Try our new research platform with insights from 80,000+ expert users

Wiz pros and cons

Vendor: Wiz

4.5 out of 5

20 reviews
100% willing to recommend

249 followers

Pros & Cons summary

Wiz integrates vulnerability management, discovery, and inventory, offering rapid analytics for cloud environments. It enables quick identification of security issues with easy installation and robust features. While Wiz excels in alerting for data leaks and vulnerabilities without scheduled scans, it requires enhancements in remediation workflow, API maturity, and container security. The absence of an on-prem version limits some users, and high costs in Brazil pose challenges for large implementations.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Wiz provides a contextual risk evaluation that helps in prioritizing and addressing issues such as misconfigurations and vulnerabilities.

Wiz combines features like vulnerability management, discovery, and inventory into a single platform which enhances visibility and comprehension across all cloud systems.

Wiz offers instant visibility into high-level risks that need addressing and integrates coverage for all accounts through APIs without requiring agents.

Wiz enhances security by providing timely alerts for leaked data and vulnerabilities, and keeps information up-to-date automatically.

Wiz helps in understanding and mitigating potential attack paths by analyzing and validating network configurations and their real-time statuses.

CONS

Wiz's reporting capabilities and executive summaries could be improved to provide clearer and more concise information for leadership.

The remediation workflow and scan frequency within Wiz need enhancements for better efficiency.

The APIs offered by Wiz are limited, posing challenges for integration with tools like Splunk.

There is an issue with search functionality in Wiz being case-sensitive, complicating resource misconfiguration detection.

Wiz's lack of an on-prem version is a barrier for enterprises with substantial on-premise workloads.

Wiz Pros review quotes

reviewer2129682

Senior Information Security Engineer at a financial services firm with 1,001-5,000 employees

Mar 15, 2023

The automation roles are essential because we ultimately want to do less work and automate more. The dashboards are easy to read and visually pleasing. You can understand things quickly, which makes it easy for our other teams. The network and infrastructure teams don't know as much about security as we do, so it helps to have a tool that's accessible and nice to look at.

Read full review

reviewer2130933

Sr. Manager AVP - Vuln Management and Threat Intelligence at a computer software company with 201-500 employees

Mar 23, 2023

The solution is very user-friendly.

Read full review

KS

Kamran Siddique

VP Information Security at boxed.com

Mar 22, 2023

The first thing that stood out was the ease of installation and the quick value we got out of the solution.

Read full review

Free Report: Wiz Reviews and More

Learn what your peers think about Wiz. Get advice and tips from experienced pros sharing their opinions. Updated: October 2024.

816,406 professionals have used our research since 2012.

reviewer2041074

CyberSecurity Sr Manager at a retailer with 10,001+ employees

Jun 3, 2024

Out of all the features, the one item that has been most valuable is the fact that Wiz puts into context all the pieces that create an issue, and applies a particular risk evaluation that helps us prioritize when we need to address a misconfiguration, vulnerability, or any issue that would put our environment into risk.

Read full review

reviewer2059842

Director Information Security at a computer software company with 501-1,000 employees

Dec 22, 2022

The vulnerability management modules and the discovery and inventory are the most valuable features. Before using Wiz, it was a very manual process for both. After implementing it, we're able to get all of the analytics into a single platform that gives us visibility across all the systems in our cloud. We're able to correspond and understand what the vulnerability landscape looks like a lot faster.

Read full review

MA

Assistant Vice President at Genpact - Headstrong

Mar 23, 2023

Our most important features are those around entitlement, external exposure, vulnerabilities, and container security.

Read full review

Mindaugas Dailidonis

Security Solutions Architect - Cloud Security Consultant at a consultancy with 10,001+ employees

Sep 10, 2024

Wiz saves time by validating a network misconfiguration by not only looking at the cloud asset configuration but also by testing if a port that is stated to be open is actually open.

Read full review

Pietro Villivà

Business Line Manager at S2E

Aug 6, 2024

The tool's most valuable feature is its attack path analysis.

Read full review

reviewer1534569

Chief Information Security Officer (CISO) at a outsourcing company with 501-1,000 employees

Feb 23, 2023

The CSPM module has been the most effective. It was easy to deploy and covered all our accounts through APIs, requiring no agents. Wiz provides instant visibility into high-level risks that we need to address.

Read full review

reviewer2272701

AWS Cloud Security Engineer at a tech services company with 51-200 employees

Apr 15, 2024

Wiz offers greater visibility and more in-depth findings in terms of configuration, misconfiguration, and vulnerabilities.

Read full review

Show 9 more reviews (out of 19)

Wiz Cons review quotes

reviewer2129682

Senior Information Security Engineer at a financial services firm with 1,001-5,000 employees

Mar 15, 2023

The reporting isn't that great. They have executive summaries, but it's only a compliance report that maps all current issues to specific controls. Whether you look at one subscription or project, regardless of the size, you will get a multipage report on how the issues in that account map to that control. Our CSO isn't going to read through that. He won't filter that out or show that to his leadership and say, "Here's what we're doing." It isn't a helpful report. They're working on it, but it's a poor executive summary.

Read full review

reviewer2130933

Sr. Manager AVP - Vuln Management and Threat Intelligence at a computer software company with 201-500 employees

Mar 23, 2023

The remediation workflow within the Wiz could be improved.

Read full review

KS

Kamran Siddique

VP Information Security at boxed.com

Mar 22, 2023

The only thing that needs to be improved is the number of scans per day.

Read full review

Free Report: Wiz Reviews and More

Learn what your peers think about Wiz. Get advice and tips from experienced pros sharing their opinions. Updated: October 2024.

816,406 professionals have used our research since 2012.

reviewer2041074

CyberSecurity Sr Manager at a retailer with 10,001+ employees

Jun 3, 2024

We wish there were a way, beyond providing visibility and automated remediation, to wait on a given remediation, due to a critical aspect, such as the cost associated with a particular upgrade... We would like to see preventive controls that can be applied through Wiz to protect against vulnerabilities that we're not going to be able to remediate immediately.

Read full review

reviewer2059842

Director Information Security at a computer software company with 501-1,000 employees

Dec 22, 2022

The only small pain point has been around some of the logging integrations. Some of the complexities of the script integrations aren't supported with some of the more automated infrastructure components. So, it's not as universal. For example, they have great support for cloud formation and other services, but if you're using another type of management utility or governance language for your infrastructure-as-code automation components, it becomes a little bit trickier to navigate that.

Read full review

MA

Assistant Vice President at Genpact - Headstrong

Mar 23, 2023

One significant issue is that the searches are case-sensitive, so finding a misconfigured resource can become very challenging.

Read full review

Mindaugas Dailidonis

Security Solutions Architect - Cloud Security Consultant at a consultancy with 10,001+ employees

Sep 10, 2024

We noticed some capabilities that were lacking, specifically ignoring some false-positive Issue findings. The good news - with the latest update, this has been resolved.

Read full review

Pietro Villivà

Business Line Manager at S2E

Aug 6, 2024

Not having an on-prem version can be an obstacle for customers who have a large workload in an on-prem environment.

Read full review

reviewer1534569

Chief Information Security Officer (CISO) at a outsourcing company with 501-1,000 employees

Feb 23, 2023

Wiz's reporting capabilities could be refined a bit. They are making headway on that, but more executive-style dashboards would be nice. They just implemented a community aspect where you can share documents and feedback. This was something users had been requesting for a while. They are listening to customer feedback and making changes.

Read full review

reviewer2272701

AWS Cloud Security Engineer at a tech services company with 51-200 employees

Apr 15, 2024

The APIs are currently quite limited and not very mature, which makes integration with Splunk difficult.

Read full review

Show 9 more reviews (out of 19)

Related questions

55

How would you compare Wiz vs Lacework?

149

AWS Cloud Security Posture tool - has anyone used either Wiz or Ermetic cloud security products and can compare them to AWS Security Hub?

103

Which tool is best for CNAPP: Wiz or Orca?

7

How to minimize false positives for PII and PCI around different data systems across the globe?

23

When evaluating Cloud-Native Application Protection Platforms (CNAPP), what aspect do you think is the most important to look for?

56

Why is a CNAPP (Cloud-Native Application Protection Platform) important?

80

What CNAPP solution do you recommend for a hybrid cloud?

14

Why are Cloud-Native Application Protection Platforms (CNAPP) tools important for companies?

11

When evaluating Cloud-Native Application Protection Platforms (CNAPP) solutions, what aspect do you think is the most important to look for?

18

Why is Cloud-Native Application Protection Platforms (CNAPP) important for companies?