WIZ Cloud Infrastructure Security Platform

My main use case for Wiz  is that it identifies misconfigurations within the cloud services and misconfiguration within the Kubernetes  platform. We also detect vulnerabilities within the runtime from the containers. Once we have those findings in place, we run a cron job within the GitLab  pipeline wherein it pulls all vulnerabilities and misconfigurations and then creates tickets to the respective teams through Jira  or through ServiceNow . Everything is totally automated. A Python function has been created which pulls all the vulnerabilities, performs data enrichment to identify the ownership, and then assigns the SLA and the SLA breach timeline, based on which it is then posted to the respective groups.

The best features Wiz offers in my experience are the collective findings that you get to see for each resource, which is called something as issues. It combines all findings, whether it is exposed to the internet, whether it has misconfigurations, whether there is encryption in place, or whether there is an IAM  issue in place. You get to see all findings for a particular resource in one view, which Prisma or some other tool was not offering at this moment. Wiz is also offering ASPM at a service management level, KSPM, and AI security.

Wiz has positively impacted my organization because with the consequence model, as and when the consequence model triggers, every team goes ahead and mitigates the findings to ensure that it is not escalated to the CEO level. The automation is helping us to drive our platform to be more secure.

I choose eight out of ten because there is always room for improvement. Possibly I am not able to identify it, but definitely there would be some room for improvement. Nothing is perfect in terms of security.

We are in the process of getting to zero-day vulnerabilities.

I have been using Wiz  for the past two years, enabling CSPM and CWP mainly, but as of now we have also started with KSPM, which is Kubernetes  security posture management and data security posture management as well in my current company.

Wiz is stable in my experience.

Wiz's scalability is good as of now because the attributes we need in terms of identifying vulnerabilities is pretty good compared to Prisma.

Customer support is good. They are really helpful, but it is only the management who gets to interact with the sales team.

Positive

We did evaluate CrowdStrike, Tenable One, and Prisma Cortex .

We create dashboards with the automation, so all the findings being pulled from Wiz are enriched first, and then we store all those findings with the SLA metrics into a Grafana  dashboard.

I have seen a return on investment with Wiz, specifically in that we need fewer employees.

I would advise others looking into using Wiz to definitely compare it with all the other tools that are in the market. Wiz is one of the finest tools that I have used so far, and it gives visibility to all the services based resources, which other tools do not give. It also helps to create custom policies based on Rego, which is one of the easiest solutions that anyone can develop. I give this product a rating of eight out of ten and would definitely recommend Wiz.

Public Cloud

Amazon Web Services (AWS)

What do you like best about the product?

The UI is amazing, and it's only the tip of the iceberg: the graph-query engine underneath is super powerful. There's a bit of a learning curve here, but the AI tool is a big help with this part.

Plus, the documentation is excellent and the team are very customer focused.

What do you dislike about the product?

The colors of the new logo 😁
The PoV was a stressful process, it's a rather unique approach to buying a software solution IME.

What problems is the product solving and how is that benefiting you?

Wiz gives structure and prioritization to our cloud security efforts. No more worrying about every CVE, we can focus on the few that really matter !

What do you like best about the product?

Very easy to deploy and quick to start delivering value. It provides excellent visibility across a wide range of security risks and surfaces vulnerabilities that might otherwise go unnoticed. The remediation guidance, particularly the GenAI step-by-step explanations, is genuinely useful for helping teams understand and fix issues rather than just identifying them.

What do you dislike about the product?

Some capabilities are consumption-based, so it is important to understand how certain features could affect cost. That said, it is straightforward to control or limit additional spend if needed.

What problems is the product solving and how is that benefiting you?

Wiz provides us with a consolidated view of security risks across our cloud estate and code base. It has improved our visibility, helped us uncover issues we hadn’t previously detected, and made it easier for teams to prioritise and remediate vulnerabilities. Overall, it’s having a positive impact on our security posture.

What do you like best about the product?

First of all, the deployment was very easy: there was no agent to install and no complicated onboarding. It was up and running in less than half a day. For the smaller details, our TAM was available very quickly and knows the product almost perfectly. The issue tab is really useful to pinpoint exactly what you need to address quickly by providing a good context, and help to cut the alert fatigue drastically. That's a tool we're using daily and that is completely integrated into our alerting process.
The pertinence of issues are also very good, having a platform that we can trust about the severity of issues is a game changer.

What do you dislike about the product?

As today, unfortunately we didn't find a downside of WIZ compared to other product.

What problems is the product solving and how is that benefiting you?

Our first problem was the alert fatigue, we come from a regular CSPM, without any context. WIZ was able to cut the alert fatigue instantly, the user adoption of the tool was greatly improved by that.

What do you like best about the product?

Wiz provides full visibility into our cloud resources. It was easy to set up; within minutes, I was able to connect Wiz to my entire environment. It then performs a full inventory of my environment and clearly presents the outstanding vulnerabilities and misconfigurations, and most importantly, the toxic combinations that should be addressed immediately. Also, Wiz support is excellent

What do you dislike about the product?

I honestly do not think there's anything I dislike about Wiz.

What problems is the product solving and how is that benefiting you?

Wiz is helping us solve issues around resource visibility and inventory. In a cloud environment, where resources can be spun up very easily, Wiz captures those changes quickly and highlights possible misconfigurations or other concerns that should be addressed. It also doesn’t just present findings; it correlates toxic combinations and indicates what specifically requires urgent attention. I find Wiz threat intel really good, especially because it correlates that intel with my resources and lets me know whether any of them are affected.

Wiz AI security is also great. As an organization that is rapidly embracing AI for our processes and workflows, Wiz provides full visibility into our usage of AI services across our cloud providers, including possible misconfigurations, Shadow AI, the use of sensitive data for AI model training, and publicly exposed MCPs within my environment.