Qualys TotalCloud vs Tanium comparison

Read 15 Tanium reviews

2,394 Views
1,697 Comparison Views

71% willing to recommend

Qualys TotalCloud

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 9, 2024

Tanium and Qualys TotalCloud are competitive in cybersecurity solutions. Tanium seems to have an edge in pricing and support, while Qualys TotalCloud is stronger in feature offerings, making it appealing for organizations needing comprehensive security tools.

Features: Tanium provides strong asset discovery, real-time data gathering, and immediate insights for IT operations. Qualys TotalCloud distinguishes itself with robust vulnerability management, effective compliance tools, and comprehensive cloud environment support.

Room for Improvement: Tanium can improve by expanding its feature set, enhancing cloud compatibility, and refining its threat intelligence capacities. Qualys TotalCloud might benefit from more competitive pricing, enhanced real-time data collection, and improved personalized support services.

Ease of Deployment and Customer Service: Tanium's deployment process is efficient with personalized service support, enhancing user experience for complex IT infrastructures. Qualys TotalCloud offers a straightforward onboarding process suitable for scalable environments, though it may not provide as personalized support as Tanium.

Pricing and ROI: Tanium's pricing is considered reasonable with a substantial return on investment due to effective threat detection and reduced downtime. Qualys TotalCloud may require a higher upfront cost, justified by its expansive features and consistent security improvements.

To learn more, read our detailed Qualys TotalCloud vs. Tanium Report (Updated: October 2024).

Qualys TotalCloud vs. Tanium

Download the complete report

Helped 814,528 peers since 2012

Categories and Ranking

Qualys TotalCloud

Ranking in Vulnerability Management

30th

Average Rating

8.6

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Container Security (24th), Cloud Workload Protection Platforms (CWPP) (19th), Cloud Security Posture Management (CSPM) (21st), SaaS Security Posture Management (SSPM) (6th), Cloud-Native Application Protection Platforms (CNAPP) (17th)

Tanium

Ranking in Vulnerability Management

23rd

Average Rating

7.4

Number of Reviews

Ranking in other categories

Server Monitoring (10th), Endpoint Protection Platform (EPP) (36th), Endpoint Detection and Response (EDR) (26th)

Featured Reviews

Brad Mathis

Employee-Owner, Senior Consultant, Information Security at Keller Schroeder

Jun 10, 2024

Offers easy-to-follow instructions, enhanced posture management, and improved visibility

TotalCloud offers written explanations to guide us through fixing security vulnerabilities and reducing cyber risks. For instance, if we click on a finding like "ensure public access level is set to private for block containers" a CIS Microsoft Azure Foundations benchmark, TotalCloud will not only tell us which specific container is failing but also provide remediation steps. These steps include a clear, step-by-step guide to fix the issue directly from the Azure console or command line, making it easy to address security risks. After deploying TotalCloud and configuring the connectors for Azure, we quickly gained visibility into our cloud security posture. While the initial setup gathers data, the overall process is swift and delivers immediate insights. TotalCloud offers a unified way to assess vulnerabilities and threats across both Asset-as-a-service and software-as-a-service applications. While an additional module, Software Detection Response, is required for the same level of detail in SaaS assessments, it integrates seamlessly with TotalCloud and gathers information through the Azure connector. Similarly, the SDR component is used for Microsoft 365 environments, consolidating all threat data into a single report. It has significantly enhanced our posture management insight and awareness. It provides a valuable third-party perspective, highlighting potential security issues we might have missed with Microsoft's built-in settings. This independent view offers a more objective assessment, similar to having a security expert unaffiliated with Microsoft or any specific platform. TotalCloud summarizes our cloud security risks in a single view, prioritizing the most important ones. It allows us to generate reports based on severity levels (critical, high, medium) and offers pre-built dashboards like the Azure one, which highlights the most critical control failures along with the number of affected resources. This way, we can focus on addressing the most urgent issues first. We can use TruRisk in TotalCloud to view a risk score for our virtual machines. This score indicates the overall security posture of the machine, along with details on identified vulnerabilities confirmed and potential. While the TruRisk score is a valuable integration, I haven't had the chance to fully explore its functionalities in our environment yet.

Read full review

Mo Vermeiren

Cybersecurity Business & Technology Consultant at Capgemini

Mar 31, 2022

Is able to make several campaigns work in parallel, but the user interface needs improvement

It's mainly used by the cybersecurity team for Windows patching and deployment of some software solutions I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"While automatic inventory detection upon connection is a helpful feature, a truly valuable capability would be assessing an environment's security posture against Azure and CIS best practices."

"Its excellent graphical interface makes the scanning process simple."

"The most valuable feature is extensibility."

"The security features are very valuable."

"The interrogation piece was the most valuable feature because it was very detailed."

"The product is granular and can build complex roles compared to other EDR vendors."

"The solution is scalable and helps to understand how infrastructure works. It helps to improve the health of the organization."

"Tanium’s linear-chain architecture is valuable."

"Tanium's most valuable features are patch management, inventory, and distribution software."

"The most valuable features of this solution are the consolidation of all historical data on device endpoints, security drivers, firmware, and Software version gaps."

"For incident response tasks, all these tasks can get done in minutes with minimal disruption to the end-user."

More Tanium pros

Cons

"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."

"Qualys TotalCloud needs to enhance its scanning capabilities in the IP domain, as it currently lacks the functionality to resolve IPs to their corresponding domain names."

"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."

"Most of the time, agent-relative issues have to be more equipped with self-healing features. At times, the agent is there, but for some reason, it doesn't report a status. It gives certain problems that are obviously agent-based."

"The performance could improve in future releases. We have had performance issues in specialized web environments, but overall I think the problems are less than 2% of the computer systems being used."

"Any movement into a SaaS solution has challenges since the processes and data flows are not well defined. Hence, you need to build it at the same time."

"The solution can give a lot of false positives."

"The reporting could be improved."

"The solution lacks mobility."

"The main issues are the network connection because different customers have issues with their networks. It's difficult implementing this type of solution because the network is the main feature in the architecture for these types of solutions. Tanium could improve by creating some network optimization."

"I would like to have more integrations and custom plugins to input. Integration is always a big deal in a lot of different environments."

More Tanium cons

Pricing and Cost Advice

"TotalCloud's price is about right where I would expect it to be."

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

"Qualys TotalCloud is expensive."

"The product's pricing differs from region to region depending on negotiations and the number of endpoints."

"There is an annual license required to use this solution."

"It is higher than some competitors in the market."

"The solution offers value for money."

"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."

"It's an expensive solution. It would be nice if the cost were lower."

"The solution is expensive but it's a good investment."

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

814,528 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

22%

Financial Services Firm

12%

Government

12%

Manufacturing Company

11%

Financial Services Firm

17%

Government

13%

Computer Software Company

11%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

Qualys TotalCloud is expensive.

What needs improvement with Qualys TotalCloud?

Qualys TotalCloud needs to enhance its scanning capabilities in the IP domain, as it currently lacks the functionality to resolve IPs to their corresponding domain names.

What is your primary use case for Qualys TotalCloud?

We utilize Qualys TotalCloud to conduct DNS, IP, and WOS scans and identify system vulnerabilities.

What do you like most about Tanium?

Tanium’s linear-chain architecture is valuable.

What needs improvement with Tanium?

The reporting could be improved.

What is your primary use case for Tanium?

We collect end-point data. We use it to make AI models and provide it to customers. I use Tanium’s sensors, collect data, and develop dashboards. The sensors have many data types. If we need differ...

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Comparisons

Wiz vs Qualys TotalCloud

Compared 34% of the time

Compared 14% of the time

AWS GuardDuty vs Qualys TotalCloud

Compared 13% of the time

AWS Security Hub vs Qualys TotalCloud

Compared 12% of the time

Qualys VMDR vs Qualys TotalCloud

Compared 8% of the time

More Qualys TotalCloud Competitors

CrowdStrike Falcon vs Tanium

Compared 18% of the time

Microsoft Defender for Endpoint vs Tanium

Compared 11% of the time

Microsoft Configuration Manager vs Tanium

Compared 8% of the time

ServiceNow Discovery vs Tanium

Compared 7% of the time

BigFix vs Tanium

Compared 5% of the time

More Tanium Competitors

Product Reports

Cloud-Native Application Protection Platforms (CNAPP)

Download Qualys TotalCloud product report

Download Tanium product report

Also Known As

Qualys TotalCloud with FlexScan

No data available

Learn More

Qualys

Overview

TotalCloud is the Qualys approach to Cloud Native Application Protection Platform (CNAPP) for cloud infrastructure and SaaS environments. With TotalCloud, customers extend TruRisk insights (transparent cyber risk scoring methodology) from the Qualys Enterprise TruRisk Platform to their cloud environments allowing for a seamless unified view of cyber risk across on-prem, hybrid, and multi-cloud environments.

Features and capabilities of Qualys TotalCloud include, but are not limited to:

Discover: Complete visibility and insights into cyber-risk exposure across multi-cloud. Continuously discover and monitor all your workloads across a multi-cloud environment for a 360-degree view of your cloud footprint. Identify known and previously unknown internet-facing assets for 100% visibility and tracking of risks.

Assess: Comprehensive cloud-native assessments with FlexScanTM. Extensive scanning capabilities with Qualys FlexScan, including no-touch, agentless, API- and snapshot-based scanning, along with agent- and network-based scanning for in-depth assessment. Use these multiple scanning methods to scan a workload to get a unified and comprehensive view of vulnerabilities and misconfigurations.

Prioritize: Unified security view to prioritize cloud risk with TruRiskTM. Experience a unified risk-based view of cloud security with insights across workloads, services, and resources. Qualys TruRisk quantifies security risk by workload criticality and vulnerabilities; it correlates with ransomware, malware, and exploitation threat intelligence to prioritize, trace, and reduce risk.

Defend: Real-time protection against evolving and unknown threats with InstaProtectTM. Qualys enables continuous monitoring of all cloud assets to ensure they are protected against threats and attacks at runtime. Qualys keeps your cloud runtime safe by detecting known and unknown threats across the entire kill chain in near real-time across a multi-cloud environment.

Remediate: Fast remediation with QFlow – no code, drag-and-drop workflows. The integration of QFlow technology into Qualys TotalCloud saves security and DevOps teams valuable time and resources. Automation and no-code, drag-and-drop workflows help simplify the time-consuming operational tasks of assessing vulnerabilities on ephemeral cloud assets, alerting on high-priority threats, remediating misconfigurations, and quarantining high-risk assets.

Tanium Endpoint Platform reduces security risk, improves agility & increases efficiency, a fundamentally new approach to endpoint security's threat detection, indicent response, vulnerability assessment and configuration compliance & with management's software distribution, asset utilization, asset inventory and patch management.

Sample Customers

Information Not Available

JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life

Qualys TotalCloud vs. Tanium