Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

BigID
Ranking in Data Security Posture Management (DSPM)
7th
Average Rating
8.0
Number of Reviews
7
Ranking in other categories
Data Governance (7th), Data Privacy Management Software (3rd)
Wiz
Ranking in Data Security Posture Management (DSPM)
2nd
Average Rating
9.2
Number of Reviews
12
Ranking in other categories
Vulnerability Management (4th), Container Security (2nd), Cloud Workload Protection Platforms (CWPP) (2nd), Cloud Security Posture Management (CSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (2nd), Compliance Management (1st)
 

Mindshare comparison

As of June 2024, in the Data Security Posture Management (DSPM) category, the mindshare of BigID is 24.0%, up from 14.8% compared to the previous year. The mindshare of Wiz is 15.4%, down from 20.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Data Security Posture Management (DSPM)
Unique Categories:
Data Governance
7.8%
Data Privacy Management Software
47.4%
Vulnerability Management
10.6%
Container Security
22.9%
 

Featured Reviews

LF
Apr 17, 2024
Helps gain control of where the data leads and to control the data lifecycle
Data classification is an important aspect of the tool because, by using it, a company can make better decisions and implement the right security process. The data classification offered by the tool can help companies improve their security strategy. The solution also helps in the data minimization process. For instance, if the tool duplicates data in different databases, companies can use BigID to reduce the number of duplicate data. BigID thus can also be used to meet compliance with GDPR, CCPA and LGPD. I would recommend BigID to others. The solution is simple to manage, and most use cases are easier to deploy with It. I would rate the solution an eight out of ten.
DB
May 17, 2024
An agentless cloud assets vulnerability scanner which akes snapshots and then scans
Wiz's scanning and detection capabilities can identify vulnerabilities potentially affecting the cloud or exposure. It's not solely focused on database issues. It performs various tasks effectively. The categorization is excellent, the dashboards are informative, and the reporting features are robust. Additionally, you can create highly customizable reports. Everything works using a CI/CD pipeline, which is very good because every DevOps engineer can manage it by simply creating some code around the message request. Wiz works fine and is fully compliant with CI/CD. The workflow and the tasks align with industry standards. We can configure any compliance framework for checking with Wiz. For example, you can select frameworks such as GDPR, AWS Fundamentals, and CI/CD. You can configure the tool based on the recommendations provided by these frameworks. If your company has specific requirements, like allowing an 8-character password while the state requires 12 characters, you can customize the settings accordingly. Wiz will then assess compliance based on these customized parameters, and if everything meets the set criteria, it will confirm that you are compliant. You have everything in one dashboard. The dashboard and reports are quite literally perfect. Since everything is in one dashboard, you can customize the reports to show only the columns you want to see. For example, you can exclude low-risk items so you don't get notifications about low-risk issues that do not impact your compliance status. Wiz has some AI features for consolidation, but it's not customizable. What VMware offers is similar, but there's not much to choose between. You either have a batch compliance agreement, or you don't. Wiz's framework complies with requirements, or it doesn't. It's a vulnerability management tool similar to Kangaroo but with better AI documentation features. You can ask questions about how to do something, and the AI will provide the relevant information. This feature is built into the system. Overall, I rate the solution a ten out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"BigID integrates well with our other products."
"BigID's scanning feature is its most valuable component."
"The data classification offered by the tool can help companies improve their security strategy"
"The tool's most valuable feature is correlation. Using BigID's data classification capabilities has strengthened our data security. It lets me classify and connect data, which helps me manage data at various classification levels."
"One of the most valuable things in a data-focused world is a tool, a technology that's data-centric, not trying to master data management or whatever else. It's a source of truth for what data an organization holds, giving it the ability to catalog, categorize, and understand its data."
"I like BigID's in-depth discovery and scanning capabilities, especially for unstructured data. This feature is a standout compared to competitors. The tool's data classification capabilities are impressive. It offers custom classifiers and a blend of regular exploration and artificial intelligence, making it a next-generation solution. This enhances data security, and its security posture management is straightforward and user-friendly."
"The features that I have found most valuable are the user experience, the credentialing, and that BigID is user friendly. Additionally, you can deploy to several other Microsoft platforms and you can use it for other things, like a bigger element or a report."
"The solution is very user-friendly."
"The security baseline and vulnerability assessments is the valuable feature."
"The first thing that stood out was the ease of installation and the quick value we got out of the solution."
"The CSPM module has been the most effective. It was easy to deploy and covered all our accounts through APIs, requiring no agents. Wiz provides instant visibility into high-level risks that we need to address."
"Out of all the features, the one item that has been most valuable is the fact that Wiz puts into context all the pieces that create an issue, and applies a particular risk evaluation that helps us prioritize when we need to address a misconfiguration, vulnerability, or any issue that would put our environment into risk."
"I like Wiz's reporting, and it's easy to do queries. For example, it's pretty simple to find out how many servers we have and the applications installed on each. I like Wiz's security graph because you can use it to see the whole organization even if you have multiple accounts."
"The automation roles are essential because we ultimately want to do less work and automate more. The dashboards are easy to read and visually pleasing. You can understand things quickly, which makes it easy for our other teams. The network and infrastructure teams don't know as much about security as we do, so it helps to have a tool that's accessible and nice to look at."
"The product supports out-of-the-box reporting with context about the asset and allows us to perform complex custom queries on UI."
 

Cons

"BigID is making some forays into the GRC space, and that's a natural progression. I'd like to see that improve so that data governance is better, data risk is identified, and the ability to control and mitigate it."
"More classifications about different states are needed"
"Improvement could be made in data consent management and data privacy impact assessment."
"The challenge we encountered was with data connection across multiple databases. We struggled with configuring the data connection successfully. However, with the assistance of dynamic teams, we resolved this issue."
"BigID is expensive. I prefer McAfee."
"The tool currently lacks security features."
"In terms of what could be improved, when you're looking in a BigID file, you cannot really get the whole file. You have to export it to download it to another platform that allows you to completely view it, or run a program. That was one of the things that was really a disappointing point for me. Not to be able to view everything. There's a lot more data, but you can't get it all at once."
"We wish there were a way, beyond providing visibility and automated remediation, to wait on a given remediation, due to a critical aspect, such as the cost associated with a particular upgrade... We would like to see preventive controls that can be applied through Wiz to protect against vulnerabilities that we're not going to be able to remediate immediately."
"The solution's container security could be improved."
"The reporting isn't that great. They have executive summaries, but it's only a compliance report that maps all current issues to specific controls. Whether you look at one subscription or project, regardless of the size, you will get a multipage report on how the issues in that account map to that control. Our CSO isn't going to read through that. He won't filter that out or show that to his leadership and say, "Here's what we're doing." It isn't a helpful report. They're working on it, but it's a poor executive summary."
"We're looking at some of the data compliance stuff that they've got Jon offer. I know they're looking at container security, which we gonna be looking at next."
"The only small pain point has been around some of the logging integrations. Some of the complexities of the script integrations aren't supported with some of the more automated infrastructure components. So, it's not as universal. For example, they have great support for cloud formation and other services, but if you're using another type of management utility or governance language for your infrastructure-as-code automation components, it becomes a little bit trickier to navigate that."
"Wiz's reporting capabilities could be refined a bit. They are making headway on that, but more executive-style dashboards would be nice. They just implemented a community aspect where you can share documents and feedback. This was something users had been requesting for a while. They are listening to customer feedback and making changes."
"The remediation workflow within the Wiz could be improved."
"The only thing that needs to be improved is the number of scans per day."
 

Pricing and Cost Advice

"The solution is not licensed per user but rather based on capacity. For instance, organizations with large amounts of data, such as 50 GB or more, are the ones that typically qualify for BigID."
"I think that BigID's pricing is very reasonable."
"The solution is expensive."
"The product is expensive, but so are all competitor tools"
"The pricing depends. If you have thousands of data sources to connect and manage, and you struggled with an MDM package in the past, you'll find BigID valuable and even cheap. But if you're a small business, it's probably not the right tool for you."
"The pricing is fair. Some of the more advanced features and functionalities and how the tiers are split can be somewhat confusing."
"Wiz is a moderately priced solution, where it is neither cheap nor costly."
"The cost of the other solutions is comparable to Wiz."
"The pricing seems pretty simple. We don't have to do a lot of calculations to figure out what the components are. They do it by enabling specific features, either basics or advanced, which makes it easy to select."
"I wish the pricing was more transparent."
"The pricing is fair and comparable to their competitors. The cost seems to be going up, which is a concern. There are potential savings from consolidating tools, but we're uncertain how Wiz's pricing will change over time."
report
Use our free recommendation engine to learn which Data Security Posture Management (DSPM) solutions are best for your needs.
789,135 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
25%
Computer Software Company
12%
Insurance Company
8%
Manufacturing Company
7%
Computer Software Company
16%
Financial Services Firm
15%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about BigID?
I like BigID's in-depth discovery and scanning capabilities, especially for unstructured data. This feature is a standout compared to competitors. The tool's data classification capabilities are i...
What needs improvement with BigID?
Improvement could be made in data consent management and data privacy impact assessment.
What is your primary use case for BigID?
We use the solution for database scanning and data protection.
How would you compare Wiz vs Lacework?
Wiz and Lacework sucks... Buy Orca.
AWS Cloud Security Posture tool - has anyone used either Wiz or Ermetic cloud security products and can compare them to AWS Security Hub?
Whether or not the cost of third-party Cloud Security tools is justified would depend on your specific needs and budget. Suppose you are looking for a comprehensive Cloud Security solution that can...
What do you like most about Wiz?
With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment.
 

Comparisons

 

Learn More

 

Overview

 

Sample Customers

Home Depot, Grant Thornton LLP, Cimpress, Fidelity Investments
Wiz is the fastest growing software company ever - $100M ARR in 18 months: Wiz becomes the fastest-growing software company ever | Wiz Blog  Discover why companies, including Salesforce, Morgan Stanley, Fox, and Bridgewater choose Wiz as their cloud security partner. Read their success stories here: Customers | Wiz
Find out what your peers are saying about BigID vs. Wiz and other solutions. Updated: May 2024.
789,135 professionals have used our research since 2012.