Dazz Unified Remediation Platform

A testing team at my current company is starting with Wiz Code, but I personally am not using it. Wiz is part of the license that we have.

In my last company, we reduced vulnerabilities from one million to a few hundred. What we gained was the ability to focus on the important vulnerabilities.

The intelligence behind Wiz is what I appreciate the most. In security, it is very important to analyze all vulnerabilities or security findings with context. Most tools say that a high finding means you need to implement the fix immediately. However, Wiz differs because of the intelligence behind it. Analyzing a high finding in a server exposed to the internet is not the same as analyzing one in an isolated server without internet connection. Wiz provides that contextual understanding.

Wiz is effective, but if you want to adapt it to your organization, you need to know your organization very well and adapt most of the queries.

It is very useful as a way to know specific vulnerabilities or the security status of your instance.

Sometimes it is a little difficult to create specific queries to find data in your environment. I know Wiz is working on this, but the way to create queries could be improved.

I started using Wiz at the beginning of 2024. We had already used another CNAPP like Lacework, but after studying other tools like Sysdig or DataDog, we chose Wiz because it is very complete and understands everything about the CNAPP process.

Wiz is very stable. I did not receive any service downtime or outages. Since I have been using it, I have not been notified about any service being down. When the Copy-File vulnerability appeared, Wiz was the first provider that updated their database with this vulnerability without a CVE, but with a specific CVE, and we did not notice any service interruption.

Wiz is very easy to scale. The main concern is the cost, but the scalability itself is easy.

It is very easy to contact the technical support team. They usually do a lot of follow-ups or send messages as reminders if you forget to answer their message. The team is very professional.

I would rate customer service an eight. Sometimes the support process can be difficult to implement in a large company, and follow-up on tickets can be challenging. For example, if you have many related tickets, such as in my case with Wiz for Images, it is difficult to find a specific ticket for follow-up. The technical support person may only send one reminder and then close the ticket or put it on hold.

I previously used native cloud tools and Lacework.

The first deployment is very easy because you only need to connect with the landing zone in the case of AWS or Azure. However, the specific parts of Wiz, such as connectors, can be difficult. In the case of using a package or image with Wiz for Images, if you are not familiar with code or the DevOps process, it can be a little hard. Overall, the setup is easy.

Wiz pricing is very expensive. To be honest, I think it is a little expensive. In my last company, it cost around $200,000. It can be expensive because Wiz provides more features than other providers. They know that they are better than other providers, so they price accordingly.

I considered Lacework, which was purchased by Fortinet. As far as I know, Fortinet is using Lacework only for specific features. I also looked at Sysdig and DataDog. In my last position, I was in the position to decide on a specific tool to manage cloud security, so I was in contact with several vendors including Sysdig, DataDog, Lacework, and Wiz to choose a tool. DataDog is a tool that I analyzed but did not use.

Wiz is the best option because Wiz understood the concept of CNAPP in the cloud with CSPM, CWPP, and CIEM. It is a tool that covers every single point of CNAPP.

I have been working in cloud security since 2018, so close to ten years. Wiz does not require anything special. I would give Wiz a rating of nine overall. I do not want to give them a ten because you always have a little point to improve. In this case, it is a specific part of support or the query functionality. These are small points to improve, which is the reason I would give them a nine.

I utilize Wiz to understand the vulnerabilities, threats, and misconfigurations of the cloud environments throughout accounts, resources, tenants, and organizations. I monitor any cloud changes, permission changes, misconfigurations, configuration changes, and vulnerabilities that exist in the cloud environment. We use Wiz to manage our cloud security posture for all three cloud environments: AWS, Azure, and GCP, making it a holistic tool to examine cloud posture throughout your cloud environments in a single platform.

Wiz provides detailed insights on vulnerabilities that occur on specific endpoints, application endpoints, specific cloud accounts, or specific cloud resources. I can group all findings based on the cloud environment, account, resource, and nature of the vulnerability, grouping them into issues that provide insights, vulnerabilities, or threats within each cloud resource, account, subscription, or environment as a whole. Everything is mapped out in a clean graphical user interface, and AI agents such as Red Agent, Green Agent, and Blue Agent assist with attacking, defending, and governance. I can also view Wiz from a framework standpoint to ensure compliance throughout cloud environments, with an exhaustive list of frameworks from NIST CSF to ISO 27001 available in their compliance posture management.

We are using Wiz as a private cloud CSPM because we are a cloud-based organization, and we utilize it fully to cover all our cloud accounts and environments. We use all three major cloud providers—AWS, Azure, and GCP—with all our environments mapped out to Wiz.

Wiz, as our main cloud security posture management tool, has positively impacted our organization by helping us improve our controls, policies, and mitigate some of the more dangerous critical bugs found inside the cloud environments since integrating Wiz. This has led to an improved security posture and a compliance state we can proudly showcase to our auditors.

We have seen positive metrics and improvements since implementing Wiz. For instance, we started with over 2,000 critical vulnerabilities and reduced them to approximately 150, significantly improving our compliance posture, including our CSF framework compliance posture and ISO 27001, which we reached quicker using Wiz than we would have otherwise.

I really enjoy the attack surface feature and the grouping of issues and vulnerabilities, as it gives me a holistic overview of what is wrong with my environment and allows me to create actionable items from it.

The attack surface finding helps me identify shadow resources or applications dangling on the internet and identify the resources and teams behind them. This helps in creating automatic tickets for those teams and monitoring and rescanning those resources for better vulnerability management and security posture management.

Wiz offers many automations that help automate manual workflows. I enjoy the capabilities they continue adding to the tool to enhance its functionality. Green Agent's remediation feature is particularly valuable, providing remediations of findings or vulnerabilities without needing to research them externally.

Wiz can improve its AI integrations to reduce noise, as it currently produces excessive noise with insignificant vulnerabilities or informational findings that it sometimes portrays as critical bugs. Wiz also needs to enhance its backend engine to better understand the unique characteristics of each environment, although they are continuously improving to reflect these changes.

I have been using Wiz for the past three years, and it is a phenomenal tool to understand cloud security posture and manage that security posture through various dashboards, insight boards, sections within the tool itself, and AI-driven reviews and analysis of misconfigurations and findings.

Wiz's AI capabilities are strong, with the governance and capabilities of the AI, particularly Green Agent, helping examine the technical configurations of the systems and map them back to our selected frameworks, correlating findings and providing scores to improve upon. However, Wiz can enhance its effectiveness by providing actionable items based on frameworks and not solely a holistic approach.

Wiz's accuracy, when scaled from one to ten, would be a solid seven, especially concerning Red Agent; it sometimes produces false positives, but seventy percent of the time, it provides true positive proofs of concept along with effective remediation steps via Blue Agent and Green Agent, which could be rated a solid nine. Wiz could improve by providing specific compensating controls.

We purchased Wiz when it was a standalone application and company, before it was acquired by Google. My overall rating for Wiz is eight out of ten.

The main use case for which I use Wiz is managing a company's cloud security posture.

A concrete example of how I use Wiz in my day-to-day work for this purpose is defining custom controls, custom frameworks, and doing follow-up with the development teams to improve the security posture.

In these processes, I would like to add that the platform allows me to make use of several automations directly from it, which is quite useful.

I do consider AI-based security posture management important within my cloud security strategy because we need, at least, to keep up with offensive actors which seems unatainable without AI.

Wiz is deployed in my organization primarily for public clouds( AWS, Azure, GCP, and Oracle)

Wiz has had a positive impact on my organization by improving follow-up, process automation, and visibility into the state of cloud security.

Since I implemented Wiz, I've noticed a measurable change in that the follow-up time has been greatly shortened, since we have quite a few automations around Wiz.

Wiz has also allowed me to consolidate tools in my organization, and that consolidation allows us to centralize the security posture from a single tool, which is much simpler for us, without having to go into each of the different providers, and I think that's the main advantage of that part.

The best features that Wiz offers are the Security Graph, the coverage, and that everything works via API.

The coverage and the Security Graph have benefited my organization by being able to connect different information sources in a simple way, since we can see the full structure of an organization in cloud environments, and with the Security Graph we can create custom controls for the organization, which allows for a better security posture over time. Basically, it can be improved more easily.

Regarding Wiz's artificial intelligence capabilities, I think its governance and security are good, as they have recently deployed several specific dashboards for AI coverage, Shadow AI, and so on, which are very good.

I think Wiz could improve its identity component.

I have been using Wiz for three years.

In general, I would say that Wiz is a stable solution.

I would rate Wiz's scalability as very good, as we have been deploying different environments, different tools, and overall the product continues to work well, and we haven't had scalability problems.

We use Wiz's post-sales support services, and these services impact the team's efficiency positively since we have sessions with them every so often so they can tell us about new product features and go over any questions we have, so it's good. They've always been very positive when it comes to helping us and with any questions or problems we have, they are always willing to solve them.

I would rate Wiz's customer support as quite good, as they are always quite quick to respond and are always willing to help.

On a scale from one to ten, I would also rate customer support a nine.

Before implementing Wiz, we used Prisma Cloud, and I understand that the switch was more a matter of cost since I think Wiz was considerably cheaper and gave a bit more flexibility for what we needed at that time.

I have seen a return on investment with Wiz in terms of time savings, as I mentioned before, and I think the team's efficiency has improved when it comes to managing the cloud security posture.

My experience with Wiz's pricing, implementation costs, and licenses has been positive.

We did not evaluate other options before choosing Wiz since we switched from Prisma to Wiz directly.

I rate Wiz a nine on a scale from one to ten. I give Wiz a nine because, in general, I think it's a very complete product. There are a couple of things that could be improved, or at least I think they could be improved, but for now, any use case I've needed, I've been able to do it with Wiz.

My advice for someone thinking of using Wiz is to try it and start playing with the Security Graph, which is a very powerful tool.

Wiz is primarily used for cloud security monitoring and risk assessment. I use it to identify security vulnerabilities and misconfigurations and potential risks across cloud environments and to prioritize critical issues and improve overall security visibility.

In my day-to-day work, I use Wiz to review cloud security findings and identify misconfigurations and vulnerabilities and prioritize high-risk issues. For example, when a resource has excessive permissions or an exposed configuration, I review the finding and assess its potential impact and coordinate with the responsible team to address it. This helps improve cloud security and visibility and reduce risk.

Wiz also helps improve visibility across cloud environments by bringing security findings into one place.

Wiz has impacted our organization positively because it improves cloud security visibility by helping teams identify vulnerabilities and detect misconfigurations and prioritize critical risks. It supports more efficient security reviews, better collaboration between teams, and faster remediation of important issues. Overall, it helps strengthen our cloud security posture and manage risks more proactively.

Wiz has helped our team identify and prioritize security issues more effectively and efficiently, reducing manual effort in reviewing cloud risk. It improves visibility into vulnerabilities and misconfigurations, helping teams focus on critical findings and respond more effectively. I have not tracked specific metrics for time saved or incident reduction, but the main benefit has been more proactive risk management and improved security visibility.

Wiz helped consolidate cloud security findings into a centralized view, making it easier to identify and prioritize critical risks. This improved visibility across the cloud environment and helped teams focus on high-impact vulnerabilities and misconfigurations instead of reviewing findings across multiple tools separately.

Wiz has helped make security alerts more manageable by centralizing findings and prioritizing critical risks. However, I have not measured the exact reduction in alert fatigue over a specific period, so I cannot provide a reliable percentage. The main benefit is that teams can focus more effectively on high-priority issues.

The most valuable features of Wiz are its centralized cloud security visibility, risk prioritization, vulnerability detection, and misconfiguration identification. I find the ability to understand potential risks and prioritize critical issues especially useful as it helps teams focus on the most important security concerns and improve their overall cloud security posture.

Risk prioritization is a feature I rely on most because it helps identify critical vulnerabilities and misconfigurations that need immediate attention. It allows teams to focus on the highest impact issues first and improve the overall cloud security posture.

Wiz runtime sensor can provide additional visibility into active threats and activity.

Wiz can be improved by providing clearer remediation guidance, more actionable remediation recommendations, and better integration with existing security and ticketing tools. Simplifying dashboards and reducing false positives would help teams prioritize genuine threats more efficiently. Improved reporting and customization options would also make it easier to track security improvements over time.

Better prioritization of security alerts, more accurate risk scoring, and clearer step-by-step remediation guidance would make Wiz even more effective. Enhanced automation for routine security tasks and more flexible reporting would also help teams save time and manage cloud security risk more efficiently.

Wiz could further improve its automated remediation capabilities, provide more customizable security reports, and offer clearer explanations of risk scores. Better integration with existing workflows and fewer false-positive alerts would help teams resolve genuine security issues faster and manage cloud risks more efficiently.

I have been using Wiz for two years.

Wiz has maintained stability in my usage.

Post-sales support services can help resolve technical issues, clarify security findings, and improve troubleshooting efficiency. I have not directly measured its impact on my team's productivity, so I cannot quantify the improvement. However, the support provided has been good and adequate.

We did not use a previous different solution before Wiz.

Wiz has provided value by improving cloud security visibility, helping teams prioritize critical risks, and streamlining security reviews. These benefits can improve operational efficiency and support better risk management. However, I have not quantified the specific financial returns or cost savings, so I cannot provide verified return on investment metrics. That said, Wiz is useful and worth the return on investment.

Licensing is an important consideration for our organization, especially when securing multiple cloud environments. Setup requires configuring integrations, access permissions, and security monitoring. Clearer pricing options and simpler licensing would make budgeting the cost and management easier.

Before choosing Wiz, we evaluated other cloud security platforms such as Microsoft Defender for Cloud or Prisma Cloud. Key considerations included risk prioritization, cloud visibility, integration capabilities, and ease of use.

I rated Wiz better overall because it provides strong cloud security visibility, effective vulnerability detection, and useful risk prioritization. It helps teams identify misconfigurations, focus on critical security issues, and improve remediation workflows. Overall, it is a valuable platform for proactive cloud risk management and strengthening security posture.

Wiz's governance and security are valuable for maintaining a secure cloud environment. Strong access control, data protection, transparency, and responsible handling of AI-generated insights are important for protecting sensitive information. Overall, I value security-focused controls that help organizations use AI capabilities safely and confidently.

Regarding the accuracy and reliability of Wiz's output, the AI's capabilities can help improve the efficiency of security analysis by summarizing findings and providing remediation recommendations. The accuracy and reliability depend on the quality of the available data and context. Important findings should still be validated before taking action. Greater transparency and consistent context-aware recommendations would further strengthen trust in AI-generated outputs.

I can recommend Wiz for organizations looking to improve their cloud security and visibility and prioritize critical risks. Evaluate its integrations, pricing, and compatibilities with your cloud environment before adopting it. Ensure your team has a clear process for investigating and remediating security findings. I have rated this product a 10.

We are planning to introduce Wiz into our CI/CD, scanning the Docker image whenever it gets built, so if there is any vulnerability, we can refer to the Wiz report and resolve it before pushing the code.

The cloud security democratization aspect of Wiz is crucial, as our company offers various services and must ensure data security and product quality while managing threats from older dependencies or JARs.

The automated scanning stands out for me because when our security team raises a ticket, the solutions provided in the Wiz report help us debug those issues, and I rely 100% on the Wiz solutions.

Wiz has positively impacted our organization by solving many issues, such as ensuring we do not have vulnerable code in our production environment, protecting our customer data, and helping us maintain system security from potential threats.

I notice that whenever the scans are completed, we consistently upgrade our system, and Wiz scans for any unused infrastructure that we are not using or maintaining, pointing out vulnerable files that can be upgraded or deleted.

Wiz does allow us to consolidate tools, providing abundant infrastructure information before billing is affected and recommending solutions for any public-facing vulnerabilities, which enables us to rely on Wiz to address critical infrastructure issues.

I feel that Wiz has reduced alert fatigue in our organization by approximately 70%.

I think speed is important; Wiz waits for approval before suggesting a new vulnerability solution, so a faster cycle would help developers prepare before an attack occurs.

The accuracy and reliability of Wiz's output are quite good, and the AI helps clarify any doubts I have regarding the reports.

I advise others looking into using Wiz to rely on it smartly and trust the solutions it provides.

I rate this review as 9 out of 10.

Wiz is being tested to compare against Checkmarx, examining scanning capabilities, native visibility, ease of deployment, and code-level analysis. The proof of concept has completed, and we had interaction with the user interface, gaining the ability to use some of the features and functionality of Wiz. The scanning process was very easy, with a single pane of glass making it simple to move from one feature to another. There is significant customization involved, allowing for bespoke configuration to meet specific requirements. Wiz provided many advantages, and the proof of concept was very impressive. The interface was simple to use and quick to become familiar with.

We were able to examine risks and vulnerabilities very easily, which was the main focus of the initiative—to identify exactly where the vulnerabilities, risks, and threats were located and to detect and identify those immediately within the framework provided. Multi-cloud risk mapping proved very useful because we could see everything with no hidden elements. Everything was visible and transparent. In terms of prioritization, we could identify which specific area of the cloud or container contained vulnerabilities. When critical issues appeared, we could develop metrics to understand where specific problems lay. If a certain area had multiple critical vulnerabilities, we looked deeper into that area to find underlying causes. There was immediate information available, as well as information that could be gleaned after conducting root cause analysis. Trends and trend analysis have improved, helping us build a clearer picture of what is happening, where it is happening, and why. Robust static application security testing (SAST) and SCA analysis at the code level proved very useful. Catching vulnerabilities early was a key highlight and takeaway from the proof of concept.

The best feature Wiz offers is the ability to identify different threats, weaknesses, and vulnerabilities, with vulnerabilities being the main focus because that is what we have to communicate to our coders and developers. We were able to see what specific vulnerabilities contained in terms of root cause analysis, such as whether libraries needed updating, whether certain CVEs were related to those vulnerabilities, and how common those vulnerabilities were, including whether patches or fixes were available. Significant information was available that could help remediate numerous issues. Vulnerabilities identification and detection were very important; we were immediately able to see through drilling down exactly what was available in terms of remediation, whether it was possible immediately or what could be done afterward.

In terms of posture management, it was fantastic because we could see how risks were mapped across multi-cloud infrastructure seamlessly. The threat detection algorithms and mapping prioritized vulnerabilities based on actual exposure, allowing us to see critical, high, medium, or low priorities instantly. The deployment was also very easy.

Wiz has positively impacted our organization with improved remediation speed and efficiencies in terms of time saved, as well as reducing false positives. We are currently conducting deep code scanning alongside posture management, and we have seen improvements and efficiencies in both areas. Final metrics have not been established, and I am certain that will be completed in October once analysis is finished. However, the initial findings and recommendations are very positive, indicating benefits in time saved and efficiency, as well as economies of scale in performing tasks more easily and quickly while eradicating false positives and achieving a clearer picture of real vulnerabilities.

Wiz has met my expectations in terms of accuracy and reliability of output, with the co-pilot functionality being very good. The assistant services from AI exceeded what I had anticipated. Although the full range has not been tested, my experiences, along with my colleagues', have been very impressive regarding the outputs generated by AI.

While Checkmarx may perform better in some deep code scanning aspects, Wiz is considerably easier to use, has a better user interface, and offers a more compelling argument for its use. It is more robust and stable, making these positive points quite clear. The only slight negative is its scanning capability compared to Checkmarx, but it is still very good. Additional comments regarding needed improvements around scanning capabilities or any other area where Wiz could catch up to Checkmarx are not necessary.

Wiz has been used for a proof of concept over the course of a few weeks. A decision regarding adoption will be made by our company based on the findings and recommendations from the participants in the proof of concept initiative.

Wiz is stable based on proof of concept experience, and it is certainly much more stable than Checkmarx.

I am very impressed with Wiz's scalability. We began with 50 licenses and quickly increased that number to 200. It was efficient in scaling up. While we anticipate needing in excess of 200 licenses moving forward, we are confident Wiz can handle that demand.

Customer support receives a rating of 10 because we had a few initial questions, and they responded quickly and professionally, resolving all our issues regarding identity and access management in a short period.

The main solution currently in use is Checkmarx. We considered switching because Checkmarx experienced several outages and failures in service delivery, prompting us to explore other options in the marketplace.

During the proof of concept, there was minimal interaction with other applications. There was a link to Jira and Confluence for ticket creation, but since it was a proof of concept, much of the information was dummy data. Wiz was used primarily in isolation to see how the product would function on its own, without integration with other products.

Post-sale support services were not used during the proof of concept. The next step will be to collect all findings and make recommendations to senior management, who will decide whether to implement Wiz within the company.

A return on investment has not been technically realized yet, but efficiencies have been achieved in terms of fewer false positives and reduced analyst time on resolving vulnerabilities. These metrics will become clearer in October after assessing how Wiz performed against Checkmarx. The initial findings are encouraging, and we are optimistic about future assessments.

No involvement occurred with pricing, setup cost, and licensing for Wiz since it was a free proof of concept. Approximately 200 licenses were provided for the initiative, but pricing moving forward is unknown. It is expected to be more expensive than Checkmarx; however, the overall feeling is that Wiz is the more stable and user-friendly product, strong with features and functionality, potentially favoring the decision to move forward.

The recommendations provided by Wiz were valuable. This functionality is not available with Checkmarx currently. The concept of using the co-pilot and large language models, along with agentic AI, is refreshing and potentially very beneficial for future operations, particularly in troubleshooting and root cause analysis.

Multi-cloud risk mapping was very useful because we could see everything with no hidden elements. Everything was visible and transparent. In terms of prioritization, we could identify which specific area of the cloud or container contained vulnerabilities. When critical issues appeared, we could develop metrics to understand where specific problems lay. If a certain area had multiple critical vulnerabilities, we looked deeper into that area to find underlying causes. Significant immediate information was available, as well as information that could be gleaned after conducting root cause analysis. Trends and trend analysis have improved, helping us build a clearer picture of what is happening, where it is happening, and why. Robust static application security testing (SAST) and SCA analysis at the code level proved very useful. Catching vulnerabilities early was a key highlight and takeaway from the proof of concept.

The recommendations provided by Wiz were valuable. This functionality is not available with Checkmarx currently. The concept of using the co-pilot and large language models, along with agentic AI, is refreshing and potentially very beneficial for future operations, particularly in troubleshooting and root cause analysis.

My overall rating for this review is 9.

I have been using Wiz for approximately three to four weeks, and I find that Wiz is an amazing cloud security platform that helps the organization identify, prioritize, and remediate security issues across cloud environments such as AWS, Azure, and various types of clouds, Kubernetes, and containers.

My main use cases for Wiz include cloud security posture management, or CSPM, because admins continuously monitor the cloud environment for misconfigurations and if any misconfiguration is found, Wiz will correct them. Additionally, there is the Vulnerability Management feature because it prioritizes vulnerabilities based on real-world risks and exploitability, also identifying vulnerabilities that could impact real-world risk within organizations. The Identity security feature also detects excessive permissions and identifies related risk, along with Kubernetes security which scans the Kubernetes clusters and workloads. These are my use cases of Wiz in my role.

We use Wiz in a cloud risk assessment because we scan client cloud environments to identify exposed resources and misconfigurations, generate security assessment reports, and perform vulnerability management and compliance audits which validate adherence to industry frameworks and produce audit-related reports for customers. This eases their workload, and it is also used for incident response to investigate attack paths, identify compromised resources, and reduce investigation time with centralized visibility. These are my use cases in my work.

The best feature of Wiz is its multi-cloud support which encompasses AWS, Microsoft Azure, Google Cloud Platform, and Kubernetes. This multi-cloud support is one of the main features that stands out, along with path analysis that matches how attackers could navigate through the environment.

Wiz has impacted our organization very positively because it includes various advanced features such as compliance audits, continuous security monitoring, and vulnerability management, along with cloud assistance and DevSecOps integration. All these features empower Wiz, significantly aiding our organization's growth.

I have seen major changes since implementing Wiz because it greatly enhances visibility into our cloud infrastructure; the onboarding became simpler and the dashboard provides clear insights into vulnerabilities, misconfigurations, and attack paths, contributing positively to our organization's security and growth.

Wiz provides governance as it implements all necessary policies correctly, validating compliance with industry frameworks rather than just standard frameworks. It adheres to frameworks created by the CB or RBAC which gets validated here, providing Audit Ready Reports for customers; this is an excellent point for both customers and co-owners.

The accuracy and reliability of Wiz are impressive; all the inputs fit perfectly with no extra adjustments needed. Reliability exists in various features, especially when creating policies, allowing us to execute incident response tasks effectively; hence, accuracy and reliability are strong components of Wiz.

Wiz's Runtime Sensor integrates seamlessly with DevSecOps, providing CI/CD pipelines and integrating with various tools and use cases, helping to effectively identify actively running threats, making it a strong solution compared to previous ones.

Wiz has great scalability; I find it one of its strong features, helping organizations grow due to its capabilities.

I believe a little more documentation could help users follow step by step. That is the extent of the improvements needed.

I feel there is a bit of noise in the initial setup and quality cleaning that may take time in larger environments. Additionally, advanced features might require security expertise; hence, improvements in documentation would be beneficial. Otherwise, all aspects are very good and easy to use.

I have been using Wiz for approximately three to four weeks.

Customer support is good; whenever we need assistance, the business support team is readily available to help us. It is reassuring to know we can rely on good customer support.

All of the ways I use Wiz are amazing, as it can be used anywhere it is suitable, and it is especially great for large organizations.

I find myself relying most on multi-cloud support because it is very useful, especially since we do not have a single cloud but rather use different clouds such as AWS, Azure, and Google Cloud Platform along with Kubernetes. Wiz allows us to coordinate efficiently across these different teams and groups, which is why our organization relies heavily on this feature.

Wiz does not allow for tool consolidation in our environment; even though it has features for that, there is not a need to consolidate different tools because it functions very well with existing tools in our organization.

We have reduced alert fatigue in our organization due to Wiz's accuracy in managing alerts. I can approximate a reduction of approximately three to four hours in alert handling since Wiz provides alerts with minimal latency between the alerts and real-time notifications.

I advise others to choose Wiz because it stands out as an awesome tool that offers various benefits to organizations, and trying Wiz will undoubtedly benefit you. I have given this product a review rating of 9.5 out of 10.

Our primary use case for Wiz is Cloud Security Posture Management and Cloud Native Application Protection.

One of our clients was preparing for a security assessment, so Wiz identified an internet-facing EC2 instance with excessive IAM permissions and outdated software containing critical vulnerabilities. Instead of reviewing multiple security tools separately, Wiz correlated the exposure, vulnerability, and privilege information into a single risk finding. That allowed us to remediate the issue quickly before the audit.

We use Wiz daily to monitor cloud resources, investigate security findings, and prioritize remediation based on actual business risk instead of simply focusing on CVE severity.

The best features offered by Wiz are the Attack Path Analysis and the risk prioritization and agentless cloud security scanning.

The Security Graph and Attack Path Analysis have been the most valuable in our organization because rather than generating thousands of alerts, Wiz helps us to understand which findings represent real risk and should be addressed first.

Wiz has improved our visibility into cloud risk, reduced manual security assessments, and helped us prioritize remediation efforts more effectively.

It reduced the time spent investigating cloud security findings by around 40% and also accelerates the process of identification of critical cloud risk.

The findings from Wiz are generally accurate and well prioritized, and I appreciate that Wiz focuses on contextual risk rather than overwhelming us with every possible vulnerability.

More customizable executive dashboards can be created, and better reporting for non-technical stakeholders can also be improved in Wiz platform.

Overall, it is a mature platform and most enhancements I would like are around reporting automation and simplifying executive level reporting.

I have been using Wiz for approximately one and a half years.

Our companies are currently processing terabytes of data, and Wiz is very stable.

Wiz is very scalable, so there is no problem in that regard.

We have used the support services after purchase, and they are very good. Their teams are very knowledgeable and very supportive, and their team can handle all issues.

Customer support is very good, and they are very knowledgeable and always ready to help you out from any difficult situation or if you face any complexity in Wiz platform.

Before using Wiz, we relied on multiple tools for vulnerability scanning, cloud configuration checks, and cloud native security services. Each tool generated its own findings, so correlating risks required manual effort, but with Wiz, we get a unified view of combined vulnerabilities, misconfigurations, exposed assets, IAM permissions, and runtime context all in a single platform.

Previously, we were using multiple tools for cloud security, cloud native application management, AWS monitoring, and similar tasks, but we wanted a single platform that encompasses all these capabilities, so we switched to Wiz.

Setup is very easy, and if you feel any difficulty while setting up anything, their support team is ready to help you out with that.

We have used the support services after purchase, and they are very good. Their teams are very knowledgeable and very supportive, and their team can handle all issues.

Customer support is very good, and they are very knowledgeable and always ready to help you out from any difficult situation or if you face any complexity in Wiz platform.

We have seen the ROI from this because it reduced our engineer's time by 50% and also saved time on addressing false positives, allowing us to be very confident in our posture.

The pricing is a bit higher than the market rate, but the value it provides is more valuable than the pricing. Setup is very easy, and if you feel any difficulty while setting up anything, their support team is ready to help you out with that. We are running it on a monthly license basis, so we have not purchased the enterprise version.

We have not evaluated any other option.

AI security posture management in the cloud is very important because risks are increasing, and to reduce the manual effort of every department, AI agents can be deployed in cloud security posture to directly find AI security as connected within the organization.

Wiz has reduced the alert fatigue in our organization, and if you are fully migrated with Wiz, within a week you can see the difference.

Before Wiz, we used Falcon as a runtime sensor, and after using Wiz, we are now 100% sure that Wiz's Runtime Sensor is very accurate and helped us to identify active threats more effectively compared to our previous solution.

Teams currently using multiple platforms for security assessments, compliance monitoring, cloud native application posture management, and cloud security posture management can directly switch to Wiz without any hassle, and it will be a very valuable decision for their teams.

Wiz is very scalable, so there is no problem in that regard.

Wiz is a very mature platform that we use daily as an end-to-end cloud management tool. It is great as it reduces your company's security risk and actively monitors your entire cloud infrastructure, so you do not need to worry about any cloud risks affecting your organization. I would rate this product a 9 out of 10.