Qualys TotalCloud

My main use case for Qualys TotalCloud is to expand my imagination, professionalism, and knowledge. One specific example of how I have used it is that some of the things I have seen in studying have been things I have not seen in my life, and I learn about very specific topics that I did not even know existed.

Qualys TotalCloud positively impacts my own work because I really expand my knowledge.

It expands my knowledge by helping me understand new security concepts and tools I had not seen before, and it clarifies things I was struggling with, so now I have a much clearer understanding.

The TruRisk insights feature affects my security posture a lot because I was not aware that these tools were readily available, and now that I know we can work with them, it has been a very good experience.

In my opinion, the best features Qualys TotalCloud offers are the large and extensive knowledge base, making it a very good experience for studying and working on it.

The vulnerability scanning is a particular feature within Qualys TotalCloud that I have found especially helpful and interesting while studying, as it is one of my favorite topics, and I learn a lot from it.

Regarding Qualys TotalCloud's AI capabilities, I think its governance and security are adequate. I feel the governance and security are adequate because right now in the industry, we already have new tools and the right tools to react to the vulnerabilities we are experiencing today.

I think that Qualys TotalCloud has great accuracy and reliability, as it is a very complete program with tools that help experts understand the vulnerabilities of today.

Qualys TotalCloud does provide unified vulnerability and threat assessment across both IaaS and SaaS, and this unified view affects my overall cloud security posture management because you can see it in almost every example provided.

Regarding TruRisk insights, the actions I can take based on the information about assets with high vulnerability scores involve the vulnerability management actions, which I think are the ones that involve all the others.

I think Qualys TotalCloud is a very extensive study and a very complete matter, so I see no need for improvements.

I have been using Qualys TotalCloud when I take the courses and for some personal projects and for some projects of the work that I was looking forward to working on with some clients.

This adds up to only a few months, as I have been studying it more than practicing in the job because I have not practiced that job until now and have only been studying.

My advice to others looking into using Qualys TotalCloud is that it is a very good experience.

On a scale of 1 to 10, I would rate Qualys TotalCloud a nine. I chose nine out of 10 because, for starters, I do not believe in perfection. I always say nine or four, but it is a very complete study and I learn a lot, including some concepts I have not seen before.

My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics.

A quick specific example of how I use Qualys TotalCloud for telemetry is to look at risk.

I do not have anything else to add about how I use Qualys TotalCloud for telemetry or risk assessment at this time.

In my opinion, the best feature Qualys TotalCloud offers is the solution itself.

I would not like to add anything else about the features at this time.

Qualys TotalCloud has positively impacted my organization by providing visibility into the environment.

I cannot tell you more about how this visibility has benefited my team or organization, as I have not noticed any specific outcomes or improvements.

I am unsure about how Qualys TotalCloud can be improved.

I do not have anything else to add about the needed improvements, even if it is something small.

I have been using Qualys TotalCloud for a year.

I rate Qualys TotalCloud a 10 on a scale of 1 to 10. I choose this rating because it is an overall great solution.

We are cloud providers and cloud partners that provide services to customers, so we monitor cloud assets, vulnerabilities, and security misconfigurations of instances using Qualys TotalCloud. We also host multiple websites and monitor website vulnerabilities.

We use Qualys TotalCloud on a weekly basis to generate reports and check for misconfigurations or vulnerabilities.

We also use Qualys TotalCloud for website vulnerabilities such as cross-site scripting and SQL injection, as well as TLS version inspection to determine if old versions are supported, and for SSL security and SSL scans.

For more accurate information, we are using the agent among Qualys TotalCloud's flexible scanning options.

We have achieved timely patching of vulnerabilities with Qualys TotalCloud and are increasing our security scorecard, which is beneficial for customers to monitor. Our scorecard is above 90.

Previously, our security scorecard was around 75, and after using Qualys TotalCloud, we are maintaining it at 90, which represents an increase of about 17 points and varies between 92 and 93 sometimes.

Qualys TotalCloud provides unified vulnerability and threat assessment across both IaaS and SaaS, and this unified view has positively affected our overall cloud security posture management, as previously our security scorecard was 75 and has been increased to around 90 to 93 after vulnerability remediation and applying all patches.

Qualys TotalCloud has helped my team identify hidden exposures related to cloud, runtime, data, identity, SaaS, application, or Shadow AI before they become exploitable risks through our weekly reports from Qualys and timely patching, along with scheduling patch updates.

The best feature Qualys TotalCloud offers is its multi-cloud visibility, allowing us to view all three clouds at a time in a single console.

Multi-cloud visibility saves time and makes things easier, as we can also have comparability to see what configuration differences have been made from cloud to cloud.

Some features such as remediation for vulnerabilities and recommendations stand out regarding Qualys TotalCloud.

Qualys TotalCloud's AI capabilities are good in terms of governance and security, as it is following governance requirements.

For assets with high vulnerability scores such as older OS versions or older application versions such as Apache or Tomcat, we patch them step-by-step based on TrueRisk information, planning the steps one by one and taking a backup of everything.

TrueRisk is helpful for prioritizing vulnerabilities based on risk instead of raw CVEs, allowing us to remediate high-risk issues first by comparing the risk, making it very helpful.

FlexScan provides comprehensive visibility across our on-premises, multi-cloud, and container environments, ensuring there are no gaps.

Qualys TotalCloud can be improved in terms of initial configuration, as it would be somewhat complex.

It should increase the risk prioritization accuracy in AI regarding Qualys TotalCloud's AI capabilities, especially in terms of accuracy and reliability of output.

In my opinion, the combination of detection and protection features in Qualys TotalCloud cannot protect but can only detect.

We have been using Qualys TotalCloud for four years.

Qualys TotalCloud is stable.

Qualys TotalCloud is scalable and can support cloud environments across multiple platforms, but performance and ease of reporting on cost and optimization could be improved as the number of cloud assets and workloads increases.

Customer support for Qualys TotalCloud is good.

I would rate the customer support an eight out of ten.

We have seen a return on investment in terms of our security posture, which has been increased, alongside a good reputation with customers.

We purchased Qualys TotalCloud for GCP and Azure as well.

It is comparatively better than others regarding pricing.

The pricing is reasonable for Qualys TotalCloud without facing any challenges.

Before choosing Qualys TotalCloud, we evaluated options such as Microsoft Security, Palo Alto Prisma Cloud, and Check Point CloudGuard.

I would rate Qualys TotalCloud a nine out of ten. I chose nine because it has better features, better visibility, a better console, and centralized monitoring, along with all the multi-cloud visibility capabilities, and the vulnerabilities shown are accurate with accurate recommendations. Qualys TotalCloud is deployed as a SaaS-based product in our organization.

I am responsible for all the public cloud data center environments at my current organization.

I use Qualys TotalCloud for my cloud inventory, for my vulnerability management, for my patching, and for my policy compliance. That covers my main use case.

Currently, I am only using the cloud agent from Qualys TotalCloud, but I am looking to start using the container and the snapshot scanning functionality. I am considering moving from Prisma, Cortex, and XCIAM into just using Qualys.

We have not started using Qualys TotalCloud to improve visibility and control across Kubernetes clusters, container images, registries, admission policies, runtime drift, and vulnerable running workloads yet as they are currently being managed in the Prisma stack, but it is something we are moving into Qualys.

The ease of deployment, the accuracy of the data, and how frequently it is fresh has positively impacted my organization. That has been the biggest impact.

Qualys TotalCloud is doing all of those things now, and we are always looking to improve and continue to drive those functions. It has moved the needle immensely for us.

Qualys TotalCloud provides unified vulnerability and threat assessment across both IaaS and SaaS for us. Having everything in a single place to look for it and a single integration into ServiceNow has been the big transformation.

The True Risk insights feature is allowing us to come up with better strategies. The entire organization is restructuring the way vulnerability management is done, and it is being based around Qualys TotalCloud capabilities. I would characterize this as transformational for the organization as a whole.

It has been very effective regarding using True Risk to mitigate noise from raw CVEs. My customer wants to no longer look at CVEs or have ServiceNow's VRR do any of the elevation or adjustments of the scores, and they want to only use True Risk.

The speed and accuracy of the connectors and the cloud agents are some of the best features of Qualys TotalCloud, but I am very excited about all of the ETM functionality that I am looking at now.

I have a lot of customers with their own data. Being able to bring their data into the platform and rationalize it, as well as other security tools that we own, is exciting to me. Having that context in the system helps us understand the environment better, prioritize our threats, and identify where we really need to spend time versus some of the noise.

I appreciate that Qualys TotalCloud is being developed in partnership with leading technologies, but it is not just turned loose. I appreciate the approach Qualys is taking with the usage of the models, limiting how much they are spending in tokens by being smart about which technology to use when.

I am just starting my journey with Qualys TotalCloud's AI capabilities, so I really cannot comment on that yet.

I currently do not use FlexScan. I am familiar with it, but I cannot speak to it because we do not use it.

I am at the Qualys conference, and I am seeing all the improvements on the radar. At the moment, I do not have any suggestions for improvements.

I have been using Qualys TotalCloud since its inception. I was a former Qualys employee and left, and I am a practitioner working for a partner.

Qualys TotalCloud is stable.

The scalability of Qualys TotalCloud is great. I do not have to do anything because everything is in the cloud and managed for me, so I do not really have to do anything around the product's availability and scaling.

I have very good customer support with Qualys TotalCloud as a federal customer.

The old team was also using a different solution, but they were on VMDR. We are on Qualys TotalCloud.

I cannot measure a return on investment because of how our structure is. We came in and took a Qualys TotalCloud subscription over, migrated it into a clean subscription, and re-established it, so I do not really have a reference point to say what the old team was doing.

As a technical architect, I did not really deal with pricing.

This was the selected tool due to customer preference.

I give Qualys TotalCloud a rating of nine out of ten. Ten is perfection, and there are always those moments where I have to reach out, get help, support, and wait on a feature, so reasonably, it is definitely a nine.

We use all of the available cloud providers authorized for the United States, both commercial and GovCloud.

It is important to stop trying to use Qualys TotalCloud the way you used prior tools. If you were a Tenable user, the worst thing you can do is try to go in and operate Qualys TotalCloud as if it were Tenable or any other product because it is far more simple to manage, maintain, run, and operate. What I find people do is overcomplicate things and cause themselves a lot of headaches and unnecessary work.

My main use case for Qualys TotalCloud is to obtain a complete view of our cloud assets, specifically Microsoft Azure.

A specific example of how I use Qualys TotalCloud with my Azure assets is that we installed the Azure connector to monitor our accounts and registration apps that we have in place.

Qualys TotalCloud has positively impacted my organization by giving us a better view of everything in a single pane of glass from the cloud view.

Since having that single pane of glass view, it has helped us save time and money when giving full reports to management and leadership.

This unified view has affected our overall cloud security posture management by putting it all in one spot, making it very easy to provide all the information needed to our stakeholders, leadership, and management.

Based on the TruRisk information, I was able to patch those critical vulnerabilities with high reliability.

Qualys TotalCloud has helped my team identify hidden cloud, runtime, data, identity, SaaS, application, or shadow AI exposures before they became exploitable risks.

The best features Qualys TotalCloud offers are full reliability and product support.

Regarding full reliability, I value seeing what is out there and having it verified with what I can see from my side in the portal view for Azure. For product support, I value the support regarding what products are available to sync with the product.

Qualys TotalCloud's AI capabilities are well designed and I do not see any problems with the use case for using the agents.

I find Qualys TotalCloud's AI capabilities to be completely accurate and completely reliable.

Qualys TotalCloud provides unified vulnerability and threat assessment across both IaaS and SaaS.

The solution's TruRisk Insights feature has found a small number of assets with high vulnerability scores.

My experience with using TruRisk to mitigate noise from raw CVEs has been extremely effective. I find it beneficial to use the QIDs over the CVEs, and the descriptions of those provide more information on the CVEs that are combined in the QID.

I assess the comprehensiveness of FlexScan in providing visibility across our on-premises, multi-cloud, and container environments as very convenient.

I do not have any ideas on how Qualys TotalCloud can be improved.

I have been using Qualys TotalCloud for about a year.

Qualys TotalCloud is stable.

Regarding Qualys TotalCloud's scalability, it has scaled to all of our needs without any problems or slowness.

Customer support is spot on, as expected. I would rate the customer support a 10.

We previously used Tenable before we used Qualys TotalCloud.

What made me switch from Tenable to Qualys TotalCloud was the ability to have everything shown in one area and to generate tickets for everything we need.

I have seen a return on investment, specifically in time saved, rather than having to use an old product and patch things manually without the actual site needed to make educated decisions.

My experience with pricing, setup cost, and licensing has been professional and conducted in a well manner.

Before choosing Qualys TotalCloud, we did evaluate other options, but I was not involved in that part.

I rate Qualys TotalCloud a 10 because I see nothing wrong with it; it does exactly what we pay for. Qualys TotalCloud is deployed in our organization in the cloud. We use Azure as our cloud provider. My advice to others looking into using Qualys TotalCloud is to obtain a full idea of what you want to implement and how you want to implement it. If you feel that it will take too much of your time, obtain some professional help to scope that out and plan the deployment. Overall, I would rate Qualys TotalCloud a 10 out of 10.

My main use case for Qualys TotalCloud involves using modules such as VMDR, CSAM, and the Cloud agent module.

A specific example of how I use one of those modules in my day-to-day work is that we scan our assets in our environment, and we have the inventory management in CSAM that tags the assets with the owners, and then that's how we leverage findings for remediation.

We are using Qualys TotalCloud's flexible scanning options, specifically doing IP scanning and the cloud agent scanning for workstations.

Qualys TotalCloud has positively impacted my organization, and it has been amazing.

The positive impact includes that the cloud agent will reduce most of the administrative work where we currently perform a lot of administrative work in terms of network scanning for our percentage in place, and it will remove all the burdens.

The best feature I appreciate about Qualys TotalCloud is the cloud agent merging feature, which is very good.

The cloud agent merging feature benefits my work by ensuring that if an asset has been scanned by a scanner, then once the agent is installed, the UUID, which had the information from the scanner, merges all the information with the cloud agent findings.

Qualys TotalCloud's TruRisk insights feature has found a small number of assets with high vulnerability scores, and once we have the QDS score more than 80 or 90, we start our remediation plans.

When we see those high QDS scores, we typically engage the different lines of business and businesses for remediation actions as we have different LOBs remediation teams and a patch team.

My experience with using TruRisk to mitigate noise from raw CVEs has been great.

Qualys TotalCloud can be improved in the integration piece, especially with ServiceNow, where there's a bidirectional sync integrated, as there is no native capability from Qualys that can give monitoring metrics of how many assets came in and how many failed or were not properly reconciled or combined.

I have been using Qualys TotalCloud for one year.

Qualys TotalCloud is stable.

Qualys TotalCloud's scalability is great.

The customer support is great, but I would rate it 8 out of 10 for the customer service.

We were using Tripwire, and before I joined the team, it was already planned to migrate from Tripwire to Qualys TotalCloud.

Before choosing Qualys TotalCloud, I think we were looking at Tenable, but I am not certain.

I rate Qualys TotalCloud overall as 8.5 out of 10 because of the integration issue we have right now with ServiceNow and CMDB, as there are no monitoring metrics available for us to monitor the integration flow.

Regarding Qualys TotalCloud's AI capabilities, I think it uses some of the open-source LLMs, so I have to take a closer look at what guardrails are present on the Qualys side before we get that agent in our environment.

I would advise others looking into using Qualys TotalCloud to use the cloud agent and the items.

Qualys TotalCloud is our main tool for replacing our entire SOC. Our primary objective is to start working on handling the network vulnerabilities we have identified in a more practical way, trying to identify what is most important for us, considering that currently in our network we have many alerts.

Qualys TotalCloud has had a positive impact on our organization so far, even while it is still in the implementation phase, as I believe that Qualys' tools will optimize what we currently have. We use a competitor that has been meeting our needs, but when we identified this possibility of change, we believed it would serve us better through the use of artificial intelligence together with the prioritization in addressing some vulnerabilities.

At this moment, we have experienced a motivational impact on my team. Qualys TotalCloud has not yet identified hidden exposures in cloud, runtime, data, identity, SaaS, applications or shadow AI risks because it has not been implemented. We will implement it in December, and in the tests, it worked very well and generated high expectations.

The best features that Qualys TotalCloud offers are the use of artificial intelligence in vulnerability handling to identify what is most important, which is my main focus and objective.

Qualys TotalCloud helps to prioritize vulnerabilities primarily through prioritization in the handling of vulnerabilities, which I consider to be the most important feature.

Regarding the AI features of Qualys TotalCloud, I found it quite interesting because it gives autonomy to manage and govern security in a more centralized way, bringing good results for the institution.

The accuracy and reliability of the results from the AI features of Qualys TotalCloud, based on the tests we carried out, were very advantageous and very satisfactory, which is why we are moving forward with migrating to the tool to use all Qualys tools.

I rate the breadth of FlexScan in providing visibility into on-premises, multicloud, and container environments as fantastic. I found it to have enormous coverage, currently much better than what we have available in our environment.

Although we have not yet implemented the tool, in the tests we are very hopeful and believe Qualys TotalCloud's flexible scanning options, such as agent, agentless, API, network, runtime, serverless, snapshot or eBPF-supported approaches will be very comprehensive for the services we currently use and will improve coverage of cloud workloads.

I believe Qualys TotalCloud can be improved by allowing the customer to create their own intelligence agent to meet their specific demands, instead of using only the agents already created in the tool.

The improvement needed in Qualys TotalCloud is mainly in the artificial intelligence automation agents, where we can customize and create what meets our needs, not necessarily having to use those provided in the tool. I rate it a nine because the possibility of creating my own intelligence agents is what is missing for it to be a ten.

We are currently in the implementation process of Qualys TotalCloud and should start using it at the end of the year.

I believe that Qualys TotalCloud is stable, but we have not yet completed the implementation.

According to the tests and analyses we have already carried out, the scalability of Qualys TotalCloud apparently will meet all our expectations. We are looking at coverage throughout Brazil since our company currently operates in all Brazilian states, so it will meet our current needs.

Qualys' customer support so far has been satisfactory. On a scale from one to ten, I would rate customer support a ten.

We currently use Sophos in our solutions, and we were introduced to Qualys by one of your partners in Brazil, e-Safer, and we are going to migrate.

Qualys TotalCloud is implemented in our organization through a public cloud.

I have not obtained any return on investment yet because, as I mentioned earlier, it has not yet been implemented in the institution.

My experience with pricing, setup costs, and licensing for Qualys TotalCloud is that the costs are very competitive. In our case, replacing the tool will give us better functionalities without increasing the cost compared to what we pay today for the competitor.

Before choosing Qualys TotalCloud, I did not necessarily evaluate other options. We already use Sophos in our environment and that is why we are changing.

We currently use Oracle Cloud as our cloud provider. I would rate Qualys TotalCloud a nine on a scale from one to ten.