Wiz Go Bundle
Centralized security monitoring has reduced alert fatigue and improved remediation speed
What is our primary use case?
Wiz's main use case is to assess the security posture of our infrastructure, discovering vulnerabilities and detecting any threats or attacks.
We discovered misconfigurations in our infrastructure related to IAM roles and bucket access, which we fixed. We also discovered numerous vulnerabilities in our application code. This is how we use Wiz.
We recently started using Wiz code, so we do not have an assessment of the impact yet.
How has it helped my organization?
We have been able to discover more vulnerabilities and issues in our organization that we did not know about before using Wiz.
I believe we have improved our remediation time by 30 to 40% since we have been using Wiz. Now that everything is consolidated within one place, it is much easier to prioritize issues. Wiz also has a compliance frameworks feature, which helps us assess the standing of our organization and infrastructure from a compliance perspective.
The consolidation of different tools helps with centralization, which improves our processes and makes the job easier. I cannot provide certain numbers on this, but it certainly helps.
I would say 30 to 40% is a safe number to indicate that it has reduced alert fatigue, and we now see actual issues.
It has improved significantly because before this, we were using a more scattered set of tools for different purposes. With Wiz and its correlation between different types of sensors, along with the understanding of our infrastructure and the context of the code, it makes it much easier.
What is most valuable?
The discovery capabilities of Wiz are one of the best features, along with the way it correlates everything across our organization.
The way Wiz can correlate the entire CI/CD pipeline of any infrastructure stands out for me compared to other tools I have used. Wiz has access to GitHub, so it can understand the code and business logic there, which is then converted to an image. It also has features for image scanning. Finally, it scans the infrastructure on which the code is deployed. This covers the whole application or software development lifecycle, which makes it a very interesting tool.
What needs improvement?
Wiz could use some more clarity on the limits and budgets in their license offerings.
There could be more clarity in the licensing and costs of Wiz.
For how long have I used the solution?
I have used Wiz for a total of a year and a half to two years in my career.
What do I think about the stability of the solution?
I have experienced stability issues with Wiz.
What do I think about the scalability of the solution?
Wiz is pretty scalable.
How are customer service and support?
Customer support could use some improvement and could be more responsive.
I would rate customer support on a scale of 1 to 10 as seven.
Which solution did I use previously and why did I switch?
We used a bunch of open-source solutions before, along with GitHub Advanced Security.
What was our ROI?
I believe the cost was equalized because we replaced some other tools with Wiz. There is a good return on investment on the efficiency part, but not that much on the cost part.
What's my experience with pricing, setup cost, and licensing?
The setup cost was good.
Which other solutions did I evaluate?
Before choosing Wiz, I evaluated Aikido as another option.
What other advice do I have?
I rate Wiz overall as nine on a scale of 1 to 10.
I have not done much research on Wiz's AI capabilities, but I believe that Wiz is a well-developed company, so they are taking care of this. I do have a basic understanding of the security certifications and standards they have, so I trust Wiz on the AI aspect.
Wiz is mostly dependable and accurate, aside from a couple of cases.
I would recommend going for Wiz.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Centralized cloud posture management has improved automation, visibility and follow-up
What is our primary use case?
The main use case for which I use Wiz is managing a company's cloud security posture.
A concrete example of how I use Wiz in my day-to-day work for this purpose is defining custom controls, custom frameworks, and doing follow-up with the development teams to improve the security posture.
In these processes, I would like to add that the platform allows me to make use of several automations directly from it, which is quite useful.
I do consider AI-based security posture management important within my cloud security strategy because we need, at least, to keep up with offensive actors which seems unatainable without AI.
Wiz is deployed in my organization primarily for public clouds( AWS, Azure, GCP, and Oracle)
How has it helped my organization?
Wiz has had a positive impact on my organization by improving follow-up, process automation, and visibility into the state of cloud security.
Since I implemented Wiz, I've noticed a measurable change in that the follow-up time has been greatly shortened, since we have quite a few automations around Wiz.
Wiz has also allowed me to consolidate tools in my organization, and that consolidation allows us to centralize the security posture from a single tool, which is much simpler for us, without having to go into each of the different providers, and I think that's the main advantage of that part.
What is most valuable?
The best features that Wiz offers are the Security Graph, the coverage, and that everything works via API.
The coverage and the Security Graph have benefited my organization by being able to connect different information sources in a simple way, since we can see the full structure of an organization in cloud environments, and with the Security Graph we can create custom controls for the organization, which allows for a better security posture over time. Basically, it can be improved more easily.
Regarding Wiz's artificial intelligence capabilities, I think its governance and security are good, as they have recently deployed several specific dashboards for AI coverage, Shadow AI, and so on, which are very good.
What needs improvement?
I think Wiz could improve its identity component.
For how long have I used the solution?
I have been using Wiz for three years.
What do I think about the stability of the solution?
In general, I would say that Wiz is a stable solution.
What do I think about the scalability of the solution?
I would rate Wiz's scalability as very good, as we have been deploying different environments, different tools, and overall the product continues to work well, and we haven't had scalability problems.
How are customer service and support?
We use Wiz's post-sales support services, and these services impact the team's efficiency positively since we have sessions with them every so often so they can tell us about new product features and go over any questions we have, so it's good. They've always been very positive when it comes to helping us and with any questions or problems we have, they are always willing to solve them.
I would rate Wiz's customer support as quite good, as they are always quite quick to respond and are always willing to help.
On a scale from one to ten, I would also rate customer support a nine.
Which solution did I use previously and why did I switch?
Before implementing Wiz, we used Prisma Cloud, and I understand that the switch was more a matter of cost since I think Wiz was considerably cheaper and gave a bit more flexibility for what we needed at that time.
What was our ROI?
I have seen a return on investment with Wiz in terms of time savings, as I mentioned before, and I think the team's efficiency has improved when it comes to managing the cloud security posture.
What's my experience with pricing, setup cost, and licensing?
My experience with Wiz's pricing, implementation costs, and licenses has been positive.
Which other solutions did I evaluate?
We did not evaluate other options before choosing Wiz since we switched from Prisma to Wiz directly.
What other advice do I have?
I rate Wiz a nine on a scale from one to ten. I give Wiz a nine because, in general, I think it's a very complete product. There are a couple of things that could be improved, or at least I think they could be improved, but for now, any use case I've needed, I've been able to do it with Wiz.
My advice for someone thinking of using Wiz is to try it and start playing with the Security Graph, which is a very powerful tool.
Great Cloud Visibility and Faster Remediation, but Busy Dashboards and Half-Baked Workflows
Comprehensive Cloud Visibility and Risk Prioritization in One Powerful Platform
The intuitive interface, powerful attack path analysis, and contextual risk prioritization help our team focus on the most critical exposures and vulnerabilities while continuously improving our cloud security posture.
Another major advantage is the excellent support and close collaboration with our TAM, Ben. He is extremely professional, knowledgeable, and always available whenever we need assistance. His proactive approach, responsiveness, and dedication make a real difference in our experience with Wiz and help us maximize the value we get from the platform.
Additionally, some advanced features and configurations could be simplified to make day-to-day operations even more efficient.
That said, Wiz continues to evolve and improve, and the strong support from their team helps us address any challenges quickly.
Modern, Forward-Thinking Cloud Security Platform with Standout Support
The interface makes it easy to explore our cloud environment and understand where we need to focus. The intelligence behind the platform helps connect security findings into a clearer picture of risk, making prioritisation more practical. Its integrations bring cloud security information together, helping streamline our workflow and giving us broader visibility.
The value goes beyond individual features: having these capabilities in one platform helps us get more from the time we invest in cloud security.
Support is another standout. Our Technical Account Manager, Cameron O'Brein , is fully committed to helping us get the most from Wiz. His dedication makes the experience feel like a partnership and gives us confidence as we adopt more of the platform’s capabilities.
Intuitive, Team-Friendly Tool with Great Integrations and AI Agents
Engaging UI, Rich Integrations, Proactive TAM Support and Vital AI Agent Security Features
Centralized risk insights have improved cloud visibility and prioritize critical vulnerabilities
What is our primary use case?
Wiz is primarily used for cloud security monitoring and risk assessment. I use it to identify security vulnerabilities and misconfigurations and potential risks across cloud environments and to prioritize critical issues and improve overall security visibility.
In my day-to-day work, I use Wiz to review cloud security findings and identify misconfigurations and vulnerabilities and prioritize high-risk issues. For example, when a resource has excessive permissions or an exposed configuration, I review the finding and assess its potential impact and coordinate with the responsible team to address it. This helps improve cloud security and visibility and reduce risk.
Wiz also helps improve visibility across cloud environments by bringing security findings into one place.
How has it helped my organization?
Wiz has impacted our organization positively because it improves cloud security visibility by helping teams identify vulnerabilities and detect misconfigurations and prioritize critical risks. It supports more efficient security reviews, better collaboration between teams, and faster remediation of important issues. Overall, it helps strengthen our cloud security posture and manage risks more proactively.
Wiz has helped our team identify and prioritize security issues more effectively and efficiently, reducing manual effort in reviewing cloud risk. It improves visibility into vulnerabilities and misconfigurations, helping teams focus on critical findings and respond more effectively. I have not tracked specific metrics for time saved or incident reduction, but the main benefit has been more proactive risk management and improved security visibility.
Wiz helped consolidate cloud security findings into a centralized view, making it easier to identify and prioritize critical risks. This improved visibility across the cloud environment and helped teams focus on high-impact vulnerabilities and misconfigurations instead of reviewing findings across multiple tools separately.
Wiz has helped make security alerts more manageable by centralizing findings and prioritizing critical risks. However, I have not measured the exact reduction in alert fatigue over a specific period, so I cannot provide a reliable percentage. The main benefit is that teams can focus more effectively on high-priority issues.
What is most valuable?
The most valuable features of Wiz are its centralized cloud security visibility, risk prioritization, vulnerability detection, and misconfiguration identification. I find the ability to understand potential risks and prioritize critical issues especially useful as it helps teams focus on the most important security concerns and improve their overall cloud security posture.
Risk prioritization is a feature I rely on most because it helps identify critical vulnerabilities and misconfigurations that need immediate attention. It allows teams to focus on the highest impact issues first and improve the overall cloud security posture.
Wiz runtime sensor can provide additional visibility into active threats and activity.
What needs improvement?
Wiz can be improved by providing clearer remediation guidance, more actionable remediation recommendations, and better integration with existing security and ticketing tools. Simplifying dashboards and reducing false positives would help teams prioritize genuine threats more efficiently. Improved reporting and customization options would also make it easier to track security improvements over time.
Better prioritization of security alerts, more accurate risk scoring, and clearer step-by-step remediation guidance would make Wiz even more effective. Enhanced automation for routine security tasks and more flexible reporting would also help teams save time and manage cloud security risk more efficiently.
Wiz could further improve its automated remediation capabilities, provide more customizable security reports, and offer clearer explanations of risk scores. Better integration with existing workflows and fewer false-positive alerts would help teams resolve genuine security issues faster and manage cloud risks more efficiently.
For how long have I used the solution?
I have been using Wiz for two years.
What do I think about the stability of the solution?
Wiz has maintained stability in my usage.
How are customer service and support?
Post-sales support services can help resolve technical issues, clarify security findings, and improve troubleshooting efficiency. I have not directly measured its impact on my team's productivity, so I cannot quantify the improvement. However, the support provided has been good and adequate.
Which solution did I use previously and why did I switch?
We did not use a previous different solution before Wiz.
What was our ROI?
Wiz has provided value by improving cloud security visibility, helping teams prioritize critical risks, and streamlining security reviews. These benefits can improve operational efficiency and support better risk management. However, I have not quantified the specific financial returns or cost savings, so I cannot provide verified return on investment metrics. That said, Wiz is useful and worth the return on investment.
What's my experience with pricing, setup cost, and licensing?
Licensing is an important consideration for our organization, especially when securing multiple cloud environments. Setup requires configuring integrations, access permissions, and security monitoring. Clearer pricing options and simpler licensing would make budgeting the cost and management easier.
Which other solutions did I evaluate?
Before choosing Wiz, we evaluated other cloud security platforms such as Microsoft Defender for Cloud or Prisma Cloud. Key considerations included risk prioritization, cloud visibility, integration capabilities, and ease of use.
What other advice do I have?
I rated Wiz better overall because it provides strong cloud security visibility, effective vulnerability detection, and useful risk prioritization. It helps teams identify misconfigurations, focus on critical security issues, and improve remediation workflows. Overall, it is a valuable platform for proactive cloud risk management and strengthening security posture.
Wiz's governance and security are valuable for maintaining a secure cloud environment. Strong access control, data protection, transparency, and responsible handling of AI-generated insights are important for protecting sensitive information. Overall, I value security-focused controls that help organizations use AI capabilities safely and confidently.
Regarding the accuracy and reliability of Wiz's output, the AI's capabilities can help improve the efficiency of security analysis by summarizing findings and providing remediation recommendations. The accuracy and reliability depend on the quality of the available data and context. Important findings should still be validated before taking action. Greater transparency and consistent context-aware recommendations would further strengthen trust in AI-generated outputs.
I can recommend Wiz for organizations looking to improve their cloud security and visibility and prioritize critical risks. Evaluate its integrations, pricing, and compatibilities with your cloud environment before adopting it. Ensure your team has a clear process for investigating and remediating security findings. I have rated this product a 10.
Automated scanning has safeguarded our pipelines and continuously improves cloud security
What is our primary use case?
We are planning to introduce Wiz into our CI/CD, scanning the Docker image whenever it gets built, so if there is any vulnerability, we can refer to the Wiz report and resolve it before pushing the code.
The cloud security democratization aspect of Wiz is crucial, as our company offers various services and must ensure data security and product quality while managing threats from older dependencies or JARs.
What is most valuable?
The automated scanning stands out for me because when our security team raises a ticket, the solutions provided in the Wiz report help us debug those issues, and I rely 100% on the Wiz solutions.
Wiz has positively impacted our organization by solving many issues, such as ensuring we do not have vulnerable code in our production environment, protecting our customer data, and helping us maintain system security from potential threats.
I notice that whenever the scans are completed, we consistently upgrade our system, and Wiz scans for any unused infrastructure that we are not using or maintaining, pointing out vulnerable files that can be upgraded or deleted.
Wiz does allow us to consolidate tools, providing abundant infrastructure information before billing is affected and recommending solutions for any public-facing vulnerabilities, which enables us to rely on Wiz to address critical infrastructure issues.
I feel that Wiz has reduced alert fatigue in our organization by approximately 70%.
What needs improvement?
I think speed is important; Wiz waits for approval before suggesting a new vulnerability solution, so a faster cycle would help developers prepare before an attack occurs.
For how long have I used the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
Which solution did I use previously and why did I switch?
Which other solutions did I evaluate?
What other advice do I have?
The accuracy and reliability of Wiz's output are quite good, and the AI helps clarify any doubts I have regarding the reports.
I advise others looking into using Wiz to rely on it smartly and trust the solutions it provides.
I rate this review as 9 out of 10.
Centralized cloud risk visibility has transformed how our team prioritizes and remediates issues
What is our primary use case?
I have been using Wiz for around six months. My main use case for Wiz is cloud security visibility and risk management, as I use it to identify misconfigurations, vulnerabilities, and potentially security risks across a cloud environment. Having this information in one place makes it easier for the security team to prioritize issues and focus on the risks that need attention first.
An example of how my team uses Wiz for risk management or visibility is identifying a cloud resource with a security misconfiguration and prioritizing it based on the associated risk. Instead of manually checking every resource, the team can quickly see the issue, understand its potential impact, and route it to the right team for remediation, making the review process much more efficient.
I also use Wiz as a central point for getting an overall view of the cloud security posture. It helps us bring different security findings together, prioritize the important risks, and give us a clear picture of where attention is needed. The centralized visibility is probably the biggest benefit for all of us.
Wiz is primarily used in our public cloud environment, having integrated with a cloud account so the team can get centralized visibility into configurations, vulnerabilities, and security risks across the environment without managing separate tools for each account.
Wiz has helped us consolidate some of our cloud security workflows into a single platform, making it easier to prioritize critical risks because we can see the related findings and context together instead of switching between multiple tools. It reduces the noise and helps the team focus on issues that have the greatest potential impact.
The runtime sensor has improved our visibility into active threats by providing more context around what is happening in the environment, making it easier to distinguish active threats from lower findings and focus the team's attention on threats that require immediate investigation compared to previous solutions.
What is most valuable?
The best features Wiz offers include centralized cloud visibility, risk prioritization, and the identification of misconfigurations and vulnerabilities. I also appreciate how Wiz connects different findings and provides context around the potential impact, making it easier to focus on the issues that actually matter instead of treating every alert the same way.
The feature that has made the biggest difference for our team is centralized cloud visibility, as it gives us a much clearer view of our overall security posture and helps us quickly identify which sources have the highest priority risks. This saves time compared to manually referring to different cloud environments and security findings separately.
I appreciate that the features work together rather than operating as completely separate tools, as the combination of visibility, risk context, and prioritization makes it easier for the team to understand what needs attention first. It keeps the security workflow relatively simple while still providing a good level of detail.
Overall, Wiz has a positive impact on our organization by improving our visibility into the cloud environment and making it easier to identify and prioritize security risks. The centralized view has also helped the team spend less time manually viewing findings and focus more on addressing the issues that have the greatest potential impact.
What needs improvement?
Wiz is already quite strong, but the platform could be made even easier for new users with more guided workflows and simpler explanations of some of the more advanced findings. I would also like to see further improvements in reporting and customization so the team can tailor dashboards and reports more closely to their specific needs.
One area I would like to see improved is the user experience around complex findings, as having more contextual guidance on why an issue is important and the recommended remediation steps would make it easier for newer team members to act on findings. More flexible reporting and dashboard options would also be useful.
What do I think about the stability of the solution?
Overall, I have found Wiz to be stable and reliable in day-to-day use, consistently providing visibility across our cloud environment without experiencing major stability issues. The platform has been dependable for monitoring security posture and keeping track of risks over time.
What do I think about the scalability of the solution?
I rate Wiz's scalability quite positively, as it works well as the cloud environment grows and makes it possible to maintain visibility across multiple accounts and resources from a centralized platform, making it easier for the security team to scale monitoring and risk management without significantly increasing the manual effort.
How are customer service and support?
Overall, I have had a positive experience with Wiz customer support, as the team has been responsive when I needed help with configuration or understanding specific findings. Their guidance has helped me resolve questions faster, although the response time on more complex issues could sometimes be improved.
Which solution did I use previously and why did I switch?
I previously used CrowdStrike as a cloud security solution, but I was not finding it working according to my needs, so I needed to switch. I chose Wiz, which has been more efficient and has been working very well.
How was the initial setup?
My experience with pricing, setup cost, and licensing for Wiz has been fairly straightforward, as the setup was relatively smooth once the cloud environment and integrations were configured. The licensing model was easy for me to understand, with the overall cost feeling reasonable considering the visibility and security coverage Wiz provides across the cloud environments.
What was our ROI?
While I have not calculated a formal ROI with specific financial figures, the overall impact of Wiz has been positive, as it saves time by bringing cloud security findings and context into one place and reduces manual investigation and prioritization. It also helps the existing team work more efficiently without needing additional resources just to manage cloud security visibility.
Which other solutions did I evaluate?
I evaluated a few other cloud security platforms before choosing Wiz, mainly comparing them on cloud visibility, risk prioritization, ease of deployment, integrations, and overall usability. Wiz stood out because it provided a more centralized view of our cloud environment and made it easier to understand and prioritize the risks I was seeing.
What other advice do I have?
While I have not formally measured the impact with specific numbers, the time savings from using Wiz are noticeable, as it reduces the amount of manual effort needed to view cloud resources and prioritize findings. The team can get context around the risks much faster, helping us respond to important issues most efficiently.
Wiz has reduced alert fatigue for the team, mainly by providing better context and helping prioritize the findings that matter most. While I have not formally measured the reduction over a specific period, the team spends noticeably less time sorting through low findings and can focus more quickly on critical risks.
I use Wiz post-sale support services when needed, which have been helpful for resolving configuration questions and getting guidance on more complex security findings. Having that support available helps our team troubleshoot issues faster, using the time I could otherwise spend figuring out certain problems on my own.
Wiz has helped us reduce and prioritize critical issues, although we have not consistently reached zero criticals in the issue queue. Its prioritization and contextual information make it easier to identify the most important issues and get them assigned for remediation, which has improved our overall response process.
I recommend Wiz to organizations looking for better visibility and centralized management for cloud security risks, advising that they clearly define their cloud accounts and security priorities before deploying it. The platform can surface a lot of information, so taking time to understand its prioritization features will help the team get the most value from it. I rate this product nine out of ten.