Runecast vs VMware Aria Automation comparison

Cancel
You must select at least 2 products to compare!
Wiz Logo
Read 11 Wiz reviews
15,070 views|11,203 comparisons
100% willing to recommend
Runecast Logo
87 views|54 comparisons
100% willing to recommend
VMware Logo
142 views|113 comparisons
93% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Runecast and VMware Aria Automation based on real PeerSpot user reviews.

Find out what your peers are saying about Palo Alto Networks, Wiz, Microsoft and others in Cloud Security Posture Management (CSPM).
To learn more, read our detailed Cloud Security Posture Management (CSPM) Report (Updated: April 2024).
769,630 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The first thing that stood out was the ease of installation and the quick value we got out of the solution.""With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment.""The vulnerability management modules and the discovery and inventory are the most valuable features. Before using Wiz, it was a very manual process for both. After implementing it, we're able to get all of the analytics into a single platform that gives us visibility across all the systems in our cloud. We're able to correspond and understand what the vulnerability landscape looks like a lot faster.""Our most important features are those around entitlement, external exposure, vulnerabilities, and container security.""Out of all the features, the one item that has been most valuable is the fact that Wiz puts into context all the pieces that create an issue, and applies a particular risk evaluation that helps us prioritize when we need to address a misconfiguration, vulnerability, or any issue that would put our environment into risk.""I like Wiz's reporting, and it's easy to do queries. For example, it's pretty simple to find out how many servers we have and the applications installed on each. I like Wiz's security graph because you can use it to see the whole organization even if you have multiple accounts.""The product supports out-of-the-box reporting with context about the asset and allows us to perform complex custom queries on UI.""The solution is very user-friendly."

More Wiz Pros →

"Runecast is a good partner for VMware. Once we have installed it, we can see all the problems and issues. It also has VMware knowledge-based articles."

More Runecast Pros →

"If you do a deployment for a proof of concept, it is simple.""We can connect between multiple VMs in a matter of seconds.""Before it would take months to deploy a VM, now, with this solution, we can deploy many VMs in one hour. We can do a stack of them with Mediaware.""value; It has provided my development team a pure self-service portal. We deploy thousands of machines and reclaim. So, their time to business, and their time to market has been improved exponentially.""The product is very user-friendly.""vRealize Automation has improved the speed of provisioning just by automating things, making people think about whether a human really needs to do something or can we make the machines do it for us. It is a lot faster to deploy things now.""The most valuable features are that it's multi-tenant and the ability for scale.""The self-service capabilities are by far the best that we've seen in terms of features. If the user is being able to log in and make requests himself, from the onboarding process all the way to the end, that's very helpful."

More VMware Aria Automation Pros →

Cons
"We would like to see improvements to executive-level reporting and data reporting in general, which we understand is being rolled out to the platform.""Given the level of visibility into all the cloud environments Wiz provides, it would be nice if they could integrate some kind of mechanism to better manage tenants on multiple platforms. For example, let's say that some servers don't have an application they need, such as an antivirus. Wiz could include an API or something to push those applications out to the servers. It would be great if you could remedy these issues directly from the Wiz platform.""We wish there were a way, beyond providing visibility and automated remediation, to wait on a given remediation, due to a critical aspect, such as the cost associated with a particular upgrade... We would like to see preventive controls that can be applied through Wiz to protect against vulnerabilities that we're not going to be able to remediate immediately.""The reporting isn't that great. They have executive summaries, but it's only a compliance report that maps all current issues to specific controls. Whether you look at one subscription or project, regardless of the size, you will get a multipage report on how the issues in that account map to that control. Our CSO isn't going to read through that. He won't filter that out or show that to his leadership and say, "Here's what we're doing." It isn't a helpful report. They're working on it, but it's a poor executive summary.""The solution's container security could be improved.""One significant issue is that the searches are case-sensitive, so finding a misconfigured resource can become very challenging.""Wiz's reporting capabilities could be refined a bit. They are making headway on that, but more executive-style dashboards would be nice. They just implemented a community aspect where you can share documents and feedback. This was something users had been requesting for a while. They are listening to customer feedback and making changes.""The only thing that needs to be improved is the number of scans per day."

More Wiz Cons →

"The product lacks network assessment capabilities. We cannot view our network assets or scan switches, routers, or IPs for vulnerabilities and issues."

More Runecast Cons →

"VMware needs to make it to where it is not as custom. Right now, you spend a lot of time making the services work. In order to get it up and running initially, that takes time.""I would like them to improve the product training.""We have seen some issues with upgrades or installations. This means we have to raise a call every time with VMware.""The stability on the 6.2 version is very bad. It crashes. VMware tech support knows the IIS component is a bit buggy.""vCenter and vRA, I believe they share two different databases so sometimes you have to somehow sync them up. I wish there was only one database between the two or, somehow, one database would rule over the other one, so if you have both products, the vCenter might use the vRA database. Otherwise, when you do stuff in vCenter, you have to write a command on vRA to update the databases.""I would like to see more out-of-the-box blueprints and workflows for the rest of VMware's products and its portfolio.""I would also like to see them streamline the install. It's split between Windows and Linux appliances, and it would be easier if it was all appliances. I think they're going that way.""The basic support is not there for Google Cloud and Azure. They are unable to provision nor do cost controls. Google is still left out. It is great that they have done AWS, but we are a retailer which means nothing to us because it is a competitor. Azure is good, but Google is where a lot of our development environments are."

More VMware Aria Automation Cons →

Pricing and Cost Advice
  • "The pricing seems pretty simple. We don't have to do a lot of calculations to figure out what the components are. They do it by enabling specific features, either basics or advanced, which makes it easy to select."
  • "The pricing is fair. Some of the more advanced features and functionalities and how the tiers are split can be somewhat confusing."
  • "The pricing is fair and comparable to their competitors. The cost seems to be going up, which is a concern. There are potential savings from consolidating tools, but we're uncertain how Wiz's pricing will change over time."
  • "I wish the pricing was more transparent."
  • "The cost of the other solutions is comparable to Wiz."
  • "Wiz is a moderately priced solution, where it is neither cheap nor costly."
  • More Wiz Pricing and Cost Advice →

  • "Runecast's pricing is cheaper than that of its competitors."
  • More Runecast Pricing and Cost Advice →

  • "From the customer perspective, the value was worth it."
  • "I'm very interested in the integration with Puppet. However, my organization doesn't have the funding for something like Puppet right now. If VMware would integrate that feature set (Puppet) into vRA. That would be very awesome."
  • "Better pricing is always handy, but I feel it's at the right price point."
  • "We have seen significant ROI. We used to have physical servers, it took 90 days to get a server, order it, buy it, and get it in. We have it down to 10 minutes, building a server with virtualization, and now that's too slow. So, we let the customer do it at their speed. Therefore, it is pretty much up in a couple of minutes and they have a server."
  • "The solution has helped to increase infrastructure, agility, speed, and provisioning in the time to market."
  • "There is confusion between licensing levels. There are three different licensed versions of vRealize Automation, and there are different things which can happen in each of them."
  • "vRealize automation really should be a front door to the whole VMware suite of products."
  • "As far as value is concerned, it has been essential to our environment. We have been able to deploy VMs quickly and the developers have their own sandbox, so they can spin up and destroy VMs at their own will."
  • More VMware Aria Automation Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
    769,630 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Wiz and Lacework sucks... Buy Orca. 
    Top Answer:Whether or not the cost of third-party Cloud Security tools is justified would depend on your specific needs and budget… more »
    Top Answer:With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment.
    Top Answer:Runecast is a good partner for VMware. Once we have installed it, we can see all the problems and issues. It also has… more »
    Top Answer:Runecast's pricing is cheaper than that of its competitors.
    Top Answer:The product lacks network assessment capabilities. We cannot view our network assets or scan switches, routers, or IPs… more »
    Top Answer:vROP is a virtualization management solution from VMWare. It is efficient and easy to manage. You can find anything you… more »
    Top Answer:When it comes to VMware Aria Automation, you have three choices for free runs Hands-on Lab (HOL) Advanced lab A free… more »
    Top Answer:I was looking at VMware Aria Automation case studies recently and I got the impression that three main kinds of… more »
    Comparisons
    Also Known As
    Runecast Analyzer
    VMware vRealize Automation, vRA, VMware DynamicOps Cloud Suite
    Learn More
    Overview

    Wiz is a highly efficient solution for data security posture management (DSPM), with a 100% API-based approach that provides quick connectivity and comprehensive scans of platform configurations and workloads. The solution allows companies to automatically correlate sensitive data with relevant cloud context, such as public exposure, user identities, entitlements, and vulnerabilities.This integration enables them to understand data accessibility, configuration, usage, and movement within their internal environments.

    Wiz's Security Graph delivers automated alerts whenever risks emerge, allowing teams to prioritize and address the most critical issues before they escalate into breaches. Furthermore, Wiz ensures rapid and agentless visibility into critical data across various repositories, enabling organizations to easily determine the location of their data assets.

    Wiz Features

    Wiz provides various features in the following categories:

    • Agentless Scanning: The solution can scan every layer of a cloud environment without requiring agents, managing the entire process and providing comprehensive visibility.

    • Workflow Integration: Users can create customized workflows within Wiz to identify and assign actions based on urgency, integrating them with ticketing systems for quick and efficient remediation.

    • Vulnerability Management: Wiz's vulnerability management modules provide detailed analytics and visibility across cloud systems, streamlining the manual process of vulnerability discovery. The automated attack path analysis helps identify risks and trace potential points of exposure, allowing users to understand and mitigate them effectively and proactively.

    • CSPM (Cloud Security Posture Management): Wiz's CSPM module offers instant visibility into high-level risks to an enterprise’s cloud environment, covering all accounts without the need for agents.

    • Out-of-the-Box Reporting and Custom Queries: The service supports comprehensive reporting with asset context, allowing users to perform complex custom queries on the solution’s user-friendly interface.

    • Automation Roles and Dashboards: The solution facilitates automation by providing essential roles and dedicated dashboards that enable teams to understand security information quickly, even those with limited expertise.

    • Contextual Risk Evaluation: The service contextualizes the various components contributing to an issue, providing a risk evaluation framework that helps prioritize remediation efforts.

    • Security Graph and Visibility: Wiz's security graph offers visibility across the entire organization, even with multiple accounts, enabling users to understand their environment and assets effectively.

    The Benefits of Wiz

    Wiz offers the following benefits:


    • Comprehensive agentless scanning

    • Effective identification and mitigation of vulnerabilities

    • Streamlined vulnerability management

    • Robust reporting capabilities and customizable queries

    • Enhanced automation and role-based access control

    • Prioritized risk evaluation for efficient remediation

    • Security posture across multiple accounts

    Reviews from Real Users

    Kamran Siddique, VP Information Security at boxed.com, remarks his company has seen a ROI while using Wiz, as it simplifies the process by integrating multiple useful tools into one solution.

    According to a Senior Security Architect at Deliveroo, Wiz has given their company a fresh approach to vulnerability management, as Wiz's native integrations are extremely useful and paramount to the operational success of their platform.



    Get a demo | Wiz

    Runecast is an enterprise IT platform that saves your Security and Operations teams time and resources by enabling a proactive approach to ITOM, CSPM, and compliance. Its agentless scanning capability ensures efficient and in-depth assessment of your infrastructure without imposing additional load on your servers.

    It automates vulnerability assessment, configuration drift management, and continuous compliance – for VMware, Cloud, and Containers.

    Runecast helps reduce operational overhead, increase transparency, and easily assess and remediate infrastructure vulnerabilities. It simplifies managing regulatory compliance, making it an ideal solution for your infrastructure security needs.

    It provides continuous audits against vendor best practices, common security standards, and frameworks such as BSI IT-Grundschutz, CIS, Cyber Essentials, DISA STIG, DORA, Essential 8, GDPR, HIPAA, ISO 27001, KVKK, NIST, PCI DSS, TISAX, VMware Security Hardening Guidelines, and the CISA KEVs catalog.

    Your team can do more with less via a single platform that checks all your cloud infrastructure, for increased visibility, security, and time-saving. Security teams benefit from simplified vulnerability management and regulatory compliance, across multiple standards and technologies. Operations teams are able to reduce operational overheads and increase clarity, enabling you to be proactive and return to the valuable work you want to be doing.

    Runecast has been recognized with Frost & Sullivan's 2023 European New Product Innovation Award in the CNAPP industry for its strong overall performance and commitment to user experience.


    Get to know Runecast: www.runecast.com/

    Read Customer Success Stories: www.runecast.com/case-studies


    VMware Aria Automation is a cloud management tool that allows companies to simplify their cloud experience through a modern automation platform. The solution is designed to deliver self-service clouds, multi-cloud automation with governance, and DevOps-based security and infrastructure management. It helps organizations improve IT agility, efficiency, and productivity through its various features. 

    VMware Aria Automation has multiple use cases that include the following:

    • Self-service multi-cloud: VMware Aria Automation can be used to deliver consistent self-service consumption. Another use case in this area is for delivering infrastructure across VMware Clouds as well as public clouds.

    • Multi-cloud governance: The solution can be used to manage cost, performance, networking, configuration, and security at scale for multi-cloud environments. VMware Aria Automation offers all this with an everything-as-code approach.

    • DevOps for infrastructure: Through VMware Aria Automation, companies can enable a powerful infrastructure as code platform with support for iterative development and infrastructure pipelining.

    • Kubernetes automation: Users can utilize VMware Aria Automation to automate the management of Kubernetes clusters and namespaces with support for vSphere with Tanzu.

    • Security operations: VMware Aria Automation facilitates event-driven automation to deliver full-service IT system compliance enforcement and vulnerability remediation.

    VMware Aria Automation Features

    VMware Aria Automation has various features that allow users to easily perform operations. Some of the solution's capacities include:

    • VMware Cloud agnostic template: This feature allows organizations to use a single cloud template to deploy with Infrastructure as a Code. Deployment options include VMware Cloud as well as major public cloud platforms such as Amazon AWS, Microsoft Azure, Google Cloud, and more.

    • Extensibility and customization: This VMware Aria Automation feature allows users to get full extensibility and customization. This can be achieved through Aria Automation Orchestrator, Action-Based Extensibility (ABX), and built-in integrations with common third-party tools.

    • Self-service multi-cloud: This feature enables users to request and provision infrastructure resources. It can be done across clouds using a unified and consistent Infrastructure as a Service (IaaS) consumption layer, idempotent REST API, and self-service catalog.

    • Centralized policies and governance: VMware Aria Automation offers a feature for users to manage multiple clouds with templatized cloud and policy definition, automated remediation, and cloud environment visibility.

    • Configuration management: Through this feature of the product, day 1 and 2 control can be achieved for virtualized and cloud environments. This can be done with intuitive configuration automation, compliance enforcement, and vulnerability remediation.

    • Infrastructure pipelining: Through this feature, organizations can access user-friendly release automation pipelines. They can be specifically tailored for CI/CD in infrastructure use cases.

    VMware Aria Automation Benefits

    VMware Aria Automation offers its users various benefits. Some of the biggest advantages that the solution brings to companies that utilize it include:

    • VMware Aria Automation provides faster time to market for companies through offloading manual tasks with advanced workflows and agile templating.

    • The solution offers high levels of security and control.

    • This product is suitable for beginners, as it offers a self-service consumption experience for users.

    • VMware Aria Automation accelerates innovation through Infrastructure as Code and DevOps principles.

    • The product provides users with flexibility, as it is compatible with the most popular public cloud solutions.

    • The solution offers fast deployment because of all natively integrated functions.

    Reviews from Real Users

    Awais J., CTO/CEO at a tech services company, likes VMware Aria Automation because it saves a lot of time, provides more visibility, and has extensive automation capabilities.

    An IT consultant at a government rates VMware Aria Automation highly because the product gives you flexibility to analyze and consume resources.

    Sample Customers
    Wiz is the fastest growing software company ever - $100M ARR in 18 months: Wiz becomes the fastest-growing software company ever | Wiz Blog  Discover why companies, including Salesforce, Morgan Stanley, Fox, and Bridgewater choose Wiz as their cloud security partner. Read their success stories here: Customers | Wiz
    Our customers tell us regularly how Runecast benefits CIOs, CISOs, and both Security and Operations teams across verticals with a proactive approach that results in major time and cost savings, increased uptime and security standards complianceSuccess Highlight 75-85% troubleshooting time savings – Kiel Municipal Hospital90% time savings on reactive troubleshooting – Near East Bank90% time savings in upgrade planning– FLEXdata80% reduction in monthly incidents and issues – University of St Andrews78,000 EUR/year minimum annual cost savings – Notino100s of hours saved on security compliance with remediation scripts alone – Kiel Municipal Hospital75% time saved on troubleshooting and root cause analysis – de Volksbank
    Rent-a-Center, Amway, Vistra Energy, Liberty Mutual
    Top Industries
    REVIEWERS
    Computer Software Company38%
    Retailer13%
    Outsourcing Company13%
    Manufacturing Company13%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Financial Services Firm14%
    Manufacturing Company9%
    Government6%
    VISITORS READING REVIEWS
    Computer Software Company25%
    Comms Service Provider17%
    Financial Services Firm13%
    Government11%
    REVIEWERS
    Financial Services Firm18%
    Healthcare Company15%
    Comms Service Provider11%
    Government9%
    VISITORS READING REVIEWS
    Financial Services Firm15%
    Computer Software Company14%
    Government9%
    Manufacturing Company8%
    Company Size
    REVIEWERS
    Small Business17%
    Midsize Enterprise25%
    Large Enterprise58%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise15%
    Large Enterprise65%
    No Data Available
    REVIEWERS
    Small Business12%
    Midsize Enterprise9%
    Large Enterprise79%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise13%
    Large Enterprise69%
    Buyer's Guide
    Cloud Security Posture Management (CSPM)
    April 2024
    Find out what your peers are saying about Palo Alto Networks, Wiz, Microsoft and others in Cloud Security Posture Management (CSPM). Updated: April 2024.
    769,630 professionals have used our research since 2012.

    Runecast is ranked 24th in Cloud Security Posture Management (CSPM) with 1 review while VMware Aria Automation is ranked 15th in Cloud Security Posture Management (CSPM) with 133 reviews. Runecast is rated 9.0, while VMware Aria Automation is rated 8.0. The top reviewer of Runecast writes "Helps with risk assessments for containers, assessing security, and ensuring container compliance". On the other hand, the top reviewer of VMware Aria Automation writes "Allows for a lot of orchestration or customization within our environment to suit our customers". Runecast is most compared with VMware Aria Operations, whereas VMware Aria Automation is most compared with Red Hat Ansible Automation Platform, VMware Aria Operations, vCloud Director, Morpheus and vCenter Orchestrator.

    See our list of best Cloud Security Posture Management (CSPM) vendors.

    We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.