Prisma Cloud Alternatives in 2024 based on 2,000+ Reviews

With increasing numbers of remote workers migrating to off-site settings using cloud applications, operational workloads are stacking on networks, and the conventional network segmentation approach of building a security perimeter is no longer effective against evolving risks that may break network boundaries.

Prisma Cloud is a microsegmentation solution that can assist security professionals in implementing granular zoning across private, public, and hybrid IT systems to control the most common cyber attack vectors and threats, however, customer reviews indicate that the software may be cumbersome in providing inefficient policy customization, steep learning curve, automation updates, and user interface.

This article compares the top 4 Prisma Cloud alternatives and summarizes each vendor, including their market presence, key specifications, and user reviews.

Top 4 Prisma Cloud alternatives for microsegmentation

Table 1: The market presence of the top 4 Prisma Cloud alternatives

*Based on data retrieved from Companies’ LinkedIn Pages as of 01/08/2024.

**Based on the total number of reviews and average ratings on Gartner, G2, PeerSpot, and TrustRadius software review platforms as of 01/09/2024. 

Disclaimer: With Prisma Cloud positioned at the top, other vendors are sorted by the total number of reviews in descending order.

Vendor selection criteria:

Given the abundance of microsegmentation tools, the list (above) is filtered down based on the vendor criteria listed below.

• Number of reviews: 200+ reviews on Gartner, G2, PeerSpot, and TrustRadius.
• Average rating: Above 4.0/5 on Gartner, G2, PeerSpot, and TrustRadius.

Prisma Cloud

Prisma Cloud is a cloud-native application protection platform (CNAPP) that protects applications in public, private, hybrid, and multi-cloud environments. Prisma Cloud combines numerous security features such as microsegmentation, network visibility, risk prevention, and device control throughout the clouds (public, private, and hybrid) and also on-premises.

Pros

Visibility: Some customers state that Prisma Cloud gives a high level of visibility and control over their cloud infrastructure.¹

Transparency: Some users convey that Prisma is transparent, developers may simply modify their code within a package or a specific layer.²

Establishing rules: Some users note that it is simple to establish rules and enable auto-remediation.³

Cons

Policy customization: Some reviews claim that policy customization is difficult and unclear.⁴

Deployment and learning curve: Some consumers claim that the Prisma Cloud has a steep learning curve and complicated deployment for novices.⁵

Automation updates: Some users express that the automation updates are infrequent, and they expect to see more often updated automation capabilities.⁶

UI (user interface): Some users express that the Prisma Cloud UI may be confusing, particularly for those who are new to cloud security concepts.⁷

GUI (graphical user interface) permissions: Some users are having some GUI difficulties with the new AWS permissions, they say they need to manually update the permissions.⁸

Large cloud system scans: Some reviewers remark that the ability to scan large cloud systems can be sluggish.⁹

Read more: Top 10 Network Security Policy Management Solutions (NSPM) tools.

User Ratings 

• Gartner: 4.5/5 with 225 reviews
• G2: 3.9/5 with 25 reviews
• PeerSpot: 4.0/5 with 75 reviews
• TrustRadius: 8/10 with 26 reviews

Top 4 Prisma Cloud alternatives

1- VMware Aria Operations for Networks

VMware provides a microsegmentation network security approach that allows security architects to conceptually split the data center into discrete security segments down to the individual workload level and then set security policies for each segment separately.

The platform offers both SaaS and on-premises options by delivering visibility and security controls across virtual and physical networks. 

Pros

Simplicity: Some users appreciate the product’s simplicity, which allows them to quickly move views from one physical server to another.¹⁰

Initial setup: Some customers affirm that the first setup is simple and basic, in most cases, implementing vRealize Operations (vROps Management Suite provides information about the network infrastructure does not take much time.¹¹

Technical team response time: Some users claim that the technical support team responds quickly.¹²

Cons

Automation functions: Some users note that improving automation functions without interruption would be beneficial since VMs require a reboot after the code changes are executed, and CPU changes.¹³

Usability: Some users claim that it requires expertise to manage the product (e.g., if you are gathering a large amount of data for analysis, the virtual appliance drive spaces may fill up. In this instance, you need engineers who understand how to enlarge such places.)¹⁴

Slow performance: Some users report that the program might be slow at times when processing queries.¹⁵

User Ratings 

• Gartner: 4.6/5 with 173 reviews
• G2: 4.2/5 with 7 reviews
• PeerSpot: 4.0/5 with 358 reviews
• TrustRadius: No information is available.

2- Cisco Identity Services Engine

The Cisco Identity Services Engine (ISE) is a network security solution that provides software-defined security and automated microsegmentation.

Cisco Identity Services Engine (ISE) provides a wide range of network access control (NAC) functions, including host access and security control. It collects information from the stack to authenticate users and endpoints while automatically limiting risks.

Pros

Authorizations: Some administrators state that the authorizations and accounts within Cisco Identity Services Engine (ISE) are quite valuable, they can go back in history to examine anything that access restrictions or persons have changed in the past.¹⁶

Monitoring: Some users specify that the monitoring functions are useful, as is the ability to administer each of the company devices.¹⁷

Centralized management: Users appreciate the centralized management of network access.¹⁸

Cons

Policies: Some users suggest that Cisco Identity Services Engine (ISE) can improve the way its policies are developed because they believe the policies are complex.¹⁹

Integrations: Some customers complain that the level of integration with other solutions is often minimal; mistakes and glitches are common during third-party integrations.²⁰

CLI (command line interface) features: Some users say that there is room for development in CLI (command line interface), adding that there aren’t many commands or troubleshooting tools accessible in comparison to other Cisco devices like switches and routers.²¹

User Ratings 

• Gartner: 4.2/5 with 6 reviews
• G2: 4.2/5 with 10 reviews
• PeerSpot: 4.0/5 with 401 reviews
• TrustRadius: 9/10 with 89 reviews

3- AlgoSec

AlgoSec is a microsegmentation platform capable of deploying network security measures that enable application connectivity throughout the whole company network (on-premises, cloud, or hybrid). It offers security visibility through tracking the network, integrating firewall rules into business applications, and identifying compliance variations.

Pros

Network insights for security policies: Some users state that AlgoSec gives them insight into the segmentation of the client’s networks and enables them to effectively check compliance with security policies and best practices (e.g. PCI-DSS, ISO27001).²²

Firewall analyzer: Some users say that by using the AlgoSec firewall analyzer, they can now deploy firewall updates and optimize policies almost two times faster compared to their previous software.²³

Troubleshooting with traffic simulations: Some customers comment that AlgoSec has improved their troubleshooting skills, stating that they can quickly discover the reasons for routing difficulties and run traffic simulations to detect possible threats.²⁴

Cons

Reporting: Some users report that advanced analytics and reporting capabilities that give more detailed insights into network traffic, security policy efficiency, compliance, and risk management might be useful.²⁵

GUI (graphical user interface) functionality: Some users expect to see additional functionality in the GUI to ensure they don’t have to rely on the API heavily.²⁶

Firewall integrations: Some users note that certain firewalls do not integrate with AlgoSec.²⁷

User Ratings 

• Gartner: 4.3/5 with 64 reviews
• G2: 4.5/5 with 146 reviews
• PeerSpot: 4.4/5 with 173 reviews
• TrustRadius: 9/10 with 10 reviews

Read more: Other popular Tufin competitors: AlgoSec alternatives.

4- Tufin 

Tufin is a network security software with integrated microsegmentation, network security policy management, risk mitigation, automation, and compliance monitoring technologies across complicated networks and hybrid cloud infrastructures.

Tufin provides network security services to enterprises with up to 10,000+ network components and 200 million+ routes.²⁸

Key features of Tufin

Network segmentation — divides the network into granular subnets using small zones, microsegmentation technology, and/or automated zero-trust network access (ZTNA).

Read more: Top 10 microsegmentation tools.

Automated security policy management — manages network control checkpoints on both internal networks and cloud systems, allowing network security professionals to develop tailored policies and rules (e.g. establishing a role-based or mandatory access control policy for particular company resources). 

Firewall management — creates firewall rules and policies, tracks changes, and monitors compliance records for both on-premises and cloud firewalls.

Network audit —  oversees AI audit activities and ensures regulatory compliance. 

Vulnerability-based change automation (VCA) —  interacts with vulnerability scanners and searches for vulnerabilities before executing new cybersecurity rules.

Read more: Vulnerability testing.

Data compliance — ensures data compliance with legislation and corporate rules throughout the hybrid network.

Figure: Tufin’s products and services 

Source: Tufin²⁹

Pros

Microsegmentation: Some reviewers highlight that Tufin’s unified network protection and microsegmentation features are efficient in protecting against cyber attack vectors.³⁰

Customizable access control: Users claim that Tufin’s Secure Change feature provides strong customizability in the form of limiting user access and building policies to fit different operational needs.³¹

Firewalls: Some users emphasize that Tufin effectively assists with the audit, compliance, and cleaning of firewall policies.³²

Read more: Top 10 firewall audit software.

Cons

Reporting (private data): Some users express that Tufin’s reporting functionality might be improved, they say that private data functions allow only one employee to look over it, however, they need multiple employees to have access to that data.³³

Hardware controls: Some reviewers expect to see easier hardware controls since operating the hardware platform requires understanding complex guidelines.³⁴

Firewall management: Some users claim that firewall management is hard for beginners, and the solution might be enhanced by incorporating icons that explain how certain firewalls work.³⁵

User Ratings 

• Gartner: 3.8/5 with 8 reviews
• G2: 4.4/5 with 95 reviews
• PeerSpot: 4.0/5 with 180 reviews
• TrustRadius: 7.1/10 with 13 reviews

For guidance on choosing the right tool or service, check out our data-driven lists of software-defined perimeter (SDP) software and zero trust networking software.

Further reading

• Top 10 Microsegmentation Tools
• Microsegmentation: What is it? Benefits & Challenges
• Role-based access control (RBAC)  
• Network Segmentation: 6 Benefits & 8 Best Practices
• 80+ Network Security Statistics
• Network Security Policy Management Solutions (NSPM)
• Cybersecurity Risk Management

External links

• 1. ”Prisma Cloud Reviews“. G2. January 17, 2023. Retrieved January 31, 2024.
• 2. ”Prisma Cloud Reviews“. PeerSpot. November 24, 2023. Retrieved January 31, 2024.
• 3. ”Prisma Cloud Reviews“. PeerSpot. November 14, 2023. Retrieved January 31, 2024.
• 4. ”Prisma Cloud Reviews“. G2. July 4, 2023. Retrieved January 31, 2024.
• 5. ”Prisma Cloud Reviews“. Gartner. August 10, 2023. Retrieved December 19, 2023.
• 6. ”Prisma Cloud Reviews“. PeerSpot. November 24, 2023. Retrieved January 31, 2024.
• 7. ”Prisma Cloud Reviews“. G2. June 24, 2023. Retrieved January 31, 2024.
• 8. ”Prisma Cloud Reviews“. PeerSpot. November 24, 2023. Retrieved January 31, 2024.
• 9. ”Prisma Cloud Reviews“. G2. June 24, 2023. Retrieved January 31, 2024.
• 10. ”VMware Aria Operations for Networks Reviews“. PeerSpot. November 21, 2023. Retrieved January 31, 2024.
• 11. ”VMware Aria Operations for Networks Reviews“. PeerSpot. November 17, 2023. Retrieved January 31, 2024.
• 12. ”VMware Aria Operations for Networks Reviews“. PeerSpot. April 24, 2023. Retrieved January 31, 2024.
• 13. ”VMware Aria Operations for Networks Reviews“. PeerSpot. September 12, 2023. Retrieved January 31, 2024.
• 14. ”VMware Aria Operations for Networks Reviews“. PeerSpot. August 2, 2023. Retrieved January 31, 2024.
• 15. ”VMware Aria Operations for Networks“. G2. November 27, 2023. Retrieved January 31, 2024.
• 16. ”Cisco Identity Services Engine Reviews“. PeerSpot. August 9, 2023. Retrieved January 31, 2024.
• 17. ”Cisco Identity Services Engine Reviews“. PeerSpot. August 9, 2023. Retrieved January 31, 2024.
• 18. ”Cisco Identity Services Engine Reviews“. G2. January 30, 2023. Retrieved January 31, 2024.
• 19. ”Cisco Identity Services Engine Reviews“. PeerSpot. June 22, 2023. Retrieved January 31, 2024.
• 20. ”Cisco Identity Services Engine Reviews“. G2. June 11, 2023. Retrieved January 31, 2024.
• 21. ”Cisco Identity Services Engine Reviews“. PeerSpot. December 7, 2023. Retrieved January 31, 2024.
• 22. ”AlgoSec Reviews“. G2. January 25, 2023. Retrieved January 31, 2024.
• 23. ”AlgoSec Reviews“. PeerSpot. February 21, 2023. Retrieved January 31, 2024.
• 24. ”AlgoSec Reviews“. PeerSpot. September 7, 2023. Retrieved January 31, 2024.
• 25. ”AlgoSec Reviews“. PeerSpot. December 26, 2023. Retrieved January 31, 2024.
• 26. ”AlgoSec Reviews“. PeerSpot. November 23, 2023. Retrieved January 31, 2024.
• 27. ”AlgoSec Reviews“. PeerSpot. January 19, 2023. Retrieved January 31, 2024.
• 28. ”Network Security Policy Management“. Tufin. January 9. Retrieved January 31, 2023.
• 29. ”Network security orchestration“. Tufin. January 2024. Retrieved January 31, 2023.
• 30. ”Tufin Reviews“. G2. October 12, 2022. Retrieved January 31, 2024.
• 31. ”Tufin Reviews“. G2. November 20, 2023. Retrieved January 31, 2024.
• 32. ”Tufin Reviews“. G2. November 21, 2023. Retrieved January 31, 2024.
• 33. ”Tufin Reviews“. PeerSpot. January 26, 2023. Retrieved January 31, 2024.
• 34. ”Tufin Reviews“. PeerSpot. October 7, 2022. Retrieved January 31, 2024.
• 35. ”Tufin Reviews“. PeerSpot. October 2, 2022. Retrieved January 31, 2024.