Sold by: Wiz
Deployed on AWS
Free Trial
AWS Free Tier
Wiz provides an entirely new approach to cloud security that for the first time identifies the actual risks hidden in your cloud infrastructure.
4.7
Overview
Wiz performs a deep assessment of your entire cloud and then correlates a vast number of security signals to trace the real infiltration vectors that attackers can use to break in. Wiz also gives you the tools to bring your DevOps and development teams into the process to fix these risks, creating a culture of security in your cloud operations that results in a stronger, more secure cloud. For more information visit: https://www.wiz.io
Wiz provides custom pricing for customers via Private Offer. Please contact marketplace@wiz.io for a better understanding of our pricing model and products.
Highlights
- Covers every resource across your full cloud stack, multi-cloud environment using a 100% API approach that deploys in minutes.
- Models overlapping cloud policies, configurations, and compensating controls that interact in ways that are often unpredictable to calculate their end result.
- Maps all of the issues in your cloud together in a single graph database, revealing which of them combined pose the greatest risk.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free according to the free trial terms set by the vendor.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Wiz Essential | Protect 100 cloud workloads | $24,000.00 |
Wiz Advanced | Protect 100 cloud workloads | $38,000.00 |
Wiz Sensor | 100 Wiz Sensors. Add-on for Wiz Advanced | $28,000.00 |
Wiz Code | 100 Wiz Code Licenses. Add-on for Wiz Cloud | $58,500.00 |
Wiz Defend | Ingest 300 GBs of logs per month. Add-on for Wiz Advanced | $18,000.00 |
Dimensions summary
Pricing is modular and sold by units. Two base options protect your cloud workloads in blocks of 100: Wiz Essential and Wiz Advanced. Three add-ons build on a base plan. Wiz Sensor and Wiz Defend extend Wiz Advanced; Wiz Sensor is sold per 100 sensors, and Wiz Defend is sold by log volume at 300 GB ingested per month. Wiz Code adds to Wiz Cloud in blocks of 100 licenses. You scale by buying more units of each dimension as your workloads, sensors, developers, or log ingestion grow.
Top-of-mind questions for buyers
A workload is a cloud resource that Wiz scans, such as a virtual machine, container, or serverless function. Each base plan protects these in blocks of 100. Wiz connects through API connectors to inventory and scan your cloud environment, counting the workloads it covers.
Wiz Defend is billed by log ingestion at 300 GB per month per unit. It combines runtime signals from the Wiz Sensor with analysis of cloud and SaaS logs. As your monthly log volume grows past a unit, you add more Defend units to cover the added ingestion.
Add-ons attach to specific base plans. Wiz Sensor and Wiz Defend extend Wiz Advanced. Wiz Code adds to Wiz Cloud in blocks of 100 licenses. You need the matching base plan before buying its add-on. Each dimension bills independently, so your total combines every unit you purchase.
wiz.io+3
Helpful?
Vendor refund policy
Please contact us at info@wiz.io
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
Wiz provides custom pricing for customers via Private Offer. Please contact marketplace@wiz.io for a better understanding of our pricing model and products. tel:+01-240.823.5670
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Rapid7
By Orca Security CNAPP
Top
10
In Application Development, Continuous Integration and Continuous Delivery, Security
Top
10
In Vulnerability and Patch Management, Data Governance
Top
10
In Monitoring, Application Development
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Multi-Cloud Resource Coverage
Covers every resource across the full cloud stack in multi-cloud environments using a 100% API approach with deployment in minutes.
Cloud Policy and Configuration Analysis
Models overlapping cloud policies, configurations, and compensating controls to calculate their combined end result.
Risk Correlation and Visualization
Maps all issues in the cloud infrastructure together in a single graph database to identify which combined issues pose the greatest risk.
Security Signal Correlation
Correlates a vast number of security signals to trace real infiltration vectors that attackers can exploit.
DevOps and Development Team Integration
Provides tools to integrate DevOps and development teams into the security risk remediation process.
Attack Surface Management
Aggregates comprehensive attack surface visibility across hybrid environments with external attack surface scans to provide 360-degree view of entire attack surface
Vulnerability Management
Delivers complete visibility across on-premise and remote endpoints to identify, communicate, and remediate vulnerabilities, misconfigurations, and risks
Cloud Security
Provides code-to-cloud protection for cloud-native applications with CI/CD pipeline integration and agentless risk assessment based on reachability, exploitability, and potential impact
Next-Generation SIEM and XDR
Delivers accelerated detection and response with SaaS deployment, out-of-the-box detections informed by MDR SOC, and built-in automation capabilities
Threat Intelligence
Delivers high-fidelity actionable threat intelligence infused with proprietary threat and vulnerability research from Rapid7 Labs and community-driven tools
Agentless Cloud Scanning
Patented SideScanning technology provides deep visibility into cloud environments without requiring agents, with deployment in minutes
Risk Prioritization and Attack Path Analysis
Granular risk scoring applied to alerts with correlation of seemingly unrelated issues to identify dangerous attack paths to critical assets
Unified Cloud Security Platform
Consolidates multiple security functions including CSPM, CWPP, CIEM, DSPM, Container security, and API security into a single platform
CI/CD Integration
Seamless integration into CI/CD process to shift security left and secure applications from code to cloud
AI-Powered Investigation and Remediation
Generative AI capabilities for simplified investigations, accelerated remediation, and custom remediation workflows with support for custom AI agents via MCP
Standard contract
No
No
No
Customer reviews
Yoly M.
Broad Private Cloud Visibility with Clear Risk Prioritization
Reviewed on Oct 23, 2026
Review provided by G2
What do you like best about the product?
The broad view it gives me into my private cloud environment, how it helps prioritize resolution of identified risks. Wiz offers good technical documentation to guide implementations or resolution of system health issues.
What do you dislike about the product?
The pricing model and multiple SKUs are very confusing. I wish the pricing calculator would "auto-populate" the information from my environment into it to help identify clearly the current cost instead of having to manually enter information. The amount and speed of new features releases sometimes is overwhelming.
What problems is the product solving and how is that benefiting you?
I can provide detailed views into inventories of technologies in my environment. It also helps with threat response when there are published advisories, I can quickly understand the scope of impact of my environment, which is one of the first questions that senior leadership needs quick answers to those problems.
Andy W.
Easy-to-Use, Responsive UI That Delivers
Reviewed on Oct 23, 2026
Review provided by G2
What do you like best about the product?
The UI is easy to use and everything is responsive
What do you dislike about the product?
Onboarding new users can sometimes be difficult
What problems is the product solving and how is that benefiting you?
Helps us view risks quickly
Information Technology and Services
Powerful Security Graph, Threat Mapping, and Attack Path Analysis
Reviewed on Oct 23, 2026
Review provided by G2
What do you like best about the product?
I like security graph, threat mapping, attack path analysis.
What do you dislike about the product?
The cost is a little bit high compared to the other vendors.
What problems is the product solving and how is that benefiting you?
I am mostly using it for threat hunting, CSPM, vulnerability analysis. It is helping in reducing the security threats.
Anil Kumar C.
Agentless Scans That Don’t Impact Workloads
Reviewed on Oct 23, 2026
Review provided by G2
What do you like best about the product?
agentless scan with out affecting workloads
What do you dislike about the product?
In a month how many workloads its scans and cost assoicated it if relected more precisly it will be helful
What problems is the product solving and how is that benefiting you?
Reducing attack surface
Computer Software
Wiz Makes Cloud Vulnerability Prioritization Fast and Actionable
Reviewed on Oct 22, 2026
Review provided by G2
What do you like best about the product?
Wiz centralizes all our cloud vulnerabilities in one place and prioritizes them by real risk, not just CVE counts. The treemap and ‘Top Exploitable Components’ views make it easy to see which libraries and resources are most dangerous, and the links to related risk issues help us focus remediation on what actually matters. Overall, it’s significantly improved our ability to move from ‘how many vulnerabilities do we have’ to ‘where is it most urgent to fix,’ which has made our security work much more efficient.
What do you dislike about the product?
For now, the overall Wiz interface and workflows are excellent, and we don’t currently see clear areas that need improvement. The main pain points we had in the past – such as adding monitoring for vulnerable files inside applications – have already been successfully addressed by Wiz, which shows they listen to feedback and iterate quickly on the product.
What problems is the product solving and how is that benefiting you?
We use Wiz primarily to solve the challenge of understanding and prioritizing cloud vulnerabilities across a large, complex environment.
Before Wiz, we struggled with:
- Fragmented visibility: vulnerability data was spread across multiple tools and scanners, making it hard to see the full picture of risk in our workloads, containers, and code.
- Poor prioritization: we had long lists of CVEs but limited context about which ones were truly critical in our environment, so a lot of time was spent on triage rather than remediation.
- Slow, manual investigations: identifying the riskiest components and resources required manual correlation between different systems and reports.
After implementing Wiz:
- We can see all cloud vulnerabilities in one place, with clear severity breakdowns (Critical, High, Medium, Low) and views like Vulnerability Findings, Top Exploitable Components, and Top Vulnerable Resources that highlight where risk is concentrated.
- We can quickly identify specific components (for example, libraries like google.golang.org/grpc, jackson-databind, netty, minimist, sequelize, glib, etc.) and resources (such as particular VMs, container images, and clusters) that have the highest number of critical and high vulnerabilities.
- We can filter and group findings by resource type, detection method, and related risk issues, which makes it much easier to focus on the vulnerabilities that matter most to our environment and business.
This has resulted in several measurable benefits:
- Faster triage: instead of spending large amounts of time manually aggregating and sorting vulnerability data, we can use Wiz’s views and filters to get to the highest-risk items in minutes.
- More effective remediation: by focusing on the most exploitable components and the most vulnerable resources, we spend remediation effort where it has the biggest impact on reducing risk.
- Better collaboration: having a single, consistent view of vulnerabilities and related risk issues improves communication between security and engineering teams and helps align on what to fix first.
Before Wiz, we struggled with:
- Fragmented visibility: vulnerability data was spread across multiple tools and scanners, making it hard to see the full picture of risk in our workloads, containers, and code.
- Poor prioritization: we had long lists of CVEs but limited context about which ones were truly critical in our environment, so a lot of time was spent on triage rather than remediation.
- Slow, manual investigations: identifying the riskiest components and resources required manual correlation between different systems and reports.
After implementing Wiz:
- We can see all cloud vulnerabilities in one place, with clear severity breakdowns (Critical, High, Medium, Low) and views like Vulnerability Findings, Top Exploitable Components, and Top Vulnerable Resources that highlight where risk is concentrated.
- We can quickly identify specific components (for example, libraries like google.golang.org/grpc, jackson-databind, netty, minimist, sequelize, glib, etc.) and resources (such as particular VMs, container images, and clusters) that have the highest number of critical and high vulnerabilities.
- We can filter and group findings by resource type, detection method, and related risk issues, which makes it much easier to focus on the vulnerabilities that matter most to our environment and business.
This has resulted in several measurable benefits:
- Faster triage: instead of spending large amounts of time manually aggregating and sorting vulnerability data, we can use Wiz’s views and filters to get to the highest-risk items in minutes.
- More effective remediation: by focusing on the most exploitable components and the most vulnerable resources, we spend remediation effort where it has the biggest impact on reducing risk.
- Better collaboration: having a single, consistent view of vulnerabilities and related risk issues improves communication between security and engineering teams and helps align on what to fix first.