Qualys TotalCloud vs SentinelOne Singularity Identity comparison

Qualys TotalCloud vs. SentinelOne Singularity Identity

Download the complete report

Helped 846,617 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Zafran Security

Mindshare comparison

As of April 2025, in the Vulnerability Management category, the mindshare of Zafran Security is 0.4%. The mindshare of Qualys TotalCloud is 1.1%, up from 0.2% compared to the previous year. The mindshare of SentinelOne Singularity Identity is 0.6%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management

Featured Reviews

Israel Cavazos Landini

Associate Director IT Security Operations at Novartis

Weekly insights and risk analysis facilitate informed security decisions

I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.

Read full review

Sushant Samantara

IT Manager at Capgemini

Helps us minimize attack surfaces by identifying root accounts and encryption issues

TotalCloud provides written explanations to guide remediation and eliminate cyber risks. While all cloud platforms offer security features, it's challenging to consolidate them into a single dashboard. Qualys TotalCloud effectively addresses this by consolidating multiple cloud platforms and subscriptions onto one dashboard. This allows users to quickly identify and mitigate misconfigurations and risks, simplifying security management. Before implementing TotalCloud, our compliance rate was approximately 50 to 60 percent. However, after adopting the platform, it has increased to 80 to 90 percent. TotalCloud also helps us minimize attack surfaces by identifying root accounts and encryption issues, thereby enhancing our overall security by 40 percent. TotalCloud offers a unified platform for assessing vulnerabilities and threats across both IaaS and PaaS environments. This unified view has improved our cloud security posture management. We gain a single, prioritized view of risks through TotalCloud's TruRisk Insights feature. This feature considers not only the QDA score but also factors in cost and other relevant elements to provide a comprehensive risk assessment. From a potentially overwhelming list of findings, TruRisk Insights prioritizes the most critical risks, allowing us to focus our efforts and resources on addressing these high-priority tasks efficiently. A single, prioritized view of risk streamlines the risk assessment process by eliminating the need to consolidate multiple sources. This comprehensive view is instrumental in communicating with other business customers who may be unaware of potential risks or misconfigurations within their resources. By identifying and informing them of these issues, we can guide them towards compliance and ensure a more secure environment. TruRisk Insights provides valuable findings by identifying vulnerabilities and misconfigurations, displaying them on a dashboard, and offering deeper insights into the attack surface. It analyzes not only internet-facing devices but also those indirectly connected, providing a comprehensive understanding of potential risks. This is crucial because even devices not directly connected to the internet can be vulnerable if they have an attack surface. TruRisk Insights also offers mitigation strategies, making it a highly useful tool for managing security risks. With the VMDR feature enabled and the Qualys Agent installed on various assets, we can identify existing vulnerabilities. TruRisk Insights then calculates risk scores, prioritizes tasks, and presents the number of findings. This allows us to focus on mitigating high-priority vulnerabilities while deferring those with lower priority, ultimately reducing overall risk. TruRisk Insights provides device details, allowing for containerization of misconfigured devices. This process involves isolating problematic devices and rectifying misconfigurations, ultimately enhancing our security posture.

Read full review

Roftiel Constantine

Global Chief Information Security Officer at Barry-Wehmiller

Provides proactive threat remediation, reduces alert volume, and enhances incident response capabilities

During our pre-purchase evaluation of SentinelOne's EDR capabilities three years ago, we were consistently impressed by the positive relationships customers reported having with SentinelOne's engineers, sales teams, and customer success managers. These strong relationships, evident in the customers' unsolicited feedback, highlighted the "soft skills" and intangible qualities that SentinelOne possessed. This positive customer experience has been mirrored in our own interactions with them. Their responsiveness to our needs, particularly when addressing a couple of challenges we faced, has been excellent. They proactively scheduled weekly meetings to demonstrate their commitment to resolving our issues, a customer-centric approach I admire. SentinelOne's dedication to customer service, including their rapid technology updates and responsiveness to our suggestions, has been crucial to our success in protecting our organization. Their ability to quickly incorporate our needs into new releases is truly impressive and sets them apart. Overall, I highly recommend SentinelOne based on our positive interactions across all levels of their organization.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Zafran is an excellent tool."

"We are able to see the real risk of a vulnerability on our environment with our security tools."

"Zafran has become an indispensable tool in our cybersecurity arsenal."

"Qualys TotalCloud has significantly improved our organization by automating our reporting processes, reducing the time spent on report creation from two hours to less than fifteen to twenty minutes."

"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"

"While automatic inventory detection upon connection is a helpful feature, a truly valuable capability would be assessing an environment's security posture against Azure and CIS best practices."

"We were able to realize its benefits within 24 to 48 hours."

"The dashboards are particularly valuable as they offer a comprehensive view of the environment, highlighting any misconfigurations."

"By integrating TotalCloud, we have significantly reduced vulnerabilities in our deployment pipeline."

"The best part I like is the on-demand scans."

"The most valuable feature of Qualys TotalCloud is the visibility it provides."

More Qualys TotalCloud pros

"The AI provides a futuristic ML model. That helps a lot when it comes to shifting security approaches and hep better forecast attacks."

"SentinelOne enhances our customers' risk management."

"All the features within the XDR are valuable as a whole for our organization."

"The protection provided by SentinelOne Singularity Identity is the most valuable feature."

"SentinelOne stands out due to its AI capabilities, which lead to excellent prevention."

"The AI-based detection, scanning, prevention and mitigation features are the most valuable features."

"The product's initial setup phase is straightforward."

"The incident and threat logs are great."

More SentinelOne Singularity Identity pros

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."

"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."

"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."

"Qualys TotalCloud's increasing complexity, due to the development and deployment of multiple solutions, is making the GUI difficult to navigate."

"Enhancing clarity regarding its compliance capabilities would be beneficial, as the current scope is limited in geographic coverage."

"The cost of Qualys TotalCloud is high and could be more competitive."

"It is already perfect, but they can bring some newer dashboards and customization options for the dashboard. It would be great to be able to include on-prem assets on the dashboard."

"It has been working very well, but it would be helpful if the dashboard could generate reports tailored to specific compliance needs. For example, in India, we have to comply with RBI and SEBI guidelines. It w"

"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."

More Qualys TotalCloud cons

"The root cause of automation could be better."

"We haven't received the expected support whenever we've had questions."

"A lot of those features came from an acquisition of a different company."

"Our engineers are dealing with issues to add exclusions to the antivirus for custom applications."

"The resolution turnaround from SentinelOne Singularity Identity's support should be improved."

"Sometimes I get kicked out of the console. I don't know why."

"SentinelOne Singularity Identity could be more user-friendly."

"To improve SentinelOne, I would suggest adding a network detection and response capability."

More SentinelOne Singularity Identity cons

Pricing and Cost Advice

Information not available

"Qualys TotalCloud offers cost-effective licensing flexibility."

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

"TotalCloud's price is about right where I would expect it to be."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"The cost is high, but it meets our organizational needs."

More Qualys TotalCloud pricing and cost advice

"SentinelOne Singularity Identity's pricing is cheaper than CrowdStrike and is really good."

"As a SentinelOne partner, we offer competitive pricing on comprehensive packages that include the SentinelOne license, our management services, and a proof-of-concept to ensure the technology meets your needs."

"Their pricing has been fair, especially in the current market, and they haven't excessively increased prices at renewal times like many vendors do."

"Ideally, I would like SentinelOne to lower their prices a little bit."

"There is a need to make yearly payments towards the licensing charges associated with the product...I think the prices associated with the product are okay and it is not too expensive."

"Compared to competitors, it's well-priced for the quality offered, and I don't see anyone surpassing them in that regard."

"The price is affordable."

"The cost of SentinelOne Singularity Identity is better than CrowdStrike."

More SentinelOne Singularity Identity pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

846,617 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

14%

Financial Services Firm

12%

Manufacturing Company

University

Computer Software Company

20%

Financial Services Firm

16%

Government

13%

Manufacturing Company

Computer Software Company

17%

Financial Services Firm

13%

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?

I find that the pricing for Zafran aligns well with the comprehensive features it offers. The asset and user-based li...

What needs improvement with Zafran Security?

While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even ...

What is your primary use case for Zafran Security?

Our primary use case for Zafran involves leveraging it to enhance our vulnerability risk scoring methodology. In toda...

What is your experience regarding pricing and costs for Qualys TotalCloud?

It is not cheap. For smaller businesses, people running businesses with a small number of users cannot afford Qualys,...

What needs improvement with Qualys TotalCloud?

While I am still learning TotalCloud, which has the latest features introduced, I attended a Qualys event this year. ...

What is your primary use case for Qualys TotalCloud?

Sometimes I lack the details of misconfigured devices, such as cloud servers and cloud machines, which are hosted in ...

Does SentinelOne have a Virtual Patching functionality?

Yes -- SentinelOne has a Virtual Patching functionality called Virtual Patching and Exploit Shield. This preventive s...

What do you like most about SentinelOne Singularity Identity?

The XDR capabilities are very good.

What is your experience regarding pricing and costs for SentinelOne Singularity Identity?

I have no visibility into pricing, setup costs, or licensing as the government handles these aspects directly with Se...

Dazz.io vs Zafran Security

Comparisons

Compared 53% of the time

Vulcan Cyber vs Zafran Security

Compared 22% of the time

ServiceNow Security Operations vs Zafran Security

Compared 16% of the time

Tenable Vulnerability Management vs Zafran Security

Compared 9% of the time

More Zafran Security Competitors

Wiz vs Qualys TotalCloud

Compared 41% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 11% of the time

AWS GuardDuty vs Qualys TotalCloud

Compared 9% of the time

Amazon Inspector vs Qualys TotalCloud

Compared 8% of the time

Qualys VMDR vs Qualys TotalCloud

Compared 8% of the time

More Qualys TotalCloud Competitors

Microsoft Defender for Identity vs SentinelOne Singularity Identity

Compared 16% of the time

Tenable Vulnerability Management vs SentinelOne Singularity Identity

Compared 13% of the time

SailPoint Identity Security Cloud vs SentinelOne Singularity Identity

Compared 9% of the time

Microsoft Entra ID Protection vs SentinelOne Singularity Identity

Compared 8% of the time

CrowdStrike Falcon vs SentinelOne Singularity Identity

Compared 7% of the time

More SentinelOne Singularity Identity Competitors

Product Reports

Continuous Threat Exposure Management (CTEM)

Download Zafran Security product report

Qualys TotalCloud

Download Qualys TotalCloud product report

SentinelOne Singularity Identity

Download SentinelOne Singularity Identity product report

Also Known As

No data available

Qualys TotalCloud with FlexScan

No data available

Overview

Zafran Security integrates with existing security tools to identify and mitigate vulnerabilities effectively, proving that most critical vulnerabilities are not exploitable, optimizing threat management.

Zafran Security introduces an innovative operating model for managing security threats and vulnerabilities. By leveraging the threat exposure management platform, it pinpoints and prioritizes exploitable vulnerabilities, reducing risk through immediate remediation. This platform enhances your hybrid cloud security by normalizing vulnerability signals and integrating specific IT context data, such as CVE runtime presence and internet asset reachability, into its analysis. No longer reliant on patch windows, Zafran Security allows you to manage risks actively.

What are the key features of Zafran Security?

Threat Exposure Management: Utilizes existing tools to prioritize vulnerabilities and manage threats.
Integrative Analysis: Combines security data with IT context for precise vulnerability management.
Real-time Risk Reduction: Enables immediate risk management without waiting for patches.
Hybrid Cloud Compatibility: Functions across diverse cloud environments for comprehensive security.

What benefits can users expect from Zafran Security?

Improved Security: Enhances protection by efficiently identifying and mitigating risks.
Cost Efficiency: Reduces unnecessary patching expenses by confirming non-exploitable vulnerabilities.
Time Savings: Frees developers to focus on root causes by handling immediate threats.
Comprehensive Insight: Offers a holistic view of security threats and vulnerabilities.

In industries where security is paramount, such as finance and healthcare, Zafran Security provides invaluable protection by ensuring that only exploitable vulnerabilities are addressed. It allows entities to maintain robust security measures while allocating resources efficiently, fitting seamlessly into existing security strategies.

Zafran Security

TotalCloud is the Qualys approach to Cloud Native Application Protection Platform (CNAPP) for cloud infrastructure and SaaS environments. With TotalCloud, customers extend TruRisk insights (transparent cyber risk scoring methodology) from the Qualys Enterprise TruRisk Platform to their cloud environments allowing for a seamless unified view of cyber risk across on-prem, hybrid, and multi-cloud environments.

Features and capabilities of Qualys TotalCloud include, but are not limited to:

Discover: Complete visibility and insights into cyber-risk exposure across multi-cloud. Continuously discover and monitor all your workloads across a multi-cloud environment for a 360-degree view of your cloud footprint. Identify known and previously unknown internet-facing assets for 100% visibility and tracking of risks.

Assess: Comprehensive cloud-native assessments with FlexScanTM. Extensive scanning capabilities with Qualys FlexScan, including no-touch, agentless, API- and snapshot-based scanning, along with agent- and network-based scanning for in-depth assessment. Use these multiple scanning methods to scan a workload to get a unified and comprehensive view of vulnerabilities and misconfigurations.

Prioritize: Unified security view to prioritize cloud risk with TruRiskTM. Experience a unified risk-based view of cloud security with insights across workloads, services, and resources. Qualys TruRisk quantifies security risk by workload criticality and vulnerabilities; it correlates with ransomware, malware, and exploitation threat intelligence to prioritize, trace, and reduce risk.

Defend: Real-time protection against evolving and unknown threats with InstaProtectTM. Qualys enables continuous monitoring of all cloud assets to ensure they are protected against threats and attacks at runtime. Qualys keeps your cloud runtime safe by detecting known and unknown threats across the entire kill chain in near real-time across a multi-cloud environment.

Remediate: Fast remediation with QFlow – no code, drag-and-drop workflows. The integration of QFlow technology into Qualys TotalCloud saves security and DevOps teams valuable time and resources. Automation and no-code, drag-and-drop workflows help simplify the time-consuming operational tasks of assessing vulnerabilities on ephemeral cloud assets, alerting on high-priority threats, remediating misconfigurations, and quarantining high-risk assets.

Qualys

Singularity Identity, a component of the Singularity platform, provides threat detection & response (ITDR) capabilities to defend Active Directory and domain-joined endpoints in real-time from adversaries aiming to gain persistent, elevated privilege and move covertly. Singularity Identity provides actionable, high-fidelity insight as attacks emerge from managed and unmanaged devices. It detects identity misuse and reconnaissance activity happening within endpoint processes targeting critical domain servers, service accounts, local credentials, local data, network data, and cloud data. On-agent cloaking and deception techniques slow the adversary down while providing situational awareness and halting adversarial attempts at lateral movement. Singularity Identity helps you detect and respond to identity-based attacks, providing early warning while misdirecting them away from production assets.

Singularity Identity’s primary use case is to protect credential data and disrupt identity-based attacks. The most valuable function of Singularity Identity is its ability to misdirect attackers by providing deceptive data to identity-based recon attacks. Additionally, it can hide and deny access to locally stored credentials or identity data on Active Directory domain controllers.

Singularity Identity also provides rapid detection and respond to identity attacks, capturing attack activity and feeding it directly to the Singularity platform’s Security DataLake for enterprise-wide analysis and response.

By implementing Singularity Identity, organizations benefit from enhanced security, reduced credential-related risks, and improved user productivity. It detects and responds to identity-based attacks, ensuring only authorized individuals can access critical identity data. With its cloaking capabilities to hide identity stored locally on endpoints or in the identity infrastructure and it’s ability to provide decoy results to identity-based attacks, organizations can effectively secure their sensitive or privileged identities, resulting in improved overall identity security.

SentinelOne

Qualys TotalCloud vs. SentinelOne Singularity Identity