No more typing reviews! Try our Samantha, our new voice AI agent.

Azure Kubernetes Service (AKS) vs Trivy comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Container Security
11th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
53
Ranking in other categories
Vulnerability Management (10th), Cloud Workload Protection Platforms (CWPP) (9th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
Azure Kubernetes Service (AKS)
Ranking in Container Security
23rd
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
42
Ranking in other categories
No ranking in other categories
Trivy
Ranking in Container Security
8th
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
12
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Container Security category, the mindshare of Qualys TotalCloud is 1.8%, up from 1.1% compared to the previous year. The mindshare of Azure Kubernetes Service (AKS) is 0.8%, up from 0.8% compared to the previous year. The mindshare of Trivy is 2.3%, down from 5.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Mindshare Distribution
ProductMindshare (%)
Trivy2.3%
Qualys TotalCloud1.8%
Azure Kubernetes Service (AKS)0.8%
Other95.1%
Container Security
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
reviewer2802165 - PeerSpot reviewer
Senior DevOps Engineer at a tech vendor with 10,001+ employees
Running microservices and AI workloads has improved cost savings and deployment speed
The best features Azure Kubernetes Service (AKS) offers include compatibility with existing MS infrastructure, ease of managing access through AD, and accessible RBACs. On top of that, it provides many add-on features such as Prometheus, service mesh, and other tools, with good support and easy upgrades that save us from downtime. The ease of managing access through AD in Azure Kubernetes Service (AKS) helps my team day-to-day. Without AD management and RBACs, generating certificates, approving CSRs, and using those certificates to access Azure Kubernetes Service (AKS) becomes very troublesome and complicated, especially for new team members. This functionality makes that part very easy. Additionally, applications hosted within Azure have seamless connectivity to databases, making it easier to onboard numerous applications, handle networks, and troubleshoot. Regarding upgrades, Azure Kubernetes Service (AKS) frequently provides updates, which simplifies the process significantly compared to managing bare metal systems.
Utsav Sharma - PeerSpot reviewer
Senior Security Consultant at Ernst & Young
Maintain operational efficiency by detecting misconfigurations and vulnerabilities
The vulnerability scanning feature is excellent as it supports various container capabilities like Docker and Sharma. It also offers repository scanning in the source code domain, allowing pre-push code scans. The misconfiguration detection works well for CloudFormation, Docker files, and Terraform. Its compliance support, like NIST, ensures that configurations align with standards. Trivy helps me significantly detect misconfigurations missed by the ops engineers or in Terraform by the naked eye. It ensures that my deployments are free of misconfigurations and vulnerabilities.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I rate the breadth of FlexScan in providing visibility into on-premises, multicloud, and container environments as fantastic."
"Qualys TotalCloud helps you not just to identify misconfigurations, but you can actually also fix issues."
"I would definitely recommend Qualys TotalCloud to other users."
"I found the initial setup user-friendly."
"Once it is set up, Qualys has proved to be one of our greatest assets."
"I appreciate TotalCloud's real-time protection and remediation features. The remediation options include automated one-click remedies and custom changes that help manage vulnerabilities efficiently."
"In my opinion, this is the best tool."
"The platform's unified view of the organization proves particularly valuable for leadership team meetings."
"Has a good management feature monitored by the cloud service provider."
"The setup was straightforward and it took one hour to deploy."
"The platform's high scalability is one of its biggest advantages."
"It is easy to maintain the solution."
"It is a stable solution."
"In your experience, how has the integration of Azure Active Directory with Azure Kubernetes Service (AKS) helped enhance the security of application?"
"I found the Helm deployment feature of the solution valuable."
"I don't have to furnish my own infrastructure in order to run containers or Kubernetes."
"I can see vulnerabilities in the images of any applications deployed in the Kubernetes environment or as container applications."
"What I find valuable is the ease of setup with Trivy, including pre-defined operators that require minimal configuration."
"Trivy's open source nature and wide functionality are incredibly valuable."
"Trivy is most valuable for its ability to scan all repository files and dependencies."
"I definitely recommend Trivy."
"Trivy's ability to scan files, images, GitHub repositories, Infrastructure as Code like Terraform, and Kubernetes is valuable."
"The most valuable feature of Trivy is its easy integration with the CI/CD pipeline."
"Trivy is particularly useful for checking if Docker images have critical vulnerabilities before they reach production."
 

Cons

"In TotalCloud, I would suggest improvements in policy checks to cater to various inventory types like VPCs, subnets, S3 buckets, or IAMs. There is a lack of data segregation according to criticality or inventory."
"The support is not up to the mark and seems to be overburdened."
"The response part of the Cloud Detection and Response (CDR) module can be improved."
"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."
"An area for improvement would be to focus on risks related to AI, such as large language models and potential data leakage."
"Enhancing clarity regarding its compliance capabilities would be beneficial, as the current scope is limited in geographic coverage."
"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."
"TotalCloud could improve its scanning of niche devices like Wi-Fi dongles and USB modems because they are often untested. It covers everything else, like laptops, mobile devices, and Bluetooth IoT devices. They can improve on the small IoT devices because hackers and testers use these."
"One area that could be improved is the Azure CLI. It would be beneficial if they could abstract some of the complexities related to deployment scripts and make them a part of Azure CLI."
"Unfortunately, when a microservice fails, Azure can take up to 60 seconds to broadcast an alert to the monitoring agents."
"Its integration functions could be enhanced."
"We would like to see the addition of a service report from the server for this solution, so that we can monitor the health of server operations."
"The solution's cost could be cheaper."
"The solution's logs have room for improvement."
"There are some limitations with the tutor version, particularly in terms of using a lot of free audio. The private level also has restrictions, limiting the number of audio files you can access to just 50. If you want more, you need to contact support."
"The solution is not particularly user-friendly for novice administrators, making it challenging to understand certain aspects."
"Trivy is not scalable; however, I have scanned very large projects with it. It is stable but not scalable according to my experience."
"The only problem is that Trivy does not support reporting features such as generating reports in CSV, which is useful for auditing and reporting."
"One drawback I have observed with Trivy is the difficulty in building or integrating a UI, particularly for an operator in the NetSuite example."
"Trivy's marketing and awareness need improvement."
"For malware detection, I need to use two tools: Trivy as my anomaly scanner and ClamAV. I am integrating these two tools into the CI pipeline. If both malware and anomaly detection could be managed by one tool, I would not need to depend on two tools. That would be my suggestion."
"Trivy can improve by providing an output in PDF format."
"Having little experience can hinder the ability to connect it to a user-friendly UI effectively."
"The reporting could be a little better."
 

Pricing and Cost Advice

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"TotalCloud's price is about right where I would expect it to be."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"The cost is high, but it meets our organizational needs."
"The price of AKS is expensive. We pay approximately $10,000 monthly."
"It is not expensive."
"The control plane is free and we only pay for the usage and time."
"We are facing a significant challenge regarding OEM licensing. The issue arises from the fact that certain licenses required for our own purposes are not provided by Microsoft's licensing. Consequently, we are unsure about the most suitable mobile license provisioning model offered by third-party providers."
"I like the pricing and find it to be in the mid-range, and I would rate it as five out of ten."
"It is an expensive solution."
"The pricing of the solution is dependent on the choice of virtual machines, specifically the amount of memory required. There are various options available, ranging from around twenty-five to even more choices to select from. This flexibility allows you to customize the pricing based on your specific needs. From my perspective, virtual machines in the cloud tend to be slightly more expensive compared to virtual machines offered directly by data centers. However, this cost is offset by the benefits of a managed service. Taking the overall picture into account, the managed service approach is advantageous. The pricing for the platform can vary, typically ranging from three hundred euros per month to two thousand euros per month, depending on the specific requirements and setup you choose."
"The product follows a pay-as-you-go pricing model which is good for small enterprises. You need to pay only for the services that you use."
Information not available
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Financial Services Firm
13%
Outsourcing Company
9%
Manufacturing Company
9%
Construction Company
8%
Financial Services Firm
13%
Manufacturing Company
11%
Comms Service Provider
9%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise10
Large Enterprise38
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise7
Large Enterprise23
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise9
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
I was not involved in pricing, setup cost, and licensing, but I can say that the setup was fast, within a quarter, an...
What needs improvement with Qualys TotalCloud?
In terms of improvements, the features we are using in Qualys TotalCloud are working in the best optimal way, and I d...
What is your primary use case for Qualys TotalCloud?
I have been using Qualys TotalCloud for the last eight months to scan the hardware and the virtual devices in our inf...
What needs improvement with Azure Kubernetes Service (AKS)?
I do not see any specific areas for improvement in Azure Kubernetes Service (AKS), except for the kind of support the...
What is your primary use case for Azure Kubernetes Service (AKS)?
My main use case for Azure Kubernetes Service (AKS) is hosting a Comark website on it. In addition to hosting a Comar...
What advice do you have for others considering Azure Kubernetes Service (AKS)?
I would rate Azure Kubernetes Service (AKS) at a nine out of ten. I deduct one point for customer support, as seventy...
What needs improvement with Trivy?
Trivy's marketing and awareness need improvement. Not everyone knows about it, which isn't ideal given its capabiliti...
What is your primary use case for Trivy?
I use Trivy ( /products/trivy-reviews ) to scan code for vulnerabilities before deployment. Our projects, which are d...
What advice do you have for others considering Trivy?
I recommend Trivy to others due to its powerful and useful features. However, I suggest increasing its marketing to r...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
No data available
 

Overview

Find out what your peers are saying about Azure Kubernetes Service (AKS) vs. Trivy and other solutions. Updated: September 2026.
917,433 professionals have used our research since 2012.