No more typing reviews! Try our Samantha, our new voice AI agent.

SUSE Rancher vs Trivy comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Container Security
11th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
53
Ranking in other categories
Vulnerability Management (10th), Cloud Workload Protection Platforms (CWPP) (9th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
SUSE Rancher
Ranking in Container Security
17th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
12
Ranking in other categories
No ranking in other categories
Trivy
Ranking in Container Security
8th
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
12
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Container Security category, the mindshare of Qualys TotalCloud is 1.8%, up from 1.1% compared to the previous year. The mindshare of SUSE Rancher is 0.6%, up from 0.4% compared to the previous year. The mindshare of Trivy is 2.3%, down from 5.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Mindshare Distribution
ProductMindshare (%)
Trivy2.3%
Qualys TotalCloud1.8%
SUSE Rancher0.6%
Other95.3%
Container Security
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Shivamp Kachole - PeerSpot reviewer
Associate System Engineer at Dhanyaayai enterprise private limited
Centralized cluster management has improved daily operations and simplifies troubleshooting
I am happy with SUSE Rancher, but there are a few areas where it could be improved. During major version upgrades, the process can become a bit complex, especially in air-gapped environments where image management and dependencies require extra planning. Additionally, troubleshooting sometimes still requires switching to the command line because not every error is visible in the UI. If the UI provided more detailed diagnostic and troubleshooting information, it would make our issue resolution even faster. Other than that, it has been a reliable platform for all of us. I think the documentation is already very good, but for complex scenarios such as air-gapped environments, disaster recovery, or multi-cluster upgrades, having more step-by-step examples and troubleshooting guides would be very helpful. On the UI side, if SUSE Rancher could provide more detailed error messages and built-in diagnostic recognition, it would reduce the need to switch to logs and command lines. Those improvements would make our daily operations even easier and smoother, especially for new administrators and fresh team members.
Utsav Sharma - PeerSpot reviewer
Senior Security Consultant at Ernst & Young
Maintain operational efficiency by detecting misconfigurations and vulnerabilities
The vulnerability scanning feature is excellent as it supports various container capabilities like Docker and Sharma. It also offers repository scanning in the source code domain, allowing pre-push code scans. The misconfiguration detection works well for CloudFormation, Docker files, and Terraform. Its compliance support, like NIST, ensures that configurations align with standards. Trivy helps me significantly detect misconfigurations missed by the ops engineers or in Terraform by the naked eye. It ensures that my deployments are free of misconfigurations and vulnerabilities.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I rate the breadth of FlexScan in providing visibility into on-premises, multicloud, and container environments as fantastic."
"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."
"One of the most valuable features of Qualys TotalCloud is FlexScan, which is specifically for internet-facing VMs. We found this feature to be very useful. It was a key differentiator for us."
"If I had to say something positive about the product that brings me the biggest benefit, I would say it has accurate reports, gets new update CVEs, zero-day attack detection, and is easy to manage with its GUI."
"While automatic inventory detection upon connection is a helpful feature, a truly valuable capability would be assessing an environment's security posture against Azure and CIS best practices."
"The best features in Qualys TotalCloud include the total asset management of the cloud environment. It is very easy to export the report and see the vulnerabilities related to the cloud specifically."
"Qualys TotalCloud helps you not just to identify misconfigurations, but you can actually also fix issues."
"Qualys TotalCloud provides a single, prioritized view based on requirements such as identifying the most vulnerable assets and calculating the average time to remediate vulnerabilities."
"Rancher Desktop provides support for Kubernetes setup on local machines."
"SUSE Rancher has made things easier for my team and organization by reducing errors, as I use it every day of the week, and it shows us issues through dashboards."
"I could say that with SUSE Rancher, we've managed to cut the provisioning time to probably one-tenth of the usual provisioning time."
"SUSE Rancher has positively impacted my organization by making the teams' work easier and reducing project delivery time."
"We have been able to cut down the amount of time an expert needs to spend on upgrade and maintenance to a fifth of what it was before."
"With SUSE Rancher, everything is in one place and centralized, daily operations are much faster and easier for us, it has reduced manual efforts and helped us troubleshoot issues faster because we get a single view from all our clusters, and overall, it has improved our team efficiency and consistency."
"The most valuable features of SUSE Rancher include the user interface and the display features."
"SUSE Rancher has positively impacted my organization with increased efficiency in a 10x manner."
"Trivy's open source nature and wide functionality are incredibly valuable."
"It is open-source."
"I definitely recommend Trivy."
"I can see vulnerabilities in the images of any applications deployed in the Kubernetes environment or as container applications."
"Overall, I would rate Trivy a ten out of ten."
"What I find valuable is the ease of setup with Trivy, including pre-defined operators that require minimal configuration."
"One of the great features of Trivy is that it helps me scan items such as AWS credentials and GCP service accounts."
"Trivy is easy to integrate with CI/CD and can be installed on desktops to scan images."
 

Cons

"To improve the user experience, reporting could be simplified for better comprehension by end users and project managers, facilitating issue resolution."
"A feature improvement could be the inclusion of Windows OS support for container security, as it is currently only supported for Linux."
"Some major banks and insurance companies require an on-premises solution for comprehensive vulnerability management, which TotalCloud does not offer."
"Although TotalCloud is a helpful tool, some of its advanced features are still under development."
"Their customer support needs improvement."
"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"Areas that need improvement in every solution include the remediation part. The remediation steps should be simple enough for everyone to understand."
"I didn't give it a ten because I would like to see simpler configuration, more customizable dashboards, and better automation and integration options."
"Additional features for a paid solution should be included, such as more detailed insights, better graphics, and an improved user interface."
"During major version upgrades, the process can become a bit complex, especially in air-gapped environments where image management and dependencies require extra planning."
"One of the major challenges I faced with SUSE Rancher was during a POC for one customer who was using VMware; there was a significant challenge between VMware CSI and SUSE integrations."
"Some initial setup and configuration were required by the admin side for enabling security policies, which were not supported initially."
"I think SUSE Rancher could be improved by having the documentation more centralized, though it is not that problematic currently."
"There are a lot of issues in the tool, such as addressing the errors, addressing the stability, and addressing the reliability."
"All the tasks that SUSE Rancher does can be done in alternative methods, so it is not a must-have or a necessary tool in my view."
"I have noticed that SUSE Rancher's GUI is slow because we have more than 1,000 pods, and when searching for a pod name, the page takes some time to load."
"Currently, the container image scanning is static. A dynamic scanning capability during runtime would be a significant advantage."
"Trivy's marketing and awareness need improvement."
"Trivy can improve by providing an output in PDF format."
"Trivy generates many false positives, flagging non-existent vulnerabilities. Improvements could include better contextual analysis or granular filtering."
"For malware detection, I need to use two tools: Trivy as my anomaly scanner and ClamAV. I am integrating these two tools into the CI pipeline. If both malware and anomaly detection could be managed by one tool, I would not need to depend on two tools. That would be my suggestion."
"The reporting could be a little better."
"The only problem is that Trivy does not support reporting features such as generating reports in CSV, which is useful for auditing and reporting."
"Trivy is not scalable; however, I have scanned very large projects with it. It is stable but not scalable according to my experience."
 

Pricing and Cost Advice

"Qualys TotalCloud is expensive."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"TotalCloud's price is about right where I would expect it to be."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"The cost is high, but it meets our organizational needs."
Information not available
Information not available
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Outsourcing Company
27%
Computer Software Company
23%
Financial Services Firm
9%
Comms Service Provider
7%
Financial Services Firm
13%
Manufacturing Company
11%
Comms Service Provider
9%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise10
Large Enterprise38
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise2
Large Enterprise7
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise9
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
I was not involved in pricing, setup cost, and licensing, but I can say that the setup was fast, within a quarter, an...
What needs improvement with Qualys TotalCloud?
In terms of improvements, the features we are using in Qualys TotalCloud are working in the best optimal way, and I d...
What is your primary use case for Qualys TotalCloud?
I have been using Qualys TotalCloud for the last eight months to scan the hardware and the virtual devices in our inf...
What is your experience regarding pricing and costs for SUSE Rancher?
I wasn't directly involved in the commercial side such as pricing, negotiation, or licensing decisions. Since we are ...
What needs improvement with SUSE Rancher?
I am happy with SUSE Rancher, but there are a few areas where it could be improved. During major version upgrades, th...
What is your primary use case for SUSE Rancher?
I have been working in the DevOps field and platform engineering field for around two years, approximately 1.9 years....
What needs improvement with Trivy?
Trivy's marketing and awareness need improvement. Not everyone knows about it, which isn't ideal given its capabiliti...
What is your primary use case for Trivy?
I use Trivy ( /products/trivy-reviews ) to scan code for vulnerabilities before deployment. Our projects, which are d...
What advice do you have for others considering Trivy?
I recommend Trivy to others due to its powerful and useful features. However, I suggest increasing its marketing to r...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
No data available
 

Overview

Find out what your peers are saying about SUSE Rancher vs. Trivy and other solutions. Updated: September 2026.
917,433 professionals have used our research since 2012.