Prisma Cloud by Palo Alto Networks vs Trivy comparison

The compared Palo Alto Networks and Aqua Security solutions aren't in the same category. Palo Alto Networks is ranked #2 in CDR , with an average rating of 8.5, and holds a 26.9% mindshare in the category. Aqua Security is ranked #13 in Container Security , with an average rating of 8.6, and holds a 6.8% mindshare. Additionally, 98% of Palo Alto Networks users are willing to recommend the solution, compared to 100% of Aqua Security users who would recommend it.

Prisma Cloud by Palo Alto N...

Read 108 Prisma Cloud by Palo Alto Networks reviews

7,038 Views
4,218 Comparison Views

98% willing to recommend

Trivy

Read 8 Trivy reviews

2,738 Views
2,115 Comparison Views

100% willing to recommend

Prisma Cloud by Palo Alto N...

Trivy

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 19, 2025

Cortex Cloud by Palo Alto Networks and Trivy are competing in cybersecurity and vulnerability scanning, with Cortex Cloud noted for its robust functionality and support, whereas Trivy is favored for ease of integration and cost-effectiveness.

Features: Cortex Cloud provides dynamic workload identity creation, a combination of metadata from orchestration layers, and offers insights into security vulnerabilities across cloud environments. It automates forensics and manages scheduled rule sets. Trivy integrates easily with CI/CD pipelines, performs fast vulnerability scans, and supports Docker and Kubernetes security. It also detects secrets and misconfigurations, making it suitable for developers focusing on container environments.

Room for Improvement: Cortex Cloud could enhance the pricing structure to be more accessible for smaller enterprises and simplify integration with other security tools. Improvements could also be made in real-time alert handling to reduce time to insights. Trivy could expand its deeper infrastructure insights and offer more extensive enterprise support. Enhanced compliance reporting and broader multi-cloud capability would be beneficial.

Ease of Deployment and Customer Service: Cortex Cloud offers extensive deployment options with substantial customer support, ideal for enterprises, though it could be complex for smaller teams. Trivy provides straightforward deployment, suitable for quick setups, but might require additional support channels for enterprise environments.

Pricing and ROI: Cortex Cloud's pricing may be higher due to its comprehensive suite, potentially slowing ROI for smaller setups. Trivy’s open-source nature offers a lower entry barrier with faster ROI, but the absence of enterprise-level features or support might be a limitation for larger organizations.

To learn more, read our detailed Prisma Cloud by Palo Alto Networks vs. Trivy Report (Updated: January 2025).

Buyer's Guide

Prisma Cloud by Palo Alto Networks vs. Trivy

January 2025

Download the complete report

Helped 842,388 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Prisma Cloud by Palo Alto N...

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

108

Ranking in other categories

Vulnerability Management (2nd), Cloud Workload Protection Platforms (CWPP) (1st), Cloud Security Posture Management (CSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (2nd), Data Security Posture Management (DSPM) (1st), Software Supply Chain Security (1st), Cloud Infrastructure Entitlement Management (CIEM) (1st), Application Security Posture Management (ASPM) (1st), Cloud Detection and Response (CDR) (2nd)

Trivy

Average Rating

8.6

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

Container Security (13th)

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Prisma Cloud by Palo Alto Networks is designed for Cloud Detection and Response (CDR) and holds a mindshare of 26.9%, down 27.7% compared to last year.
Trivy, on the other hand, focuses on Container Security, holds 6.8% mindshare, up 0.6% since last year.

Cloud Detection and Response (CDR)

Container Security

Featured Reviews

Mohammad Qaw

Senior Security Consultant at helpag

It gives you one console to see all of your assets, review their configurations, and build your processes

Most customers use Prisma Cloud for visibility and compliance. Prisma has so many features, but many organizations do not use them. They primarily use the visibility part to connect all their cloud accounts and hosts for visibility to see if they are missing any security controls or if they have any misconfigurations. You can connect it to cloud environments such as Azure, AWS, Oracle Cloud, Alibaba, etc., or to an on-prem data center. Prisma Cloud gives you so many options to automate processes related to your daily operations. When it comes to cybersecurity, you can automate things with their existing APIs. They also have out-of-the-box integrations with many solutions. I have not seen any limitations. Everything is customizable. You can do whatever you want, defining the reporting and custom use cases. They recently updated the UI, so it's much better than before.

Read full review

Utsav Sharma

Senior Security Consultant at Ernst & Young

Maintain operational efficiency by detecting misconfigurations and vulnerabilities

The vulnerability scanning feature is excellent as it supports various container capabilities like Docker and Sharma. It also offers repository scanning in the source code domain, allowing pre-push code scans. The misconfiguration detection works well for CloudFormation, Docker files, and Terraform. Its compliance support, like NIST, ensures that configurations align with standards. Trivy helps me significantly detect misconfigurations missed by the ops engineers or in Terraform by the naked eye. It ensures that my deployments are free of misconfigurations and vulnerabilities.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"This solution helped us by allowing us to schedule and fix things. This is not an easy thing if you're managing 1,000 plus resources."

"Palo Alto enables us to know what security threats are happening in the background."

"The most valuable features are vulnerability monitoring, serverless access, container runtime features, and Defender."

"I would rate Prisma Cloud a ten out of ten."

"The ability to monitor the artifact repository is one of the most valuable features because we have a disparate set of development processes, but everything tends to land in a common set of artifact repositories. The solution gives us a single point where we can apply security control for monitoring. That's really helpful."

"It is a good solution. Each team should utilize it. Every good organization is now moving towards or trying to be provider agnostic, so if you are using multiple providers, you should at least give Prisma Cloud a try."

"It has helped us understand the dynamic topology of our containers, and manage security through the application of policies that our pipelines apply straight from Git."

"The dynamic workload identity creation, attestation, and assignment is the best feature. In addition, the application dependency map across heterogeneous environments for compliance is a striking feature."

More Prisma Cloud by Palo Alto Networks pros

"The vulnerability scanning feature is excellent as it supports various container capabilities like Docker and Sharma."

"Trivy is particularly useful for checking if Docker images have critical vulnerabilities before they reach production."

"One of the great features of Trivy is that it helps me scan items such as AWS credentials and GCP service accounts."

"I can see vulnerabilities in the images of any applications deployed in the Kubernetes environment or as container applications."

"Trivy's open source nature and wide functionality are incredibly valuable."

"The most valuable feature of Trivy is its easy integration with the CI/CD pipeline."

"I definitely recommend Trivy."

"It is open-source."

More Trivy pros

Cons

"The UI is the worst."

"It provides all the cloud details but is not entirely linked to the compute model."

"The data security model needs improvement due to integration issues with certain features and cloud providers. With Palo Alto now utilizing a tool from an Israeli startup in Prisma Cloud, the integration is slow, and some features are blocked or not supported."

"They need to improve the API gateway."

"I have some challenges customizing and personalizing some of the capabilities in the CSPM in terms of new policies and services. We have to reconfigure and rebuild the CSPM."

"The UI could use some improvement; we usually find the information we're looking for, but what fields can be clicked on and what workflow to follow to get the required information is not always evident. Sometimes we're all over the place, clicking around to drill in and uncover the alert and investigation details we're looking for."

"We would like to have the detections be more contemporaneous. For example, we've seen detections of an overprivileged user or whatever it might be in any of the hundreds of Prisma policies, where there are 50 minutes of latency between the event and the alert."

"Sometimes, on the Azure side, there are issues. Some errors aren't being found on Prisma Cloud."

More Prisma Cloud by Palo Alto Networks cons

"For malware detection, I need to use two tools: Trivy as my anomaly scanner and ClamAV. I am integrating these two tools into the CI pipeline. If both malware and anomaly detection could be managed by one tool, I would not need to depend on two tools. That would be my suggestion."

"Trivy generates many false positives, flagging non-existent vulnerabilities. Improvements could include better contextual analysis or granular filtering."

"The reporting could be a little better."

"One drawback I have observed with Trivy is the difficulty in building or integrating a UI, particularly for an operator in the NetSuite example."

"A dynamic scanning capability during runtime would be a significant advantage."

"The only problem is that Trivy does not support reporting features such as generating reports in CSV, which is useful for auditing and reporting."

"The reporting could be a little better. When integrating Trivy with CI, the interpretation of the reports could be improved."

"Trivy generates many false positives, flagging non-existent vulnerabilities."

More Trivy cons

Pricing and Cost Advice

"Its licensing cost depends on the type of license such as the business license or the enterprise license. The enterprise license is costlier than the business license, but we get more visibility and more modules. If you have a multi-cloud environment and subscribe to each cloud's native CSPM tool, it is costly. If you are using a single tool like Prisma Cloud, with a single license, you can monitor all environments, such as Google Cloud, Azure, AWS, and Oracle Cloud. The cost of Prisma Cloud is less than the cost of subscribing to the CSPM tool of each cloud provider. This is where Prisma Cloud can save costs."

"Prisma Cloud is a value-back cloud-managed solution; cloud-native solutions are quite expensive."

"The licensing cost is a bit high on the compute side."

"I don't know a better way to do it, but their licensing is a little confusing. That's due to the breadth of different types of technologies they are trying to cover. The way you license depends on where you're securing. When they were Twistlock it was a simple licensing scheme and you could tell what you were doing. Now that they've changed that scheme with Palo Alto, it is quite confusing. It's very difficult to predict what your costs are going to be as you try to expand coverage."

"I wouldn't mind if it were cheaper. We are spending a fair amount of money on Prisma Cloud."

"Prisma Cloud is more expensive than Check Point CloudGuard."

"The pricing for Prisma Cloud is high. Providing a pay-as-you-go model or pricing options tailored for medium and small enterprises could help attract more clients."

"It is fairly priced. However, its price can be better so that small banks or small organizations can afford it and adopt it to secure their environment and data."

More Prisma Cloud by Palo Alto Networks pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Detection and Response (CDR) solutions are best for your needs.

See recommendations

842,388 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

17%

Financial Services Firm

13%

Computer Software Company

13%

Manufacturing Company

Computer Software Company

16%

Financial Services Firm

14%

Manufacturing Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your primary use case for Prisma Cloud by Palo Alto Networks ?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

See all answers

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We are able to easily see where our container vulnerabilities lie and and where cl...

See all answers

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valuable feature and their speed of integration is very good. The initial setup was ...

See all answers

What needs improvement with Trivy?

One drawback I have observed with Trivy is the difficulty in building or integrating a UI, particularly for an operator in the NetSuite example. It is not intuitive or pre-packaged, making it chall...

See all answers

What is your primary use case for Trivy?

The main use case for Trivy is to scan Docker images or packages for CVEs, specifically for vulnerabilities. I use the tool to ensure that newly built Docker images do not have critical vulnerabili...

See all answers

What advice do you have for others considering Trivy?

I rate Trivy an eight out of ten. This rating reflects its open-source nature, comprehensive scanning capabilities, and its regular updates. The only downside is the absence of a native UI, which w...

See all answers

Comparisons

Wiz vs Prisma Cloud by Palo Alto Networks

Compared 22% of the time

Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks

Compared 12% of the time

CrowdStrike Falcon Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 5% of the time

Aqua Cloud Security Platform vs Prisma Cloud by Palo Alto Networks

Compared 5% of the time

Lacework FortiCNAPP vs Prisma Cloud by Palo Alto Networks

Compared 2% of the time

More Prisma Cloud by Palo Alto Networks Competitors

Snyk vs Trivy

Compared 20% of the time

JFrog Xray vs Trivy

Compared 20% of the time

Wiz vs Trivy

Compared 7% of the time

Kubescape vs Trivy

Compared 7% of the time

SUSE NeuVector vs Trivy

Compared 6% of the time

More Trivy Competitors

Product Reports

Buyer's Guide

Prisma Cloud by Palo Alto Networks

March 2025

Prisma Cloud by Palo Alto Networks report

Download Prisma Cloud by Palo Alto Networks product report

Buyer's Guide

Container Security

March 2025

Download Trivy product report

Also Known As

Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

No data available

Overview

Prisma Cloud by Palo Alto Networks delivers comprehensive security for cloud environments, focusing on workload protection, identity creation, and seamless AWS integration. Its cloud visibility and control, combined with thorough vulnerability scanning, help maintain robust security across multi-cloud platforms.

Prisma Cloud provides essential capabilities for cloud security posture management, container security, and compliance monitoring. Enterprises utilize it to secure cloud configurations, detect vulnerabilities, and ensure regulatory compliance, spanning AWS, Azure, and Google Cloud. Its runtime management, identity-based micro-segmentation, and threat detection enhance cybersecurity. Despite needing improvements in documentation, integration complexities, UI, and the need for role-based access control refinement, it remains pivotal for securing assets across cloud infrastructures, particularly with its capabilities for vulnerability scanning and CI/CD pipeline integration.

What are the key features?

Workload Identity Creation: Establishes identities for cloud workloads, enhancing security through precise access management.
Dynamic Workload Protection: Protects applications dynamically, securing resources during runtime.
Integration with AWS Products: Seamlessly integrates with AWS services, maximizing the efficiency of cloud operations.
Automated Forensics: Provides detailed insights through automated investigations and runtime mapping between containers.
Application Dependency Map: Enables compliance and asset management through comprehensive inventory functionality.

What benefits or ROI should users expect?

Proactive Threat Prevention: Enhances security measures with advanced threat detection and prevention.
Cloud Visibility and Control: Offers control across multi-cloud environments, ensuring users maintain a strong security posture.
Prevention Capabilities: Users value its ability to prevent vulnerabilities and threats effectively.
Integration Capabilities: Supports seamless integration into existing cloud infrastructures and CI/CD pipelines.

In industries like finance, healthcare, and retail, Prisma Cloud is implemented to strengthen cybersecurity measures, facilitate regulatory compliance, and enhance governance. Organizations leverage its features to secure sensitive data, monitor configurations, and integrate security processes within CI/CD workflows, ensuring robust protection across complex cloud infrastructures.

Palo Alto Networks

Trivy is a versatile tool for scanning container images and identifying vulnerabilities, favored for its integration with CI/CD pipelines and ease of use. It supports scanning both operating system packages and application dependencies.

Trivy is an efficient tool designed to automate security checks and ensure compliance. Its quick setup, detailed analysis capabilities, and support for multiple programming languages and environments make it a reliable choice for users. Trivy provides comprehensive scanning and integration with CI/CD pipelines, resulting in accurate vulnerability detection and a smoother workflow for developers.

What are the most important features?

Efficient vulnerability detection: Quickly identifies vulnerabilities in container images.
Comprehensive scanning: Supports scanning of both OS packages and application dependencies.
CI/CD pipeline integration: Seamlessly integrates with CI/CD tools for automated security checks.
Broad language support: Handles multiple programming languages and environments.
Ease of use: Simple setup and user-friendly interface.

What benefits or ROI should users look for?

Improved security: Regular and thorough vulnerability scanning enhances security posture.
Compliance maintenance: Helps in maintaining compliance with security policies and regulations.
Cost efficiency: Automation reduces the time and cost associated with manual security checks.
Integration flexibility: Efficiently integrates with existing CI/CD pipelines to streamline workflows.
Detailed reporting: Provides comprehensive reports for better decision-making.

Trivy is widely used in industries with a focus on maintaining high security standards such as finance, healthcare, and technology sectors. Its ability to detect vulnerabilities quickly and integrate with CI/CD pipelines makes it an essential tool for ensuring secure and compliant software development practices in these industries. Continuous improvements in speed, documentation, and integration could further enhance its value.

Aqua Security

Sample Customers

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

Information Not Available

Buyer's Guide

Prisma Cloud by Palo Alto Networks vs. Trivy

January 2025

Free Report: Prisma Cloud by Palo Alto Networks vs. Trivy

Find out what your peers are saying about Prisma Cloud by Palo Alto Networks vs. Trivy and other solutions. Updated: January 2025.

DOWNLOAD NOW

842,388 professionals have used our research since 2012.

See our Prisma Cloud by Palo Alto Networks vs. Trivy report.

We monitor all Cloud Detection and Response (CDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.