Wiz Runtime Sensor

What do you like best about the product?

What I like best about Wiz is its clean and intuitive user interface, which makes it easy to navigate across projects, cloud environments, and security findings.

The project management capabilities are especially useful for organizing assets, separating environments, assigning ownership, and tracking remediation progress.

Wiz CLI is another major advantage because it allows security checks to be integrated directly into developer workflows and CI/CD pipelines, helping identify vulnerabilities, secrets, misconfigurations, and other risks before deployment.

The findings are clearly presented, prioritized by risk, and supported with useful context such as affected resources, attack paths, remediation guidance, and business impact.

Overall, Wiz provides strong visibility across the cloud environment, reduces the time required to investigate findings, and helps security and engineering teams collaborate more effectively.

What do you dislike about the product?

I cant open jira tickets for all the findings only for issues.

What problems is the product solving and how is that benefiting you?

Vulnerability and patch management,
Perfromance increase,
All in one product

What do you like best about the product?

Wiz excels at cloud security posture visibility and attack path analysis. It clearly shows the complete access path from the internet to internal resources — not just a list of alerts, but actual exploitable paths. We have it integrated with AWS, GCP, GitHub, and Jira, and the integrations work smoothly for tracking findings through to remediation.

The MCP integration with Claude AI is a standout feature — we can query security findings in natural language in real time, which saves the security team significant time compared to manually navigating the console. Being able to ask "is this asset exposed to the internet?" and get an immediate, accurate answer with full network path details is genuinely useful.

What do you dislike about the product?

The MCP API connection can drop mid-response when querying large datasets — for example, querying all HIGH/CRITICAL findings across the environment (140,000+ results) caused timeouts. Filtering options help, but better handling of large result sets would improve the experience. VPC Flow Logs visibility could also be surfaced more prominently in the UI when they are disabled, as this is an important gap for network traffic auditing. Additionally, reverse-lookup from a Jira ticket number to the corresponding Wiz resource is unreliable — sometimes the linked asset cannot be found, which breaks the traceability workflow between ticketing and security findings.

What problems is the product solving and how is that benefiting you?

Before Wiz, we lacked unified visibility across our AWS and GCP environments — we couldn't easily tell which assets were internet-exposed or had exploitable attack paths without waiting for external penetration test results. Wiz solved this by providing continuous, agentless scanning with clear attack path visualization. Since integrating Wiz with Claude AI via MCP, our security team can query findings in natural language in real time, significantly reducing the time spent navigating the console manually. This has shifted us from reactive (finding issues only during annual pentests) to proactive security posture management.

What do you like best about the product?

Feature-rich, with actionable reports that help remediate security exposure across multiple platforms. The interface and its built-in AI tool make it very user-friendly, even for non-technical users.

Both Pre and Post sale support from Wiz team are phenomenon.

What do you dislike about the product?

I have not come across anything to dislike yet.

What problems is the product solving and how is that benefiting you?

It provides actionable exposure management and risk management across our environment.

What do you like best about the product?

A single-pane view that shows me what I need to know about my overall environment and security posture.

What do you dislike about the product?

There’s a big learning curve to fully understand how Wiz works, since it provides a vast amount of information.

What problems is the product solving and how is that benefiting you?

For us, it helped eliminate some of the tools we previously had to use separately, and in turn it helped us save costs.

What do you like best about the product?

I like how Wiz helps prioritize what truly matters and needs to be fixed, rather than overwhelming teams with large volumes of difficult-to-manage findings.

What do you dislike about the product?

A key area for improvement is the limited functionality of ignore rules and custom threat detections. More advanced custom rules, ideally supporting correlation across multiple data sources, would be valuable.

What problems is the product solving and how is that benefiting you?

Wiz addresses most cloud security, CI/CD, and application security challenges by providing teams with the governance, visibility, and prioritization needed to manage risk effectively.