Qualys Reviews, Ratings & Features 2026 | Gartner Peer Insights

Cloud-native application protection platforms (CNAPPs) are a unified and tightly integrated set of security and compliance capabilities, designed to protect cloud-native infrastructure and applications. CNAPPs incorporate an integrated set of proactive and reactive security capabilities, including artifact scanning, security guardrails, configuration and compliance management, risk detection and prioritization, and behavioral analytics, providing visibility, governance and control from code creation to production runtime. CNAPP solutions use a combination of API integrations with leading cloud platform providers, continuous integration/continuous development (CI/CD) pipeline integrations, and agent and agentless workload integration to offer combined development and runtime security coverage.

Active

Find the top Cloud-Native Application Protection Platforms with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Cloud-Native Application Protection Platforms

Qualys TotalCloud

Qualys

IT Security & Risk Management Associate

Overall, my experience with Qualys TotalCloud has been okay. It has given me and my team a much better visibility into our cloud environment and helped identify security risks that would have been difficult to find manually. The platform provides useful insights for monitoring cloud assets, compliance and misconfigurations in one place. While there was a bit of a learning curve during the initial setup, the product has been reliable and has become an important part of our cloud security workflow.
Overall, it has helped improve our security posture and made cloud risk management more efficient and I would recommend it to others.

<50M USD

50M - 250M USD

500M - 1B USD

250M - 500M USD

30B + USD

3B - 10B USD

1B - 3B USD

10B - 30B USD

IAM LEAD

Qualys is a awesome scanning tool that allows businesses to scan and provide visibility of their environments, in our case our cloud environment. However, it is an expensive tool especially with the purchase of licenses and the complex onboarding of the tool to different services in our environment.

Cybersecurity Analyst

Mi experiencia general con Qualys TotalCloud ha sido positiva. La plataforma ofrece una visión unificada de la seguridad en entornos multinube, facilitando la identificación de vulnerabilidades, configuraciones incorrectas y riesgos de cumplimiento. Su capacidad de monitoreo continuo y priorización de riesgos ayuda a los equipos de seguridad a responder de forma mas eficiente y fortalecer la postura en la nube.

My overall experience with Qualys TotalCloud has been positive. The platform offers a unified view of security across multi-cloud environments, making it easier to identify vulnerabilities, misconfigurations, and compliance risks. Its continuous monitoring and risk prioritization capabilities help security teams respond more efficiently and strengthen their cloud posture.

Tenable

CrowdStrike

Rapid7

Microsoft

Palo Alto Networks

SentinelOne

TrendAI

Aqua Security

Cisco (Valtix)

Zscaler

Orca Security

Check Point Software Technologies

Sophos

IBM (Red Hat)

Broadcom

Other...

Cisco Systems

Google

Bitdefender

Datadog

CloudPassage

CloudDefense

Lightspin

GuardRails

Fortinet

Virsec

Lacework

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. 
The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices.

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. 
The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com.


Reviews

Ratings Overview

Overall experience with

Favorable Review

Complete multi-cloud visibility and ease of response to vulnerabilities

Critical Review

Enhanced cloud environment monitoring comes with steep pricing and setup hurdles

Likes and dislikes about

likes

dislikes