Try our new research platform with insights from 80,000+ expert users

Pentera vs Wiz comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.2
Pentera automates security tests, proving valuable for retests, but rising licensing costs pose ROI challenges for some users.
Sentiment score
5.5
Organizations using Wiz saw improved asset management, cost reduction, and enhanced compliance, despite challenges and regional high costs.
Some customers consider the ROI favorable, but facing difficulties now due to changes in the licensing model, which has made it more expensive compared to last year.
We have seen ROI from Wiz and we continued to see value in Wiz.
We estimate a cost reduction of around 35% to 50%, or even more, due to consolidating our security management into one platform.
 

Customer Service

Sentiment score
6.0
Pentera's support team is reliable and responsive, but documentation needs updating; users rate support highly despite some inconsistency.
Sentiment score
7.8
Wiz's customer service is praised for quick responses, knowledgeable support, and high ratings despite occasional initial contact challenges.
We have a dedicated channel with Wiz and are always in communication with them.
The solution's technical support was excellent.
Century Data has an engineering team who support the initial calls with a local Knowledge base.
 

Scalability Issues

Sentiment score
7.0
Pentera is highly scalable with adaptable equipment requirements, earning strong satisfaction ratings across various enterprise environments.
Sentiment score
7.5
Wiz excels in scalability for growing cloud environments, supporting multiple users efficiently despite initial cost challenges.
We have deployed Wiz in three organizations on AWS, each with approximately 70 to 80 accounts, totaling more than 120 accounts.
Scalability-wise, I rate the solution a ten out of ten.
Our environment quadrupled in size. We didn’t have to make any adjustments or configuration changes; it just accommodated the growth.
 

Stability Issues

Sentiment score
7.3
Pentera is praised for high stability, with most users rating it highly despite minor initial setup concerns.
Sentiment score
7.5
Wiz is highly stable and reliable, with quick resolution of issues and consistently high user satisfaction ratings.
The stability of Wiz has been good, with no downtime, bugs, or glitches.
Stability-wise, I rate the solution an eight to nine out of ten.
The solution is very stable.
 

Room For Improvement

Pentera struggles with cost, licensing flexibility and needs better virtualization, dashboards, hardware support, and detailed credential information.
Wiz users seek improvements in remediation, reporting, dashboards, alerts, API integration, internal visibility, risk assessment, and FinOps features.
When the IP is imported into a system, we cannot withdraw or revoke the license.
We would like to see preventive controls that can be applied through Wiz to protect against vulnerabilities that we're not going to be able to remediate immediately.
One significant area for improvement would be increasing automation. While they excel at identifying issues, we need assistance in minimizing the human hours required for tasks.
We need an agent that can be installed, or that can overview all the containers and Kubernetes so that it can detect malicious activities that are happening in them.
 

Setup Cost

Pentera's pricing receives mixed reviews, though many appreciate its value in effectively assessing ransomware protection.
Wiz's pricing is competitive but fluctuates, causing concerns about transparency; some users appreciate its features' value.
We are paying 250k per year.
In some cases, it has a very aggressive price, so very cheap.
I don’t think there’s anyone else out there offering the same level, scale, or efficiency.
 

Valuable Features

Pentera offers automated vulnerability assessments with valued features like attack surface mapping, AI reporting, and quick, effective processes.
Wiz provides comprehensive risk evaluation and streamlined operations with advanced features for enhanced governance, compliance, and issue prioritization.
We can automate the Pentera processes by automatically creating scenarios to validate the system.
The feature leads to minimal false positives and a low volume of alerts, which is highly valuable for our operations.
It's highly customizable, allowing us to manage many custom features effectively.
Regarding compliance and governance, Wiz streamlines our vulnerability management to meet specific needs effectively.
 

Categories and Ranking

Pentera
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
9
Ranking in other categories
Penetration Testing Services (3rd), Breach and Attack Simulation (BAS) (3rd)
Wiz
Average Rating
9.0
Reviews Sentiment
7.1
Number of Reviews
27
Ranking in other categories
Vulnerability Management (2nd), Container Security (2nd), Cloud Workload Protection Platforms (CWPP) (2nd), Cloud Security Posture Management (CSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (1st), Data Security Posture Management (DSPM) (1st), Compliance Management (1st), Cloud Detection and Response (CDR) (1st)
 

Mindshare comparison

Pentera and Wiz aren’t in the same category and serve different purposes. Pentera is designed for Breach and Attack Simulation (BAS) and holds a mindshare of 27.7%, down 29.8% compared to last year.
Wiz, on the other hand, focuses on Cloud-Native Application Protection Platforms (CNAPP), holds 22.7% mindshare, down 25.8% since last year.
Breach and Attack Simulation (BAS) Market Share Distribution
ProductMarket Share (%)
Pentera27.7%
Cymulate19.2%
Picus Security17.1%
Other36.0%
Breach and Attack Simulation (BAS)
Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
ProductMarket Share (%)
Wiz22.7%
Prisma Cloud by Palo Alto Networks13.8%
Microsoft Defender for Cloud10.7%
Other52.8%
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

Sabbir Ahmed - PeerSpot reviewer
Comprehensive attack surface coverage and real-world threat emulation strengthen security while licensing models need improvement
Comprehensive Attack Surface includes several features. Omni Attack Surface discovers, assesses, and exploits vulnerabilities across both internal networks and external assets, including cloud environments from a single platform. External Attack Surface Management (EASM) and Internal Network Validation test internal security controls and identify weaknesses within the internal network. Automated Penetration Testing features are provided through the Pentera Surface module. Surface provides automated validation and penetration testing features with a proactive, continuous, and highly realistic approach to cybersecurity validation, helping organizations understand and reduce their true cyber exposure. They have AI-based reporting that leverages AI to identify patterns of exploitability over time, aggregate results across sites, and highlight recurring weaknesses. They offer two types of reports: an elaborate technical report for CTOs and an Executive Summary for management. When customers see the reports after completing the POC, they are impressed by how detailed the technical report is, while management can understand what actions need to be taken to protect their network and infrastructure. Recent Gartner reports indicate that traditional VAPT companies perform vulnerability testing at specific times, which creates security gaps. Pentera provides continuous validation, running 24/7 in the infrastructure. This means when any vulnerability appears due to firmware upgrades, OS updates, or software changes, it can be automatically identified in real-time.
MatthewSnyder - PeerSpot reviewer
Accelerates decision making and reduces alert fatigue with smart event consolidation
I believe they are on the right path. However, Wiz has a unique way of identifying issues. As part of its growth and maturity, I'm noticing that it is taking an approach where it not only detects problems but also provides solutions to fix them. This expansion into a more comprehensive ecosystem allows it to become a 360-degree product. Instead of just continuously pointing out findings and detections, it starts to integrate with existing solutions, reducing the cycle of repeated issues. We can learn from these mistakes, and ideally, they will only occur once, allowing us to address them effectively. I appreciate the continued growth in this partnership, as it aims to reduce the number of findings over time by tackling the root of the problem. One significant area for improvement would be increasing automation. While they excel at identifying issues, we need assistance in minimizing the human hours required for tasks. Ideally, the process would become more automated, allowing us to quickly respond with steps such as: we found an issue, reached out, and fixed it immediately. In cybersecurity, if it takes several hours to address a concern and a human attacker is present, that delay can lead to severe consequences. We need more immediate measures in our response strategies.
report
Use our free recommendation engine to learn which Breach and Attack Simulation (BAS) solutions are best for your needs.
873,003 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
11%
Educational Organization
6%
Financial Services Firm
16%
Computer Software Company
14%
Manufacturing Company
10%
Healthcare Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise1
Large Enterprise4
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise6
Large Enterprise12
 

Questions from the Community

What do you like most about Pentera?
What I like the most about Pentera is its solution-oriented approach.
What needs improvement with Pentera?
The licensing model has changed from earlier versions. Previously, there was a 500 IP cap, and customers needed to buy a minimum of 500 IP and consider 500 domains. In Bangladesh, many large organi...
What is your primary use case for Pentera?
Common use cases include several features. The POC is completed before any customer goes for procurement. Once the POC is done, customers appreciate features such as comprehensive attack surface co...
What do you like most about Wiz?
With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment.
What is your experience regarding pricing and costs for Wiz?
I’m familiar with their pricing. I believe it aligns well with what we typically see for security tools. It’s not unreasonable or outrageous. They have a great product that works effectively and fu...
What needs improvement with Wiz?
I believe they are on the right path. However, Wiz has a unique way of identifying issues. As part of its growth and maturity, I'm noticing that it is taking an approach where it not only detects p...
 

Comparisons

 

Overview

 

Sample Customers

Blackstone Group Caterpillar Apria Healthcare Taylor Vinters Sandler Capital Management Drawbridge BNP Paribas British Red Cross
Wiz is the fastest growing software company ever - $100M ARR in 18 months: Wiz becomes the fastest-growing software company ever | Wiz Blog  Discover why companies, including Salesforce, Morgan Stanley, Fox, and Bridgewater choose Wiz as their cloud security partner. Read their success stories here: Customers | Wiz
Find out what your peers are saying about Pentera vs. Wiz and other solutions. Updated: January 2025.
873,003 professionals have used our research since 2012.