External reviews
786 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Wiz - Best tool for Cloud Security
What do you like best about the product?
Deeper CNAPP integration
Wiz has evolved into a full Cloud-Native Application Protection Platform (CNAPP), not just CSPM. It brings together posture management, workload protection, identity risk, data security, and Kubernetes security in a single graph model. The unified risk graph that connects resources, identities, vulnerabilities, and exposures is still a strong differentiator.
Wiz Code (shift-left security)
Wiz Code extends security into the development phase. It scans Infrastructure as Code (Terraform, CloudFormation), container images, and integrates with Git platforms. What’s useful is that findings are correlated with runtime risk, which reduces noise compared to standalone SAST or IaC tools.
Improved attack path analysis
Their attack path capability continues to improve. Instead of listing thousands of misconfigurations, it shows how issues connect—for example, a publicly exposed VM that has a role allowing access to a production database. That prioritization makes remediation much more practical.
Stronger Kubernetes security
Wiz has expanded Kubernetes security with better cluster posture management, visibility into pod-to-node-to-IAM relationships, and clearer lateral movement paths. It works well in multi-cluster and multi-cloud environments.
Better risk prioritization
Wiz increasingly factors in business context, such as tags, data sensitivity, and environment (prod vs. dev). Instead of just CVSS scores, it highlights what is truly critical based on exposure and business impact.
Agentless architecture at scale
The agentless model remains a key advantage. Onboarding is relatively fast, and it avoids the operational overhead of deploying and maintaining agents across large environments.
Wiz has evolved into a full Cloud-Native Application Protection Platform (CNAPP), not just CSPM. It brings together posture management, workload protection, identity risk, data security, and Kubernetes security in a single graph model. The unified risk graph that connects resources, identities, vulnerabilities, and exposures is still a strong differentiator.
Wiz Code (shift-left security)
Wiz Code extends security into the development phase. It scans Infrastructure as Code (Terraform, CloudFormation), container images, and integrates with Git platforms. What’s useful is that findings are correlated with runtime risk, which reduces noise compared to standalone SAST or IaC tools.
Improved attack path analysis
Their attack path capability continues to improve. Instead of listing thousands of misconfigurations, it shows how issues connect—for example, a publicly exposed VM that has a role allowing access to a production database. That prioritization makes remediation much more practical.
Stronger Kubernetes security
Wiz has expanded Kubernetes security with better cluster posture management, visibility into pod-to-node-to-IAM relationships, and clearer lateral movement paths. It works well in multi-cluster and multi-cloud environments.
Better risk prioritization
Wiz increasingly factors in business context, such as tags, data sensitivity, and environment (prod vs. dev). Instead of just CVSS scores, it highlights what is truly critical based on exposure and business impact.
Agentless architecture at scale
The agentless model remains a key advantage. Onboarding is relatively fast, and it avoids the operational overhead of deploying and maintaining agents across large environments.
What do you dislike about the product?
Noise reduction – Further reduce false positives in very large environments.
Deeper remediation guidance – More step-by-step fix instructions for complex attack paths.
Custom risk scoring – Greater flexibility to tailor risk models to business needs.
Deeper remediation guidance – More step-by-step fix instructions for complex attack paths.
Custom risk scoring – Greater flexibility to tailor risk models to business needs.
What problems is the product solving and how is that benefiting you?
We are trying to see the effect of Zero Day Vulnerabilities as in when they happen. Also, CSPM and DSPM are of pivotal importance to us.
Strong core capabilities, and adding additional use-cases all the time
What do you like best about the product?
We brought Wiz into our organization first for Kubernetes workload protection. As a cloud-native company, we continue to expand our use into additional capabilities that get us closer to the sought-after "single pane of glass" -- in my experience this is the closest thing to it I have seen.
What do you dislike about the product?
Initially, the front-page and both depth and breadth of features looks overwhelming. We quickly found that everything is well thought out and the learning curve is faster than expected. The automation features are being improved, but have room for improvement around ticketing. Findings around container vulnerabilities are generated in a way that requires more manual effort than desirable, but this is in the queue for enhancements in the future.
What problems is the product solving and how is that benefiting you?
Kubernetes security was our first point of protection. Because we are cloud-native, it is also satisfying our need for host security and we have been able to reduce the number of tools used. We are also beginning to utilize it for compliance and configuration findings, which is not something we had as a requirement when we purchased the product but are utilizing more now that we have had time to utilize it for our primary use-cases.
More than 20 years of experience in cyber risk assessment
What do you like best about the product?
Wiz is an amazing solution with great comprehensive security features for runtime and IAC.
Its very user friendly and easy to implement
Its very user friendly and easy to implement
What do you dislike about the product?
I would like to see prevention capabilities as well
What problems is the product solving and how is that benefiting you?
Provide real security risks exist in production which help to prioritize accordingly
Wiz stands on top of the CSPM mountain!
What do you like best about the product?
What I like the best about Wiz is how efficiently their DevSecOps rolls out new universal feature requests; in a blink of an eye, it's GA. Unlike the competitors, we've been waiting for a simple feature request for several months.
What do you dislike about the product?
What I wouldn't say I like is the current out-of-the-box RBAC delivery model and the lack of multi-IdP functionality. This functionality is highly customizable with plenty of workarounds that address the issue; I would like to see if these hurdles can be handled more efficiently in Wiz's vision for 2023.
What problems is the product solving and how is that benefiting you?
The problem Wiz is solving is the centralized view of my managed assets independent of CSP. Once we could begin our POC, add all of our CSPs to the platform, and review our posture, we instantly knew our visibility issue would be resolved.
Security starts with visibility
What do you like best about the product?
The benefit of Wiz comes with its strong ability to get you deep security visibility in your cloud environments. Wiz allows you to see all components of your environment in one console, and show linkages and how they affect security. For example, showing how an S3 bucket, IAM priveleges, an EC2 instance, and a load balancer are connected, and how small vulnerabilities in each could be combined into a larger issue. In addition to this, Wiz gives you a lot of confidence that your visibility is complete.
What do you dislike about the product?
Because Wiz offers so many features and capabilities, it can be difficult to maximize value from the tool. In particular, the search engine is powerful but complex. It takes time to learn how to "ask it questions."
What problems is the product solving and how is that benefiting you?
Wiz integrates cloud configuration posture management, vulnerability management, IAM analysis, and more. For us, the combination of infrastructure vulnerability management with cloud security posture management helps us identify the most critical issues in our environment. Prioritization is always important, and Wiz helps give us confidence that we are focusing on the right areas.
The ability to add controls to our IAC pipelines is really valuable as well.
The ability to add controls to our IAC pipelines is really valuable as well.
Wiz is perfect for analyzing coverage gaps and accessing vulnerabilities in your cloud environment.
What do you like best about the product?
Helps to analyze gaps in coverage in our cloud environment and where we need to deploy our security tools.
What do you dislike about the product?
So far, there is nothing that I dislike about the tool.
What problems is the product solving and how is that benefiting you?
It helps us determine the gaps in coverage in our cloud environment. Having that visibility allows us to increase our security posture in the cloud.
Wiz has increased it's value to us every year by improvements and their support
What do you like best about the product?
Container security features have helped our teams greatly
What do you dislike about the product?
Reporting needs improvement. Support for cloud environments in China has always been tricky, Wiz has improved but has a way to go
What problems is the product solving and how is that benefiting you?
Providing us information about the riskiest hosts and cloud settings helps prioritize remediation work for our company.
Easy integrations, great documentation, and amazing support.
What do you like best about the product?
From the moment we began integration with Wiz, we knew we were working with something different.
Their contextual documentation is spot on, up to date, and helpful. And in the event you need real help.... Their support staff is knowledgeable and expedient. They really care about your ability to maximize the benefits of their platform and it shows.
Their contextual documentation is spot on, up to date, and helpful. And in the event you need real help.... Their support staff is knowledgeable and expedient. They really care about your ability to maximize the benefits of their platform and it shows.
What do you dislike about the product?
Really can't think of anything to dislike about Wiz. If the platform is missing something you think it should have, their support welcomes feature requests or suggestions for enhancement.
What problems is the product solving and how is that benefiting you?
Wiz has given us an incredible view into our extensive cloud environments that we never had before. The ability to leverage their API's into our development and deployment model has increased the security and stability of each deployment or rollout of new platforms.
Security Engineer's review on Wiz
What do you like best about the product?
I think Wiz is an exceptional tool in the security industry, making it an extremely likable product for engineers like me. From the documentation through the technical implementation to the management representation, they have you covered with all sorts of things you might need.
Providing easy-to-follow API examples for custom integrations and many out-of-the-box connections with commonly used enterprise tools.
They are extremely quick with their release cycles, including all the updates, support request fixes and policy amendments/additions that greatly help building a secure infrastructure.
They do not just provide a tool that helps security teams better understand their security posture, but they are constantly building their product to help you pinpoint the toxic combinations that make your environment insecure.
Providing easy-to-follow API examples for custom integrations and many out-of-the-box connections with commonly used enterprise tools.
They are extremely quick with their release cycles, including all the updates, support request fixes and policy amendments/additions that greatly help building a secure infrastructure.
They do not just provide a tool that helps security teams better understand their security posture, but they are constantly building their product to help you pinpoint the toxic combinations that make your environment insecure.
What do you dislike about the product?
It is hard to mention things that are not likable at Wiz because they are open to user feedback that is usually addressed quickly.
What problems is the product solving and how is that benefiting you?
Wiz gives a holistic view of the infrastructure we have, with all the relevant security recommendations grouped by severity, that helps both the security and business teams target their focus on the most critical issues.
They constantly evolve with new policies and toxic combinations to ensure their customer is covered on the critical points.
They constantly evolve with new policies and toxic combinations to ensure their customer is covered on the critical points.
Always Innovating
What do you like best about the product?
Wiz provides a clear insight into your cloud architecture's health with concise issue guidance and remediation recommendations. With the continued innovation by the Wiz engineers, to include the recent implementation of Cloud Detection and Response, as well as Data Security Posture Management, Wiz is becoming a leading source for all aspect of Cloud Management and Security Operations.
What do you dislike about the product?
DSPM in Wiz is growing and releasing new capabilities, I see there is still some more room to grow in this area and will see Wiz being a leader in this category. I also see Wiz growing in the ASPM solution and will have great insights as that grow their integrations in the SCA/IAC area with inline development scanners and code respositories.
What problems is the product solving and how is that benefiting you?
Wiz Cloud Detection and Response provides Cloud Trail and Guard Duty alerting and timeline creation that is critical for engineering and operations. Wiz CSPM delivers the relevant information to enable automated remediation of critical cloud configuration issues
showing 371 - 380