We use Wiz in our cloud security management by connecting it to our main cloud environment and other multi-cloud solutions. It helps us consolidate and manage information and risks, dividing them between VPCs and business units. Wiz keeps all information up-to-date and helps us identify any toxic connections within our cloud implementations.
External reviews
768 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Great all rounder, wide range of features, communicative team
What do you like best about the product?
The customer success, support and product teams are really collaborative and helpful, consistently taking feature requests, providing assistance with troubleshooting and integrations, and delivering training to our team as use of the platform expands. The product roadmap continues to deliver useful functionality and support us with adoption and tuning to fit our work processes. Set up and maintenance is fast and low effort, and it's reasonably intuitive to use.
What do you dislike about the product?
We do get the occasional bug, which is usually resolved quickly. Some features on the product roadmap that are a priority to us may take a while for Wiz to deliver because the product team is focused on other changes.
What problems is the product solving and how is that benefiting you?
Great visibility into our cloud environment, providing actionable and prioritised insight into compliance and security posture, vulnerability and patch management, cloud entitlements and data security considerations. Engagement with our engineering teams has improved, and we've begun to use the platform to assist in e.g. operational incident investigations as well as extracting data for MI purposes.
Wiz : Finally the vulnerability management tool I was looking for !
What do you like best about the product?
Wiz is very easy to install. Nonetheless it can perform great things. Inventories, patch management infos, use of different compiance frameworks. The remediation steps are also well detailed making resolution of issues very easy.
What do you dislike about the product?
Sometimes confusing, the ways to find the right information could be improved. Adding some sorting in columns would be nice. It then takes some time to master the interface.
What problems is the product solving and how is that benefiting you?
Wiz provides all the necessary information about the company assets in a single interface. You can then see the vulnerabilities, the external posture, issues with configuration, data issues,... All in one place
Refreshing, easy to use and full of features
What do you like best about the product?
As an azure cloud user we appreciate greatly the added value over Azure advisor. It allows us to prioritize vulnerabilities and focus on those with the highest risk.
We also see that, although already a lot of functionality exists, a constant flow of new features are being added, all of this implemented with a single click.
We also love the regular followup meetings and feel we are heard and our needs are really what they need. With NIS2 coming up it really becomes something crucial in managing our assets.
We also see that, although already a lot of functionality exists, a constant flow of new features are being added, all of this implemented with a single click.
We also love the regular followup meetings and feel we are heard and our needs are really what they need. With NIS2 coming up it really becomes something crucial in managing our assets.
What do you dislike about the product?
Wiz is activated on a subscription which is an all or nothing approach. Although this seems the right way to do, a more granular approach would be better manageable from a timing and budget perspective.
What problems is the product solving and how is that benefiting you?
Next to the typical asset inventory, it is providing a clear view on the attack surface and helping us to identify vulnerabilites and setting the right priorities.
CTO
What do you like best about the product?
Detail information on your vulnerabilities and solution
What do you dislike about the product?
So far I have not found anything that I dislike.
What problems is the product solving and how is that benefiting you?
Cloud monitoring
A Single Pane of Glass for our GCP Security Needs
What do you like best about the product?
Wiz provides incredible coverage across our cloud environments. The inclusion of raw logs and the ability to search and write custom threat detection rules against these logs saves us from having to send them to a SIEM/Data Warehouse, normalize them, and build detections against them. Additionally, the hundreds or thousands of threat detection rules included in Wiz are overall very high quality and provide a huge degree of coverage on top of the dozens of custom company-specific rules we've created.
Wiz regularly releases useful new features and integrations and the level of support we have received has generally been top-tier. The detailed system activity log and audit logs also increase our confidence that we will be able to view any actions taken inside of our Wiz console - either from our own users or from Wiz.
Onboarding Wiz was a breeze and their documentation is excellent and covers the vast majority of questions that have come up during our usage of the product.
Wiz regularly releases useful new features and integrations and the level of support we have received has generally been top-tier. The detailed system activity log and audit logs also increase our confidence that we will be able to view any actions taken inside of our Wiz console - either from our own users or from Wiz.
Onboarding Wiz was a breeze and their documentation is excellent and covers the vast majority of questions that have come up during our usage of the product.
What do you dislike about the product?
To date, we haven't had any major issues using Wiz. Their usage licensing model means as you scale up your compute and data resources, you will necessarily increase your utilization (and therefore cost), but I appreciate all the tooling they include to help you both visualize, calculate, and fine tune your utilization.
What problems is the product solving and how is that benefiting you?
* Centralizing all of our security logs from cloud providers
* Providing coverage via Threat Detection Rules
* Helping us identify misconfigurations in our cloud platforms
* Helping us cut costs by identifying assets that are oversized or unused
* Integrating with third-party tooling (Google Workspace, Github, etc)
* Easily integrated with other tools
* Flexible and well documented API
* Providing coverage via Threat Detection Rules
* Helping us identify misconfigurations in our cloud platforms
* Helping us cut costs by identifying assets that are oversized or unused
* Integrating with third-party tooling (Google Workspace, Github, etc)
* Easily integrated with other tools
* Flexible and well documented API
The best cloud security tool so far
What do you like best about the product?
The comprehensive UI and extensive security features are really waht differentiates from other tools
What do you dislike about the product?
The Infrastructure as Code findings do not have a direct integration button with ITSM tools like Jira.
What problems is the product solving and how is that benefiting you?
Our exposure management in the cloud was not the best until we started using Wiz. It collects information about all the exposed assets and creates an attach path graph that details perfectly the possible impact of the exposure.
Wiz Review - Nearly 1 Year In
What do you like best about the product?
The data and presentation of it. This allows our team to enable the development and devops teams to follow along and move closer to self service with Security curating the path.
What do you dislike about the product?
The available auto-remediation list could be larger and it would be great if there was more on the prevention side (CDR), greater DSPM capability. We are looking at more told to go deeper here.
What problems is the product solving and how is that benefiting you?
More of a centralized security view related to the cloud. Enablement of cross team security efforts.
Helps us consolidate and manage information and risks, dividing them between VPCs and business units
What is our primary use case?
What is most valuable?
The most valuable feature of Wiz is that it keeps information up to date without needing to perform scans or schedule maintenance windows. It provides a fresh snapshot of our vulnerability metrics. It also helps us make decisions on improvements, maintenance, or updates for our systems. Regarding compliance and governance, Wiz streamlines our vulnerability management to meet specific needs effectively.
What needs improvement?
The reporting should be improved because until a few months ago, the reports were only in CSV format, which made it difficult to clean up. Wiz tried to improve the reporting process, but it's not as valuable as Tenable.
For how long have I used the solution?
I have experience of using Wiz for more than a year.
What do I think about the scalability of the solution?
Wiz was quite scalable and easy to manage initially. However, as the solution became more costly with our growth, it posed some challenges. We had to work on managing costs and scaling according to our needs, which required some effort, but we were able to find a balance in terms of pricing and performance.
How are customer service and support?
It is difficult to get in touch with them initially. We had to get in touch every for our queries related to AWS and GCP marketplaces. However, once you need to discuss numbers, they are very responsive.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have worked with Tenable and Qualys. Wiz stands out in deployment ease and resource consumption compared to Qualys or Tenable. Its simplified processes and snapshot features make it a preferred choice.
How was the initial setup?
The initial setup was easy. We need to key details, therefore setting up Wiz very easily. It’s easier than Tenable, which requires deploying infrastructure and handling the associated costs. Deploying Wiz took about one month due to our multi-cloud services, but the main cloud service took less than a week.
Wiz requires no maintenance since it is a SaaS, but if we need to deploy a new service or have any issues, the technical support is really helpful without additional costs. Once integrated, it is very easy to maintain.
What about the implementation team?
We took help from an external account manager and a technical account manager from Wiz. Our team consisted of three people: a DevOps engineer, a TechOps engineer, and the person responsible for the implementation.
What was our ROI?
Using Wiz has significantly reduced our costs compared to having three separate solutions. We estimate a cost reduction of around 35% to 50%, or even more, due to consolidating our security management into one platform. This operational impact has been one of the most significant benefits we've experienced with Wiz.
What's my experience with pricing, setup cost, and licensing?
Regarding pricing, it’s more than $100k because we have a very big infrastructure. Our environment supports around three thousand people, and we offer business-to-client financial services to around one million clients, so we rely heavily on Wiz.
What other advice do I have?
I'd recommend Wiz, especially if reporting improvements are made. I rate Wiz an episode ght out of ten primarily due to reporting challenges.
Great CSPM tool for getting an handle on cloud workloads
What do you like best about the product?
Graph search feature allows complex querying of cloud assets
What do you dislike about the product?
Support is a little slow
CI/CD Scans Vulnerabiity rankings do not align with findings within the system's "toxic combinations"
CI/CD Scans Vulnerabiity rankings do not align with findings within the system's "toxic combinations"
What problems is the product solving and how is that benefiting you?
Wiz is helping us to understand and monitor our cloud workloads.
Great Insights, Prioritization, and Interface
What do you like best about the product?
Allows for quick aggregation for what is most important to address. Support is always helpful when needed, which is rare since most things tend to just work and you get notifications when something changes in your cloud environment.
What do you dislike about the product?
Nothing about the product to dislike. What it does it does well. My only critique would be good if the product could use IaaS logs to suggest security best practices that are notoriously hard to achieve, like setting up AWS Security Group rules for implementing microsegmentation.
What problems is the product solving and how is that benefiting you?
It allows us to ensure that we maintain our security posture despite having to move quickly and pivot whenever the business needs us to. Even if that means migrating to a different IaaS provider. Wiz detects problems and allows us to address them quickly. Plus the provided context and directions the Wiz interface provides to remediate issues are usually spot on.
showing 81 - 90