TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Qualys TruRisk Platform

    Score6 out of 10
    N/AQualys TruRisk Platform (formerly Qualys Cloud Platform, or Qualysguard), from San Francisco-based Qualys, is network security and vulnerability management software featuring app scanning and security, network device mapping and detection, vulnerability prioritization schedule and remediation, and other features to provide vulnerability management and network attack surface reduction.N/A

    Sonatype Platform

    Score8.8 out of 10
    Enterprise companies (1,001+ employees)
    Sonatype secures the software supply chain and protects organizations' vital software development lifecycle(SDLC). The platform unites security teams and developers to accelerate digital innovation without sacrificing security or quality across the SDLC. With users among more than 2,000 organizations and 15 million software developers, Sonatype tools and guidance help users to deliver and maintain exceptional and secure software.

    $0

    for use of the Sonatype Nexus Repository Community Edition

    Pricing
    Qualys TruRisk PlatformSonatype Platform
    Editions & Modules
    No answers on this topic
    Sonatype Air-Gapped Environment Nexus Repository
    $175
    per year per user
    Sonatype Repository Firewall
    $224
    per year per user
    Sonatype Repository Firewall for Artifactory
    $224
    per year per user
    Sonatype Air-Gapped Environment Repository Firewall
    $230
    per year per user
    Sonatype Repository Firewall Cloud
    $265
    per year per user
    Sonatype Lifecycle
    $690
    per year per user
    Sonatype Lifecycle Cloud
    $810
    per year per user
    Sonatype Air-Gapped Environment Lifecycle
    $825
    per year per user
    Sonatype Nexus Repository Pro
    $960
    per month (billed annually)
    Sonatype Nexus Repository
    $960
    per month (billed annually)
    Sonatype SBOM Manager
    Contact Sales
    Offerings
    Pricing Offerings
    Qualys TruRisk PlatformSonatype Platform
    Free Trial
    NoYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeRequired
    Additional Details——
    More Pricing Information
    Community Pulse
    Qualys TruRisk PlatformSonatype Platform
    Considered Both Products
    Qualys
    No answer on this topic
    Sonatype
    No answer on this topic
    Key User Insights
    Would buy again
    85%
    Would buy again
    17 Answers
    100%
    Would buy again
    14 Answers
    Delivers good value for the price
    87%
    Delivers good value for the price
    13 Answers
    100%
    Delivers good value for the price
    14 Answers
    Happy with the feature set
    85%
    Happy with the feature set
    17 Answers
    100%
    Happy with the feature set
    14 Answers
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    15 Answers
    90%
    Lived up to sales and marketing promises
    9 Answers
    Implementation went as expected
    92%
    Implementation went as expected
    12 Answers
    100%
    Implementation went as expected
    12 Answers
    Features
    Qualys TruRisk PlatformSonatype Platform
    Threat Intelligence
    Comparison of Threat Intelligence features of Qualys TruRisk Platform and Sonatype Platform
    Feature
    Qualys TruRisk Platform
    8.7
    7 Ratings
    7% above category average
    Sonatype Platform
    -
    Ratings
    Network Analytics8.96 Ratings00 Ratings
    Threat Recognition8.37 Ratings00 Ratings
    Vulnerability Classification8.87 Ratings00 Ratings
    Automated Alerts and Reporting9.07 Ratings00 Ratings
    Threat Analysis8.27 Ratings00 Ratings
    Threat Intelligence Reporting8.97 Ratings00 Ratings
    Automated Threat Identification8.77 Ratings00 Ratings
    Vulnerability Management Tools
    Comparison of Vulnerability Management Tools features of Qualys TruRisk Platform and Sonatype Platform
    Feature
    Qualys TruRisk Platform
    8.5
    9 Ratings
    2% above category average
    Sonatype Platform
    -
    Ratings
    IT Asset Realization8.89 Ratings00 Ratings
    Authentication7.96 Ratings00 Ratings
    Configuration Monitoring8.57 Ratings00 Ratings
    Web Scanning8.88 Ratings00 Ratings
    Vulnerability Intelligence8.67 Ratings00 Ratings
    Best Alternatives
    Qualys TruRisk PlatformSonatype Platform
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    Tenable Nessus
    Score8.8 out of 10
    No answers on this topic
    Enterprises
    Tenable Vulnerability Management
    Score8.9 out of 10
    No answers on this topic
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Qualys TruRisk PlatformSonatype Platform
    Likelihood to Recommend
    8.6
    (25 ratings)
    8.8
    (14 ratings)
    Likelihood to Renew
    -
    (0 ratings)
    8.9
    (2 ratings)
    Usability
    2.0
    (1 ratings)
    8.0
    (2 ratings)
    Availability
    -
    (0 ratings)
    9.0
    (1 ratings)
    Performance
    -
    (0 ratings)
    8.0
    (1 ratings)
    Support Rating
    5.0
    (7 ratings)
    10.0
    (2 ratings)
    Online Training
    -
    (0 ratings)
    8.0
    (1 ratings)
    Implementation Rating
    -
    (0 ratings)
    8.0
    (1 ratings)
    Configurability
    -
    (0 ratings)
    8.4
    (2 ratings)
    Contract Terms and Pricing Model
    -
    (0 ratings)
    9.0
    (1 ratings)
    Ease of integration
    -
    (0 ratings)
    9.0
    (1 ratings)
    Product Scalability
    -
    (0 ratings)
    8.0
    (1 ratings)
    Professional Services
    -
    (0 ratings)
    9.0
    (1 ratings)
    Vendor post-sale
    -
    (0 ratings)
    10.0
    (1 ratings)
    Vendor pre-sale
    -
    (0 ratings)
    10.0
    (1 ratings)
    User Testimonials
    Qualys TruRisk PlatformSonatype Platform
    Likelihood to Recommend
    Qualys
    Qualys Cloud Platform is well suited for organizations that need additional tools to secure and bolster their security from end to end. The automated, real-time threat protection is very quick to notify an admin of potential vulnerabilities and risks, as well as recommending quick fixes to resolve/close the gap before an incident occurs. QCP excels at portraying all of these in a single pane of glass, and find that the Qualys reports are more detailed than competitor product lines. One of our big issues with QCP is that you do have to pay for each scanner, which can quickly add up to large costs. For this reason, I would rate Qualys at a ~7 due to great features and functionality, but overall value could be better for a large organization. I would also say that QCP may make more sense for smaller organizations due to this pricing model.
    Incentivized
    Read full review
    Sonatype
    - Guidance on remediation is very good - Vulnerability detection is very good - Support is very good - Ability to ask PMs/POs open questions at Office Hours every month is very good - Support for languages is lacking (TIOBE Index Top20) - Some features are un-neededly hidden and make the usage more complex then it needs to be
    Read full review
    Pros
    Qualys
    • It really does well at vulnerability scanning, which it is well known for. It's accuracy at finding vulnerabilities is top notch, more so than a lot of other vulnerability tools out there. In an organization/company you want this kind of accuracy at finding vulnerabilities in your network/endpoints
    • It is very good at managing endpoints on a consistent basis, meaning you can add endpoints to Qualys and have the platform scan/track/protect for vulnerabilities on an ongoing basis, without user intervention
    • It does really well at separating out and identifying what levels of criticality each vulnerability should fall into. This way, an organization/company can attack the more critical vulnerabilities first
    Incentivized
    Read full review
    Sonatype
    • Nexus firewall is a great feature enabled for all our proxy repositories which are used to download the third-party opensource packages.
    • Nexus IQ is integrated with build stage to analyze the component against evaluation policy. This helps to figure out the application security standards.
    • Nexus IQ is also having a feature to scan container images before it uploads to our private repository. This is great feature for container platforms.
    Read full review
    Cons
    Qualys
    • This program is really complicated, the multiple functions that are presented to us are not very clear and in some cases, it is a matter of intuition to execute a function, it is not very informative.
    • The interface of this program can be a real problem; for our taste, this program looks a bit messy, and the interface does not help or guide you to find the options you need.
    Incentivized
    Read full review
    Sonatype
    • Support on the end of life lifecycle of known open source components that are going end of life, or already went end of life
    • Support for emerging infrastructure as code frameworks
    • Support for native/ default retention, archiving and clean up policies for hosted repositories
    Read full review
    Likelihood to Renew
    Qualys
    No answers on this topic
    Sonatype
    Sonatype supports more than 200 dev(s). It proves with the repository to store the artifacts. Allows for governance of open source software used by the different teams. It is used by security teams to scan for vulnerabilities in software(s) and in the deployed containers. It helps ensure code quality.
    Incentivized
    Read full review
    Usability
    Qualys
    Again, the usability of Qualys has been a pinpoint for this entire review. It was easily the worst thing about the product and because of this, I would not recommend Qualys to anybody in my field. This should be something that Qualys strives to improve if they wish to stay in business.
    Incentivized
    Read full review
    Sonatype
    Overall experience is great with the Platform; however, I see some opportunity with upgrading the platform as it is missing with data of historical scans to allow reviewer to get view of trend how the application/product development team is considering fixing the issues.
    Incentivized
    Read full review
    Reliability and Availability
    Qualys
    No answers on this topic
    Sonatype
    Extremely good
    Read full review
    Performance
    Qualys
    No answers on this topic
    Sonatype
    Sonatype products are great value as I said but a few areas like how products use underlying resources in order to make it further lightweight, is something I would like them to consider.
    Read full review
    Support Rating
    Qualys
    They had a support page within the WAS to report any concerns or seek help. But the UI of that is not smooth. Regardless support staff were pretty responsive and helpful. They scheduled calls to understand and address our problems. Email support is good as well.
    Incentivized
    Read full review
    Sonatype
    Monthly touchpoints with Sinisa has been very valuable.
    Incentivized
    Read full review
    Implementation Rating
    Qualys
    No answers on this topic
    Sonatype
    easy to implement and performing the scans via automations as well
    Incentivized
    Read full review
    Alternatives Considered
    Qualys
    As described before Qualys is used to scan periodically the environment in order to check if there are some packages (Linux) or Applications (Windows) outdated, generating reports to the Service Owners, fulfilling what's is expected from us, attending all our expectations regarding the tool. That's why we'd choose Qualys to our organization.
    Incentivized
    Read full review
    Sonatype
    Out of other products we evaluated before choosing Sonatype, the later looked far more user friendly, easy to understand and work with. This was key for us, as the tool needs to be used by many engineers that don't have security as their main focus. Having a tool that is easy to understand and work with, makes the process of evaluating open source dependencies much easier and appealing for developers.
    Incentivized
    Read full review
    Contract Terms and Pricing Model
    Qualys
    No answers on this topic
    Sonatype
    Great value for money
    Read full review
    Scalability
    Qualys
    No answers on this topic
    Sonatype
    Everything is very good except a little concern regarding large scale docker usage.
    Read full review
    Professional Services
    Qualys
    No answers on this topic
    Sonatype
    Very good
    Read full review
    Return on Investment
    Qualys
    • Big time-saving tool vs. having to comb through several system reports which ultimately can still have you missing unapproved software.
    • Quick snapshot via the dashboard provided a nice summary of where you're assets meet or do not meet your organization's policy requirements.
    Incentivized
    Read full review
    Sonatype
    • Sonatype's centralized management of artifacts have made it very easy for developers to share code in an efficient manner.
    • Sonatype's low false positive rate has made it easier to convince developers to remediate vulnerabilities
    • Sonatype's archaic architecture has made it more expensive to manage than it could be.
    Read full review
    ScreenShots

    Sonatype Platform Screenshots

    Screenshot of Sonatype LifecycleScreenshot of Sonatype Lifecycle - Chrome extensionScreenshot of Sonatype Advanced Legal PackScreenshot of Sonatype Nexus RepositoryScreenshot of Sonatype Nexus Repository ManagerScreenshot of Remediation of vulnerabilities