Legit Security vs Wiz comparison

Why PeerSpot?

Legit Security and Wiz are both solutions in the Application Security Posture Management (ASPM) category. Legit Security is ranked #15, while Wiz is ranked #2 with an average rating of 8.6. Legit Security holds a 2.2% mindshare in ASPM, compared to Wiz’s 8.5% mindshare. Additionally, 100% of Legit Security users are willing to recommend the solution, compared to 98% of Wiz users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 24, 2026

Wiz and Legit Security are competitors in the cybersecurity field. While Wiz excels in pricing and customer support, Legit Security's extensive features give it an advantage for those seeking comprehensive security.

Features: Wiz includes advanced cloud setup automation, seamless system integration, and efficient operation optimization. Meanwhile, Legit Security features real-time threat detection, compliance management, and extensive threat analysis, prioritizing robust security for proactive protection.

Room for Improvement: Wiz could enhance its threat intelligence capabilities and further refine its user interface for complex operations. Legit Security can improve by streamlining its setup process, reducing false positives in secret detection, and providing a more intuitive dashboard.

Ease of Deployment and Customer Service: Wiz offers a rapid setup process and highly responsive customer support, addressing routine customer inquiries effectively. Legit Security, although requiring a more complex initial configuration, provides thorough guidance and proactive support, benefiting customers over the long term.

Pricing and ROI: Wiz presents attractive entry-level pricing and effective cloud management, offering significant ROI for budget-conscious customers. In contrast, Legit Security, while demanding a higher initial expenditure, delivers substantial value through its comprehensive security suite, benefitting businesses focused on extensive protection.

To learn more, read our detailed Application Security Posture Management (ASPM) Report (Updated: September 2026).

Buyer's Guide

Application Security Posture Management (ASPM)

September 2026

Download the complete report

Helped 914,109 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex Cloud by Palo Alto N...

Mindshare comparison

As of September 2026, in the Application Security Posture Management (ASPM) category, the mindshare of Cortex Cloud by Palo Alto Networks is 3.4%, up from 1.1% compared to the previous year. The mindshare of Legit Security is 2.2%, up from 2.0% compared to the previous year. The mindshare of Wiz is 8.5%, down from 16.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Posture Management (ASPM) Mindshare Distribution
Product	Mindshare (%)
Wiz	8.5%
Cortex Cloud by Palo Alto Networks	3.4%
Legit Security	2.2%
Other	85.9%

Application Security Posture Management (ASPM)

Featured Reviews

Sonali Jha

Technical Solutions Architect at IBM

Cloud security has improved as AI-driven runtime protection detects threats and reduces incidents

In my opinion, Cortex Cloud by Palo Alto Networks could be improved or enhanced in various ways. I don't have an idea about that yet because for that you actually need to use two or three different other tools to make a basic comparison. If you ask me how good the tool is, I would fairly rate it quite high. The tool is very popular, and customers can already see that it is one of the cloud leaders in the security space. The platform had a very good feature which provides documentation links about how to use a specific feature on the UI. It takes you to the proper documentation page where it suggests what to do and tells you about the steps that need to be done for a resource deployment. My thoughts about improving the product which I believe could greatly aid vendors is that it used to be a very user-friendly tool, but now they have incorporated everything under one umbrella. It has XDR, XSOAR, and Cortex Cloud by Palo Alto Networks. Before, we used to have separate modules and separate environments for each of these capabilities or features. Right now, it is a little complex and users would take their own time to know the tool better. This is something that would have been way better, but I would say there would be different opinions on this. Talking about user-friendliness, it has decreased now.

Read full review

Tim Crothers

CISO at Mandiant / FireEye

Provides strong visibility, straightforward integration, and reduces the risk of attacks

Legit Security is a product that hyper-focuses on the various aspects of the software development pipeline. For example, if an engineer spins off a new project and stands up a new Git project, Legit automatically detects it, connects Snyk and other tools, and ensures the engineering team doesn't have to think about it. This way, we stay on top of security from the beginning. On the other hand, Legit provides a clear view of the controls around repositories. We have standards requiring code reviews and similar practices, and Legit shows us whether these are being followed. Additionally, Legit helps us identify unmaintained repositories, which often arise when engineering teams try something and leave it behind. This knowledge allows us to determine the appropriate action for these neglected projects. One area where Legit falls short is secret detection. While it functions well overall, the feature has a 10-20 percent false positive rate, requiring some manual intervention. Almost everything else works flawlessly. The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates. Unlike traditional programs that require security reviews at specific stages, hindering development flow, we strive to partner with the product engineering team to ship secure code seamlessly within their existing workflows. Legit plays a crucial role in this by automatically notifying us of new projects, eliminating the need for manual communication. This partnership approach, enabled by Legit, allows us to work much closer with our engineering teams than ever before.

Read full review

Peter Whelan

CISO at a computer software company with 1,001-5,000 employees

Improved our security posture thanks to comprehensive visibility

I have contacted Wiz technical support frequently. The support is excellent. We contact via an in-application portal. We can see the support cases we personally open, and also the cases that other people have opened from our company. I appreciate that feature. Generally, support gets back to us within a few days with a good answer. There was one fellow in particular who has been knocking it out of the park. He is a great support person to deal with. We are happy with the support experience. If I were to put Wiz support on a scale from one to ten, I would give them a ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"From a technical standpoint or pricing, Cortex Cloud by Palo Alto Networks is a stronger solution in the market at the moment compared to other products from ConnectWise or Symantec."

"The most beneficial aspect of Cortex Cloud by Palo Alto Networks and Palo Alto in general is that there is a single platform for all cloud providers for securitization."

"I have absolutely seen improvements in our incident close rates, with mean time to detect and respond reduced significantly, sometimes by at least forty to fifty percent."

"Previously with Cortex Cloud by Palo Alto Networks, I deployed this product for one of my customers, and after three to four months, they said that previously they had around four hours of MTTR, and now it has reduced to just 15 to 20 minutes."

"The AI and automation features in detecting and responding to high-risk threats are impressive; it's one of the best tools regarding AI technology and unifies security in one platform in real-time, improving vulnerability analysis, incident response, and compliance reporting."

"Cortex Cloud by Palo Alto Networks has impacted our organization positively by keeping our machines secure and our team using the dashboard to find issues quickly."

"The most valuable features I have found in Cortex Cloud by Palo Alto Networks are those that we provided to customers in a stock environment, as we have done some POCs and tried to check how it can help different organizations, and this same solution has been positioned for multiple customers."

"Cortex Cloud by Palo Alto Networks' cloud runtime security in terms of stopping attacks in real time is impressive."

More Cortex Cloud by Palo Alto Networks pros

"The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates."

"Legit has increased my security posture to a level I couldn't achieve before. I don't need to worry as much about what's happening within my developer environments. I can rest assured that my vulnerabilities are being detected."

"We implemented Legit Security to gain visibility into all development teams and ensure that consistent controls are in place and accounted for on every route."

"Legit has had a positive effect on our overall security posture."

"What I appreciate most about Wiz is that it has access to all project scopes."

"A valuable feature is that Wiz helps in identifying vulnerabilities."

"Wiz has positively impacted my organization by implementing zero trust authorization, providing good reporting that shows the top attack path, critical assets, overall risk posture, and demonstrating AI and ML workload capabilities towards my team, as well as good infrastructure detection and vulnerability detection accuracy with security posture management at massive scale and identity exposure."

"Wiz Code has positively impacted my organization through the unified platform that gives the ability to shift left in security and detect issues before they go into production."

"Overall, I believe Wiz is doing a great job, simplifying many aspects for security professionals and enterprises."

"For any organization who want to think of moving to Wiz, the Security Graph feature is amazing and awesome, giving you deeper information than any other tools does and allowing a small security team to manage a massive complex cloud environment without hiring dozens of additional users to look into it."

"Our most important features are those around entitlement, external exposure, vulnerabilities, and container security."

"I would definitely recommend Wiz Code to boost development and productivity because I have seen significant positive improvements since I started using it."

More Wiz pros

Cons

"Some aspects of the GUI can be confusing and make it difficult for me to find certain options or navigate where needed."

"Cortex Cloud by Palo Alto Networks is not the cheapest solution in the market, but I know that is the best solution for SOC and Cloud once have all tools to connect cloud issues with SOC procedures, because we are partners with T-Systems."

"Cortex Cloud by Palo Alto Networks is creating some confusion in terms of names because this is recent."

"In my opinion, Cortex Cloud by Palo Alto Networks can be improved by addressing forensic information collection and storage, although I cannot suggest specific things right now, based on what customers might need."

"The negative aspects or areas for improvement in the product include the fact that the cost might be a bit high, which challenges commercials, but not technically."

"As per my experience with Cortex Cloud by Palo Alto Networks, the UI could be simpler."

"Overall, I rate Cortex Cloud by Palo Alto Networks as an eight out of ten. I think that it could improve on price, as I know that the Google solution has the best price, and this is one of the conditions."

"From the commercial perspective, we have some limitations because Palo Alto has a minimum number of users of endpoints set at 200, which is quite high for the Italian market."

More Cortex Cloud by Palo Alto Networks cons

"One issue is that engineering teams don't always embed secrets in the same way, making it difficult for the tool to consistently identify them."

"The one we're working on right now is the ability to dynamically rerun development teams and groups."

"Legit Security could do a little better with detecting publicly exposed keys. It's not bad. The detections that they are running get to everything eventually, but it would be great if they could increase some of that awareness."

"I would like them to have their own static code scanner, and I'd like them to have their own open-source software scanners."

"When integrating multiple clouds like hybrid cloud with Wiz, these processes need to be more user-friendly because more scripting is required in this scenario."

"Once you get a threat and fix it, to see that fix reflected in Wiz, you have to wait 24 hours. That is something I am not happy with."

"We are still analyzing its behavior as we are in the midst of the implementation."

"One significant issue is that the searches are case-sensitive, so finding a misconfigured resource can become very challenging."

"Wiz Code has many features, and I think they could continue to enhance customization according to our requirements."

"Wiz's reporting capabilities could be refined a bit. They are making headway on that, but more executive-style dashboards would be nice. They just implemented a community aspect where you can share documents and feedback. This was something users had been requesting for a while. They are listening to customer feedback and making changes."

"It would be better if, when you get an alert type, you are able to view the regex or alert logic without having to dig through all the different options; it is difficult to find where the alert logic is because you have to go to the investigations and then actually find and search for the individual alert."

"We noticed some capabilities that were lacking, specifically ignoring some false-positive Issue findings. The good news - with the latest update, this has been resolved."

More Wiz cons

Pricing and Cost Advice

Information not available

"The pricing is reasonable."

"Regarding pricing, it’s more than $100k because we have a very big infrastructure. Our environment supports around three thousand people, and we offer business-to-client financial services to around one million clients, so we rely heavily on Wiz."

"I wish the pricing was more transparent."

"Based on the features and capabilities, the product pricing seems reasonable."

"The pricing seems pretty simple. We don't have to do a lot of calculations to figure out what the components are. They do it by enabling specific features, either basics or advanced, which makes it easy to select."

"The pricing is fair and comparable to their competitors. The cost seems to be going up, which is a concern. There are potential savings from consolidating tools, but we're uncertain how Wiz's pricing will change over time."

"The cost of the other solutions is comparable to Wiz."

"The pricing is fair. Some of the more advanced features and functionalities and how the tiers are split can be somewhat confusing."

"If one is cheap and ten is expensive, I rate the tool's price as a five out of ten."

More Wiz pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Posture Management (ASPM) solutions are best for your needs.

See recommendations

914,109 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

16%

Construction Company

10%

Financial Services Firm

Outsourcing Company

University

13%

Construction Company

Financial Services Firm

Retailer

Financial Services Firm

13%

Manufacturing Company

11%

Computer Software Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	4

No data available

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	12
Large Enterprise	48

Questions from the Community

What is your experience regarding pricing and costs for Cortex Cloud by Palo Alto Networks?

I am not fully aware of the pricing and licensing of Cortex Cloud by Palo Alto Networks. The pricing is also based on...

See all answers

What needs improvement with Cortex Cloud by Palo Alto Networks?

In my opinion, Cortex Cloud by Palo Alto Networks could be improved or enhanced in various ways. I don't have an idea...

See all answers

What is your primary use case for Cortex Cloud by Palo Alto Networks?

The usual use cases for Cortex Cloud by Palo Alto Networks that I have been working with mostly are as simple as dete...

See all answers

Ask a question

Earn 20 points

What is your experience regarding pricing and costs for Wiz?

No involvement occurred with pricing, setup cost, and licensing for Wiz since it was a free proof of concept. Approxi...

See all answers

What needs improvement with Wiz?

While Checkmarx may perform better in some deep code scanning aspects, Wiz is considerably easier to use, has a bette...

See all answers

What is your primary use case for Wiz?

Wiz is being tested to compare against Checkmarx, examining scanning capabilities, native visibility, ease of deploym...

See all answers

Comparisons

Prisma Cloud by Palo Alto Networks vs Cortex Cloud by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Cloud Security vs Cortex Cloud by Palo Alto Networks

Compared 8% of the time

WithSecure Elements Exposure Management (XM) vs Cortex Cloud by Palo Alto Networks

Compared 7% of the time

CrowdStrike Falcon Cloud Security vs Cortex Cloud by Palo Alto Networks

Compared 5% of the time

Qualys Enterprise TruRisk Platform vs Cortex Cloud by Palo Alto Networks

Compared 4% of the time

More Cortex Cloud by Palo Alto Networks Competitors

Docker vs Legit Security

Compared 17% of the time

Ox Security vs Legit Security

Compared 12% of the time

Ivanti Autonomous Endpoint Management vs Legit Security

Compared 10% of the time

Heeler vs Legit Security

Compared 8% of the time

Myrror Security vs Legit Security

Compared 4% of the time

More Legit Security Competitors

Prisma Cloud by Palo Alto Networks vs Wiz

Compared 8% of the time

Orca Security vs Wiz

Compared 3% of the time

SentinelOne Singularity Cloud Security vs Wiz

Compared 3% of the time

Microsoft Defender for Cloud vs Wiz

Compared 3% of the time

CrowdStrike Falcon Cloud Security vs Wiz

Compared 2% of the time

More Wiz Competitors

Product Reports

Buyer's Guide

Cortex Cloud by Palo Alto Networks

September 2026

Cortex Cloud by Palo Alto Networks report

Download Cortex Cloud by Palo Alto Networks product report

Buyer's Guide

Legit Security

September 2026

Download Legit Security product report

Buyer's Guide

Wiz

August 2026

Download Wiz product report

Also Known As

No data available

Wiz Code, Wiz Defend

Overview

Cortex Cloud by Palo Alto Networks enhances cloud security with features like AI/ML threat detection and automated remediation, ensuring real-time protection and efficient management across cloud environments.

Cortex Cloud by Palo Alto Networks offers comprehensive cloud security posture management and runtime protection. It reduces manual tasks and accelerates incident investigation through advanced threat detection and AI-driven anomaly detection. With integration to the MITRE ATT&CK framework, it boosts threat response while reducing incident resolution time. Although users find the UI complex and pricing high, its capabilities in securing AWS, Azure, and other environments, as well as its potential integration with CyberArk, emphasize its enterprise-ready design for cloud transformation across diverse industry sectors.

What are the key features of Cortex Cloud by Palo Alto Networks?

Runtime Protection: Ensures real-time security for workloads.
AI/ML-powered Threat Detection: Identifies threats using AI/ML technology.
Automated Remediation: Streamlines threat response through automation.
Comprehensive Detection Coverage: Offers extensive detection capabilities with unified data.
Integration with MITRE ATT&CK: Enhances threat response efficiency.

What benefits or ROI should users consider?

Enhanced Security Visibility: Provides dashboards for better security insights.
Reduced Manual Tasks: Automates processes for efficiency gains.
Improved Threat Response: Accelerates incident resolution with AI-driven anomaly detection.
Seamless Cloud Integration: Supports APIs and multi-cloud environments.

Cortex Cloud by Palo Alto Networks is deployed across industries like telecom, BFSI, and manufacturing for robust cloud security. It's leveraged for detecting misconfigurations and vulnerabilities, aiding cloud transformation and compliance with standards such as GDPR and NIST. The integration across cloud infrastructures, including AWS and Azure, supports policy creation and threat management strategies for diverse enterprises.

Palo Alto Networks

Legit Security offers comprehensive solutions for managing software security risks, ensuring efficient code integration, risk reduction, and policy adherence through centralized controls and robust integration with existing tools.

Legit Security provides organizations with a powerful platform for enhancing software security. It offers a unified control panel that highlights high-risk findings and enhances security posture with risk scoring. By facilitating seamless integration with existing tools, it promotes a security shift-left approach. Centralized management helps enforce policy adherence while secret management capabilities add another layer of security. Despite some false positives in secret detection, Legit collaborates with engineering teams to ensure secure code integration.

What are the key features of Legit Security?

Noise Reduction: Minimizes noise from scanning tools for increased efficiency.
Risk Scoring: Highlights high-risk findings to prioritize security efforts.
Unified Control Panel: Centralizes oversight for improved policy enforcement.
Seamless Integration: Works with existing tools to reduce security risks.
Secret Management: Ensures secure handling of sensitive information.

What benefits should be considered when evaluating Legit Security?

Comprehensive Visibility: Offers end-to-end insights into the software development lifecycle.
Security Shift-left: Facilitates early security integration for proactive risk management.
Partnership with Engineering Teams: Promotes collaborative secure code implementation.
Responsive Enhancement Requests: Reflects adaptability to user feedback for continuous improvement.

In industries dealing with sensitive data and complex code deliveries, Legit Security is implemented to manage the entire software development lifecycle. Organizations utilize it for compliance, integrating it with other scanning tools to bolster code supply chain security and application security management. In the wake of incidents like the SolarWinds breach, the importance of securing the software delivery pipeline has been underscored, positioning Legit Security as a crucial component in protecting against similar threats.

Legit Security

Wiz enhances cloud security with features like CSPM, risk prioritization, and centralized visibility. Users benefit from agentless scanning and integration with CI/CD tools, improving threat detection and compliance management.

Wiz offers a comprehensive security solution for cloud environments by providing functionalities like threat intelligence, detailed risk analysis, and automated compliance mapping. It supports vulnerability management and risk analysis, utilizing agentless deployment for seamless integration across multi-cloud settings. The platform's ability to streamline workflows and reduce false positives enables users to improve remediation speed and bolster security posture. Despite impressive capabilities, there is a need for improvement in reporting, security functionality for Kubernetes, handling false positives, and integration with APIs. Enhanced dashboards and more flexibility in automation processes are also required.

What are the key features of Wiz?

CSPM: Manages cloud security and automates compliance.
Threat Intelligence: Provides insights for proactive defense.
Risk Prioritization: Helps focus on critical security issues.
Agentless Scanning: Offers non-disruptive visibility into cloud environments.
Security Graph: Visual tool for detailed risk analysis.

What benefits should users expect?

Improved Remediation Speed: Enables quicker resolution of vulnerabilities.
Reduced Alert Fatigue: Minimizes false positives, enhancing focus.
Enhanced Security Posture: Strengthens defense across cloud infrastructures.
Streamlined Workflows: Facilitates smoother security and compliance processes.

Industries integrate Wiz for cloud security posture management, ensuring compliance and managing vulnerabilities in multi-cloud environments. Users leverage its agentless capabilities to protect cloud-native applications, integrating with CI/CD pipelines to enhance security operations and automate remediation. This comprehensive approach offers robust cloud security solutions.

Wiz

Sample Customers

Information Not Available

Google, NYSE, Kraft-Hienz, Takeda Pharmaceuticals, and many other large enterprise and Fortune 500 customers. Learn more by going to: https://www.legitsecurity.com/...

Wiz is the fastest growing software company ever - $100M ARR in 18 months: Wiz becomes the fastest-growing software company ever | Wiz Blog Discover why companies, including Salesforce, Morgan Stanley, Fox, and Bridgewater choose Wiz as their cloud security partner. Read their success stories here: Customers | Wiz

Buyer's Guide

Application Security Posture Management (ASPM)

September 2026

Download Free Report

Find out what your peers are saying about Snyk, Wiz, Veracode and others in Application Security Posture Management (ASPM). Updated: September 2026.

DOWNLOAD NOW

914,109 professionals have used our research since 2012.

See our list of best Application Security Posture Management (ASPM) vendors.

We monitor all Application Security Posture Management (ASPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.