Wiz Runtime Sensor

What do you like best about the product?

cspm and vulnerability mgt, attack path analysis

What do you dislike about the product?

Billing should be improve how much resources monthly it is scanning should be clear

What problems is the product solving and how is that benefiting you?

attack surface

What do you like best about the product?

What I like most about Wiz is its centralized visibility into cloud security risks across our environment. The ability to correlate vulnerabilities, cloud assets, misconfigurations, and exposure paths in one platform makes security investigations and risk prioritization much more efficient.

The security graph and contextual risk insights are particularly valuable because they help distinguish genuinely exploitable, internet-exposed risks from findings with limited exposure. This reduces unnecessary noise and allows us to focus on remediation efforts where they matter most.

I also appreciate the intuitive dashboard, detailed asset inventory, and actionable findings, which make it easier to collaborate with Infrastructure, DevOps, and engineering teams. Overall, Wiz has significantly improved how we investigate cloud vulnerabilities, assess business exposure, and communicate remediation priorities.

What do you dislike about the product?

The volume of findings can sometimes make prioritizing challenging, especially across inactive or non-internet-facing resources. Improved filtering, deduplication, and customizable reporting would help reduce noise and streamline vulnerability management and remediation tracking.

What problems is the product solving and how is that benefiting you?

Wiz provides centralized visibility into cloud assets, vulnerabilities, misconfigurations, and potential attack paths. It helps us assess actual security exposure, prioritize critical risks, and reduce manual investigation efforts. This improves remediation efficiency, strengthens cloud security posture, and enables better collaboration between Security, DevOps, and Infrastructure teams.

What do you like best about the product?

Great visibility into threat detections and vulnerabilities. Helps prioritize cloud security risks effectively.

What do you dislike about the product?

Some findings require manual investigation.

What problems is the product solving and how is that benefiting you?

Wiz helps us identify and prioritize cloud vulnerabilities, misconfigurations, and potential attack paths in a single platform. This improves threat visibility, reduces investigation time, and enables our SOC team to focus on high-risk issues and respond more effectively to security threats.

What do you like best about the product?

Wiz provides outstanding visibility into our containerized environments, scanning images and Kubernetes clusters seamlessly without requiring cumbersome in-container agents. Its Security Graph connects container vulnerabilities directly to cluster misconfigurations and network exposures, pinpointing true runtime risk instead of flooding us with CVE noise. This unified context makes securing our CI/CD pipelines and production Kubernetes workloads fast, intuitive, and highly actionable.

What do you dislike about the product?

Managing posture across highly dynamic, ephemeral container workloads can generate significant alert churn if initial scope rules aren't tuned carefully.

What problems is the product solving and how is that benefiting you?

Wiz solves the challenge of container blind spots and Kubernetes configuration drift across multi-cloud environments. Instead of treating container images and cluster security as isolated problems, Wiz maps container vulnerabilities, exposed pod ports, and overly permissive Kubernetes RBAC roles into a single interactive graph. This benefits our team by eliminating the need to deploy and manage heavy sidecar agents, giving developers clear remediation steps before code hits production, and significantly reducing container-to-cluster breakout risks.

What do you like best about the product?

Threat detection module, their own rules for detection.

What do you dislike about the product?

In some of the alerts it does not show complete details example rule : Key Created For A Newly Created Service Account Wiz does not provide what key is created for which Newly Created Service Account.

What problems is the product solving and how is that benefiting you?

Detection rules