Wiz Runtime Sensor

What do you like best about the product?

The results are clear, accurate, and prioritized. The remediation guidance is clear, concise, and can be tailored to the specific resource. And the configuration/setup as well as integration points, was simple and broad without being overly permissive. The company vision is ambitious and they deliver. The support team is extremely available and has not seen the usual turnover.

What do you dislike about the product?

The interface is not always intuitive, and updates are pushed very frequently often breaking documentation links and changing processes with little to no notice.

What problems is the product solving and how is that benefiting you?

Wiz is giving us a clear picture of what we have in our environments and how secure our applications are. When we need to assure compliance, either for clients or for certification, its findings are reliable and present without additional effort. And when cloud/app events and incidents inevitably happen, we can swarm and resolve the underlying risks much quicker than before.

What do you like best about the product?

It is a really great SAAS paltform giving complete visibility of your cloud environment

What do you dislike about the product?

can be a bit complex to understand in the beginning

What problems is the product solving and how is that benefiting you?

It provides us with comprehensive visibility into our cloud environment.

What do you like best about the product?

The remediation steps are actually actionable - not just 'fix this' but showing you exactly how. Also, the multi-cloud coverage means I'm not juggling different tools for our various portfolio companies' infrastructure.

What do you dislike about the product?

Takes a bit to learn their UX language, but once you get it, it makes sense. Sometimes the alert noise can be high until you tune it properly.

What problems is the product solving and how is that benefiting you?

We're dealing with patient health data, so any cloud misconfiguration could mean a HIPAA breach. Wiz catches stuff like exposed S3 buckets or overly permissive access before it becomes a problem. The continuous monitoring means I'm not constantly manually checking if PHI is actually protected. Also makes compliance audits way easier - I can actually show what controls we have in place instead of just saying 'trust me, it's secure.

What do you like best about the product?

As a tech lead security engineer, what I appreciate most about Wiz is its ability to prioritize what truly matters. The toxic-combination engine is exceptionally effective at surfacing real, exploitable risks rather than overwhelming the team with noise. This also empowers our engineering teams to use Wiz autonomously daily, i.e. they can quickly understand what needs to be fixed first, without relying on security for constant supervision. That independence has been a major productivity boost and reduces friction, while the security team still maintains oversight for high-risk scenarios the tool might not fully capture.
On top of that, the CNAPP platform is comprehensive, and require only a few amount of time to set up and integrate everything in our ecosystem. We leverage Wiz across our cloud infrastructure, workloads, and runtime using the Wiz Sensor, which performs reliably with minimal overhead. The security graph makes exploration intuitive and gives us the context we need to understand issues end-to-end.
The customer success team is also one of the best I’ve worked with, which is highly appreciated.

What do you dislike about the product?

Overall, the platform work very well, and there are no big drawbacks. However, there is one challenge around KPIs, metrics, and vulnerability tracking in autoscaling environments. Because resources scale in and out frequently, we often lose track of what was actually fixed by engineering versus what simply disappeared due to autoscaling events. Vulnerabilities may appear “closed” when the underlying resource is terminated, only to reappear when a new instance is spun up. But overall, you still can follow the big picture of your vulnerabilities.

What problems is the product solving and how is that benefiting you?

Wiz brings us clarity to the complexity of managing cloud security at scale. It consolidates visibility across cloud resources, workloads, and runtime into a single, coherent platform. The prioritization model ensures that both security and engineering teams stay focused on the risks that matter most, rather than sifting through thousands of low-impact findings.

It also enables engineering teams to take meaningful action independently, which greatly accelerates remediation and reduces operational overhead for the security team. At the same time, it doesn’t replace the need for dedicated security expertise, we still rely on our team to investigate nuanced, high-risk cases and validate critical exposures. But Wiz provides a rich layer of insight with almost no additional effort required from engineers, making the entire organization more efficient and more secure.

What do you like best about the product?

Wiz is a truly impressive tool. The user experience stands out, as it allows access to the platform through an interface adapted to each user's role. Additionally, Wiz's ability to prioritize critical aspects significantly contributes to improving work efficiency.

What do you dislike about the product?

The truth is that I don't find any negative aspect in Wiz, as for the use we give it, it turns out to be an excellent tool.

What problems is the product solving and how is that benefiting you?

Wiz provides us with centralized visibility of our multicloud environment, covering both the configuration of different clouds (CSPM) and the protection of workloads and applications (CNAPP). Having all findings visible and prioritized in one place allows us to organize and tackle the work much more efficiently.