WIZ Cloud Infrastructure Security Platform

What do you like best about the product?

The integration is easy, it works well, and it gives us full visibility into our resources.

What do you dislike about the product?

The platform has so much to offer that the UI ends up feeling cluttered.

What problems is the product solving and how is that benefiting you?

The platform provides us with better security visibility and more timely alerts.

What do you like best about the product?

Wiz releases new features I didn't even know I needed! The speed of releases and the amount of actually useful content exceeds my expectations every time.

What do you dislike about the product?

They release so many new features it's difficult to keep my team up to date with training and knowledge to utilize them fully.

What problems is the product solving and how is that benefiting you?

Wiz's graph feature is exceptional, it is beyond helpful when trying to connect assets together and makes investigating security issues smooth. The UI is satisfying to use and easy for users to understand what they're looking at.

What do you like best about the product?

I like having centralized information across multicloud environments and automated remediation. Wiz gives technical teams a detailed, simplified view of the main issues involving cloud resources, and Jira and Google Chat make it easier to alert stakeholders to prioritized risks. I also like the simplified interface, easy no-query investigations, and embedded AI (Mika), which helps with many administrator and developer needs. Onboarding is quick, and setup was very easy and fast; everything was done within one day.

What do you dislike about the product?

I’d like to create executive PDF reports for searches like the issues tab and security graph, and see a suggested remediation plan. I can create executive reports for compliance frameworks, but I’d like this feature on the threats, issues, findings, and other pages too, since project stakeholders frequently require these documents.

What problems is the product solving and how is that benefiting you?

I use Wiz to centralize information across multicloud environments and automate remediation. It gives our technical teams a detailed, simplified view of the main issues with cloud resources, and tools like Jira and Google Chat make it easier to bring the real prioritized risks to stakeholders’ attention.

What do you like best about the product?

I like that Wiz allows me to address security posture and vulnerabilities very quickly and efficiently, instead of doing so much manual work. I like how it interprets findings with the intelligence of its agents and that its interface is quite user-friendly. I love the Security Graph because it shows the traceability from the incident's origin to the organization's internal resource. The initial setup was very simple: it integrated with the cloud in minutes.

What do you dislike about the product?

The only thing I would improve is the downloadable reports: I would like them to be more summarized and high-level to present to management, with hard data and commitment indicators. I would also like them to show what has already been remedied and what pain points need to be addressed to increase the posture percentage.

What problems is the product solving and how is that benefiting you?

Wiz helps me reduce the manual work that used to take us a long time; now we can address security posture and vulnerabilities very quickly and efficiently.

What do you like best about the product?

Wiz simplifies cloud security management by connecting multi-cloud environments in minutes. It offers great context-based risk prioritization, intuitive dashboards, and actionable insights that allow our engineering and security teams to resolve issues efficiently.

What do you dislike about the product?

What I would like to see improved is more detailed granular information on identified security issues. Having more in-depth insights into each topic would help me pinpoint the exact cause and know precisely which team to route the issue to for resolution.

What problems is the product solving and how is that benefiting you?

Wiz identified a publicly exposed server that was serving HTTP 200 responses on restricted pages without proper authorization. It brought this exposed attack path to our attention right away, allowing us to quickly route the fix to the right infrastructure team and close the public exposure.

What do you like best about the product?

What I value most about Wiz is its ability to provide centralized visibility of security risks in multicloud environments, making it easier to identify, correlate, and prioritize vulnerabilities, misconfigurations, and security exposures. Its risk context-based approach helps direct remediation efforts towards findings with the greatest potential impact, improving operational efficiency and supporting strategic decision-making. Additionally, the integration of various security capabilities into a unified platform fosters collaboration between Security, Infrastructure, and Cloud teams, contributing to the continuous strengthening of the security posture.

What do you dislike about the product?

One of the main areas of opportunity is that it would be very beneficial to have greater customization capabilities in executive reports, tracking dashboards, and remediation workflows. This would facilitate adaptation to different governance and risk management models, according to the needs of each organization.

What problems is the product solving and how is that benefiting you?

Wiz helps address one of the main challenges of cloud security: fragmented visibility of risks in multicloud environments and the difficulty in timely identifying and prioritizing security exposures. By centralizing findings, correlating vulnerabilities, misconfigurations, and potential attack paths, the platform facilitates more contextualized and business impact-oriented risk management. Among its main benefits are the optimization of risk identification and prioritization processes, the strengthening of collaboration between Security and Technology teams, and a greater capacity to support decisions through consolidated information. Additionally, its continuous monitoring and evaluation capabilities contribute to strengthening the security posture and supporting governance, audit, and compliance processes.

What do you like best about the product?

What I love most about Wiz is the centralized visibility it provides over my entire multicloud environment. I currently use it to integrate different platforms like Azure, Oracle Cloud Infrastructure (OCI), Azure DevOps, and GitHub, allowing me to have a unified view of the security posture of both the infrastructure and the development cycle.

I find its ability to identify vulnerabilities in repositories, detect exposed secrets in code, and correlate risks between cloud resources, identities, and applications particularly valuable. This helps me understand not only what vulnerabilities exist but which ones pose a real risk to the organization.

Additionally, we leverage Wiz's AI agents and initiatives to accelerate the analysis and investigation of findings. These capabilities help us better understand the context of risks, identify potential attack paths, validate exposures, and prioritize remediation actions, significantly reducing the time spent on manual analysis.

In my daily work, I use Wiz to investigate automated alerts related to attack risks, analyze findings, validate their impact, and coordinate remediation with responsible teams. For example, we have identified resources exposed to the Internet, such as virtual machines with sensitive data or configurations that increase the attack surface, allowing us to act proactively before an incident materializes.

In summary, Wiz provides me with three key capabilities: visibility, context, and prioritization. Thanks to the combination of risk correlation, AI-assisted analysis, and comprehensive coverage of cloud and DevSecOps environments, we can detect, investigate, and remediate threats more quickly and efficiently.

What do you dislike about the product?

Overall, my experience with Wiz has been very positive, especially due to the comprehensive visibility it provides over multicloud environments and its AI-assisted risk correlation and investigation capabilities. However, if I had to mention an area for improvement, it would be the depth of some security analyses in the development cycle.

When comparing Wiz's SAST (Static Application Security Testing) capabilities and secret detection with specialized market tools, I believe Wiz adequately meets the need and provides excellent centralized visibility. Nonetheless, in some cases, it could delve deeper into the analysis and improve the accuracy of certain findings, reducing the number of false positives and providing more technical context to facilitate the validation and remediation process.

Even so, I believe this point does not diminish the overall value of the platform, as its main strength remains the ability to correlate information from infrastructure, identities, applications, and development to offer a complete view of risk in the organization.

What problems is the product solving and how is that benefiting you?

Wiz solves the problem of visibility and risk prioritization in multicloud environments. It allows me to centralize information from Azure, OCI, Azure DevOps, and GitHub to identify vulnerabilities, exposed secrets, insecure configurations, and potential attack paths. Additionally, its AI capabilities and security agents streamline the investigation and analysis of alerts, helping me focus efforts on the most impactful risks and coordinate their remediation more efficiently.

What do you like best about the product?

What I like most about Wiz is how effectively it balances depth with usability across the board.

The UI/UX is clean and intuitive. The Security Graph makes complex relationships easy to understand at a glance, and I can move from a high-level view to a specific finding in just a few clicks without feeling lost.

Integrations are another major strength. It connects smoothly with our cloud providers, CI/CD pipelines, ticketing systems, and messaging tools, so findings show up where my team already works instead of living in a separate silo.

From a performance standpoint, the agentless scanning provides broad, fast coverage across the environment without the overhead of deploying and maintaining agents. Results also come back quickly, even at scale.

On pricing and ROI, the value becomes clear quickly. By prioritizing real, exploitable risk over raw alert volume, it saves significant triage time and helps us reduce exposure with the team we already have.

Support and onboarding were smooth as well. Initial setup was fast thanks to the agentless model, and the team was responsive and genuinely helpful in getting us to value quickly.

Finally, the AI/intelligence layer stands out. It correlates exposure, misconfigurations, and attack paths into clear, prioritized insights, and it surfaces things that are easy to miss manually—like an “internal” asset that’s actually reachable from the public internet.

What do you dislike about the product?

There are a few areas where Wiz could improve.

On the UI/UX side, while the Security Graph is powerful, it can feel overwhelming at first. There’s a real learning curve to understanding all the different views and filters, and in larger environments the graph can become visually dense and harder to navigate.

When it comes to integrations, the core connectors are solid. However, some of the more niche or custom tools in our stack require extra configuration or workarounds, and a few integrations don’t go as deep as I’d like.

From a performance perspective, scanning is generally fast, but in very large environments some queries and dashboards can take longer to load. I’ve also noticed there can be a slight delay before newly created resources show up.

Pricing is probably the biggest challenge. Wiz is a premium product, and the cost can be a real hurdle for smaller teams or when trying to justify expansion into additional modules. The pricing model also isn’t always easy to predict as you scale.

For support and onboarding, the initial setup is smooth, but fully mastering the platform’s more advanced capabilities takes time. More in-depth documentation or guided tutorials would help shorten that ramp-up.

Finally, on the AI/intelligence side, the prioritization is strong, but it occasionally surfaces findings that still need manual validation. I’d also like more transparency into how certain risks are scored and ranked.

What problems is the product solving and how is that benefiting you?

Wiz is helping us solve several problems at the same time.

Visibility across the cloud. Before Wiz, we didn’t have a single, complete view of our cloud footprint. Now we have full, agentless visibility across accounts and assets, which helps us catch things that used to slip through the cracks—like an “internal” asset that turned out to be exposed to the public internet. The result is that our attack surface is no longer a blind spot.

Alert overload and prioritization. We used to spend a lot of time triaging a flood of disconnected alerts. Wiz correlates exposure, misconfigurations, vulnerabilities, and attack paths into prioritized, contextual risk, so we can focus first on what’s actually exploitable. The result is a major reduction in wasted triage time and faster remediation of the issues that matter.

Reconnaissance and attack-path analysis. For both defensive work and red team exercises, the Security Graph makes it clear how an attacker could chain weaknesses together to reach sensitive resources. The result is that we can proactively close real attack paths instead of reacting to individual findings in isolation.

Operating at scale with a lean team. The agentless model gives us broad coverage without heavy deployment or ongoing maintenance. The result is that a small team can cover a large environment effectively, improving our security posture without needing to grow headcount at the same pace.

Shifting security left. With CI/CD and cloud integrations, risks are surfaced earlier in the pipeline and routed into the tools we already use. The result is fewer issues making it to production and better collaboration between security and engineering.

Overall, Wiz has improved our mean time to detect and remediate, reduced our exposure, and given us a shared, contextual view of risk that both security and engineering can act on.

What do you like best about the product?

Wiz Cloud, Defend, and Sensor just work. You turn them on, connect them to your CSPs and boom you've got unparalleled insight.

What do you dislike about the product?

The pricing model could use refinement, I'd love to have concrete pricing around the different modules rather than relying on "units"

What problems is the product solving and how is that benefiting you?

Wiz gave us full visibility into our cloud posture and the risks we had within our deployments and configurations. It allowed us to quickly identify and prioritize risks that were issues within our organization easily through the UI and integrate with our existing CSPs and security tooling.

What do you like best about the product?

Wiz's agentless approach is what I value most: it gives fast coverage across the whole cloud environment without deploying agents on every resource, and its attack-path graph connects vulnerabilities, exposure, IAM permissions, and sensitive data to show real risk, which makes prioritization far more effective.

What do you dislike about the product?

Wiz's main drawbacks are alert noise that takes tuning to bring under control, cost that grows quickly with the size of the environment, and agentless snapshots that give less real-time visibility than runtime agents.

What problems is the product solving and how is that benefiting you?

Wiz addresses three main problems: internet exposure of cloud resources, vulnerabilities, and risk prioritization. It identifies which cloud assets are reachable from the internet, detects vulnerabilities and misconfigurations on them, and correlates that with permissions and sensitive data to show which combinations are actually exploitable. This lets the team focus effort on what carries the most risk, instead of working through an endless list of isolated findings.