No more typing reviews! Try our Samantha, our new voice AI agent.

DefectDojo vs Nucleus Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 23, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
11th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Container Security (13th), Cloud Workload Protection Platforms (CWPP) (9th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (8th)
DefectDojo
Ranking in Vulnerability Management
44th
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
1
Ranking in other categories
DevSecOps (12th)
Nucleus Security
Ranking in Vulnerability Management
41st
Average Rating
7.0
Reviews Sentiment
6.9
Number of Reviews
1
Ranking in other categories
Application Security Tools (27th), Risk-Based Vulnerability Management (14th), Continuous Threat Exposure Management (CTEM) (13th)
 

Mindshare comparison

As of May 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.0%, up from 0.9% compared to the previous year. The mindshare of DefectDojo is 0.9%, up from 0.5% compared to the previous year. The mindshare of Nucleus Security is 0.9%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.0%
Nucleus Security0.9%
DefectDojo0.9%
Other97.2%
Vulnerability Management
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
reviewer2267097 - PeerSpot reviewer
Integration and Solution Architect at a government with 501-1,000 employees
Easy to use with efficient vulnerability reporting and team collaboration
Use case, so all the reports from GitLeaks, DefectDojo, GitLeaks or dependency check or Trivy, they make reports, and we send this report to DefectDojo to have CVMs, Central Vulnerability Management. DefectDojo is Central Vulnerability Management. If you have a dashboard to set, we have…
reviewer2808414 - PeerSpot reviewer
Health Care Specialist at a healthcare company with 11-50 employees
Improved radiation safety and compliance has supported patient care but daily workflows still need refinement
I think it can be improved by making it more practical, integrated, and easier for teams to apply in real-world workflow from a healthcare perspective. The main improvements I can see right now are better user training with real-case scenarios rather than only theory, and clear and simple protocols for day-to-day operations. Strong integration between safety compliance and documentation systems would help significantly in practice for the healthcare field, which is a niche field. The biggest gain would come from making security processes easier to follow consistently, especially in busy environments where teams need to be aware of clarity and really need to rely on the documentation they are using.I chose a rating of seven because it offers strong value in safety, risk reduction, and compliance, especially in healthcare. However, there is still room for improvement in usability and day-to-day integration. Protocols can be too complex in practice sometimes, and some processes can feel heavy and disconnected from our daily workflow.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Qualys TotalCloud has improved our security posture."
"Once you have your vulnerabilities fixed and your patches pushed out using Qualys TotalCloud, then you are able to eliminate threats and cyber risk."
"The most valuable feature is the consolidated information that it provides from various platforms."
"I found the initial setup user-friendly."
"Qualys TotalCloud's most valuable feature is its agent versatility."
"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."
"I would rate Qualys TotalCloud ten out of ten."
"Qualys TotalCloud is an excellent platform, and the beauty of the platform is that we can get all the vulnerabilities, see all the reports in a single dashboard, view them segregated, and easily learn about critical, high, and medium findings with appropriately provided remediation steps."
"With the pipeline of detection and DefectDojo, we are able to see the real vulnerabilities, and we fix them."
"We have seen clear compliance and risk control outcomes more than other operational metrics, including fewer process gaps during documentation and safety checks, strong consistency in following protocols for handling, traceability, and staff awareness, better audit readiness, a lower chance of procedure errors, and faster escalation when something appears out of standard, which is very important for us in the healthcare sector."
 

Cons

"It is already perfect, but they can bring some newer dashboards and customization options for the dashboard. It would be great to be able to include on-prem assets on the dashboard."
"There is room for improvement in the support."
"The cost of Qualys TotalCloud is high and could be more competitive."
"There is a lack of data segregation according to criticality or inventory."
"The patching process with Qualys Patch Management, which is part of TotalCloud, does not cover installing certain prerequisites on the servers or workstations. This shortcoming means we must rely on SCCM when any service stack updates or additional prerequisites are needed."
"A feature improvement could be the inclusion of Windows OS support for container security, as it is currently only supported for Linux."
"The support is not up to the mark and seems to be overburdened."
"From a downside perspective, the UI is not user-friendly and feels dated compared to other tools like Prisma Cloud."
"We need something to notify the team responsible for a product when vulnerabilities are found."
"Protocols can be too complex in practice sometimes, and some processes can feel heavy and disconnected from our daily workflow."
 

Pricing and Cost Advice

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"TotalCloud's price is about right where I would expect it to be."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
Information not available
Information not available
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
896,099 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
9%
Manufacturing Company
9%
Government
8%
Comms Service Provider
13%
Financial Services Firm
11%
Computer Software Company
9%
Construction Company
9%
Computer Software Company
14%
Financial Services Firm
12%
Construction Company
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise28
No data available
No data available
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
What is your experience regarding pricing and costs for DefectDojo?
The pricing is great. It is much cheaper compared to other solutions. We don't want to pay for things we are able to ...
What needs improvement with DefectDojo?
We need something to notify the team responsible for a product when vulnerabilities are found. We are able to attach ...
What is your primary use case for DefectDojo?
Use case, so all the reports from GitLeaks, DefectDojo, GitLeaks or dependency check or Trivy, they make reports, and...
What is your experience regarding pricing and costs for Nucleus Security?
I have a good experience with that, so we don't have much problem dealing with pricing, setup, and licensing.
What needs improvement with Nucleus Security?
I think it can be improved by making it more practical, integrated, and easier for teams to apply in real-world workf...
What is your primary use case for Nucleus Security?
I have been using Nucleus Security for the past few years in my company, particularly in the healthcare field.I use N...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
No data available
 

Overview

Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: May 2026.
896,099 professionals have used our research since 2012.