Cloud by Palo Alto Networks product report

Buyer's Guide

Container Security

February 2025

Download Trivy product report

Also Known As

Prisma Cloud, Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

No data available

Overview

Cortex Cloud by Palo Alto Networks offers dynamic workload identity creation, application dependency mapping, and automated forensics. Its capabilities in multi-cloud environments, tight AWS integration, and compliance features enhance threat visibility and control.

Cortex Cloud integrates RedLock and Prisma Cloud to deliver inventory management, vulnerability scanning, and cloud configuration monitoring. These features enable strong security posture management while optimizing alert response times and operational costs. Users leverage it for container security and multi-cloud compliance, maximizing insights into security configurations and threat detection across AWS, Azure, and GCP.

What are the key features of Cortex Cloud?

Dynamic Workload Identity: Enhances security through automated identity creation.
Application Dependency Mapping: Offers clarity on application interdependencies.
Automated Forensics: Speeds up investigation processes.
Managed Rule Sets: Ensures updated security practices.
Runtime Mechanism: Protects applications during execution.
Network Mapping: Strengthens overall network security.

What benefits should users consider in reviews?

Enhanced Visibility: Provides comprehensive control across cloud environments.
Cost Efficiency: Reduces operational costs and alert investigation time.
Compliance Support: Assists in meeting industry benchmarks and regulations.
Cloud Integration: Seamlessly works with AWS, Azure, and GCP.

Cortex Cloud is widely used in industries prioritizing container security and compliance across multi-cloud frameworks. Companies implement it for real-time management, vulnerability detection, and threat remediation. The focus is on aligning security posture with industry benchmarks and achieving automated compliance, facilitating robust protection across platforms like AWS, Azure, and Google Cloud.

Palo Alto Networks

Trivy is a versatile tool for scanning container images and identifying vulnerabilities, favored for its integration with CI/CD pipelines and ease of use. It supports scanning both operating system packages and application dependencies.

Trivy is an efficient tool designed to automate security checks and ensure compliance. Its quick setup, detailed analysis capabilities, and support for multiple programming languages and environments make it a reliable choice for users. Trivy provides comprehensive scanning and integration with CI/CD pipelines, resulting in accurate vulnerability detection and a smoother workflow for developers.

What are the most important features?

Efficient vulnerability detection: Quickly identifies vulnerabilities in container images.
Comprehensive scanning: Supports scanning of both OS packages and application dependencies.
CI/CD pipeline integration: Seamlessly integrates with CI/CD tools for automated security checks.
Broad language support: Handles multiple programming languages and environments.
Ease of use: Simple setup and user-friendly interface.

What benefits or ROI should users look for?

Improved security: Regular and thorough vulnerability scanning enhances security posture.
Compliance maintenance: Helps in maintaining compliance with security policies and regulations.
Cost efficiency: Automation reduces the time and cost associated with manual security checks.
Integration flexibility: Efficiently integrates with existing CI/CD pipelines to streamline workflows.
Detailed reporting: Provides comprehensive reports for better decision-making.

Trivy is widely used in industries with a focus on maintaining high security standards such as finance, healthcare, and technology sectors. Its ability to detect vulnerabilities quickly and integrate with CI/CD pipelines makes it an essential tool for ensuring secure and compliant software development practices in these industries. Continuous improvements in speed, documentation, and integration could further enhance its value.

Aqua Security

Sample Customers

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

Information Not Available

Buyer's Guide

Cortex Cloud by Palo Alto Networks vs. Trivy

January 2025

Free Report: Cortex Cloud by Palo Alto Networks vs. Trivy

Find out what your peers are saying about Cortex Cloud by Palo Alto Networks vs. Trivy and other solutions. Updated: January 2025.

DOWNLOAD NOW

838,713 professionals have used our research since 2012.

See our Cortex Cloud by Palo Alto Networks vs. Trivy report.

We monitor all Cloud Detection and Response (CDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.