Microsoft Defender for Cloud is a Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) for Azure, on-premises, and multicloud (Amazon AWS and Google GCP) resources.
N/A
Qualys TotalCloud
Score 8.2 out of 10
N/A
Qualys TotalCloud (formerly BlueHexagon, acquired by Qualys in October 2022), offers continuous cloud-native security, visibility and compliance for AWS, GCP, Azure and OCI —with asset inventory and misconfiguration, and threat detection. Blue Hexagon aims to improve the user's cloud security posture with its agentless solution powered by deep learning.
So, for companies that are strictly Microsoft-based for PCs, it's a good thing for them to have. Some that are more Mac-based or Linux-based have some gaps, and I think there are some gaps in the availability of vulnerability scanning for third-party software that gets loaded onto those machines. Microsoft does a really good job of scanning the products that are good for Windows devices, but they struggle a bit on the Linux side and a little bit on the Mac side. So I'd like to see them try to improve.
We have found Qualys TotalCloud useful to track down and identify specific files or packages, which helped us to verify that the solution we had implemented was successful. It also helped us do identify false positives, since the paths of the files are included in the Qualys TotalCloud details, so we could see if files were just and set of old install files.
It's really well laid out, with an easy-to-use, accessible UI.
With Microsoft Defender for Cloud, it has everything you need with the Safelink attachment, the Safelink emails for URL, the way it scans those URLs and attachments within the product, and you're seeing the results. And that adds an extra layer of security for the user, so you feel comfortable knowing the product monitors those. That's something I really like about that product.
I think Microsoft Defender for Cloud could do a better job of making some of the security alerts easier to understand and easier to resolve.
Since there are some popular ITSM tools that a lot of companies use, I think Microsoft should make it a lot easier for Microsoft Defender for Cloud to integrate with the popular ITSM tools.
The should be a way for users to trigger their own scans for data security related events.
It is a great product that integrates nicely when running an Azure platform and even multi-cloud environment. Not looking for point-solutions but a suite that answers most requirements. It is very comfortable being able to use KQL, workbooks and automation that is native to the azure platform
My visibility is limited because I'm only doing very small pieces of what the overall org does. And also, we have limitations on what we're allowed to use. It's not like we get a new product as users or leadership level users, and everything is on, and we can just do whatever we want. We're very restricted in what we can use any tooling within the org because of the different levels of regulatory constraints we have, because of just the nature of who we are inherently. So that's why. I don't think it's necessarily the product. I think it's more or less of what we're able to do with the product.
After installing Qualys TotalCloud, it was just a matter of initiating a service or daemon and it continues to run. There is no maintenance or special monitoring needed. Qualys TotalCloud seamlessly reports the required information to Cisco Security and all we need to do is check the Cisco Security interface for any vulnerabilities that we need to address.
Microsoft Defender for Cloud is definitely the choice with the latest market trend and attacks that are currently happening. Microsoft has been able to safe guard a lot after the recent serious attacks happening globally in the digital world. There is a trust in this software and with the latest updates and machine learning capabilities, Microsoft Defender for Cloud should be the choice.
Allowed me to resolve vulnerabilities so that none of our servers have high-priority vulnerabilities.
Keeping our own environments safe also ensures that our customers' environments are safe.
Using the Qualys TotalCloud details reported on our servers allows us to assist customers in resolving their vulnerabilities that they ask us for assistance with resolving.
