Skybox Security Suite and Wiz compete in the network and cloud security category. Wiz seems to have the upper hand due to its strong cloud security posture management, threat intelligence, and risk prioritization.
Features: Skybox Security Suite is known for its firewall and network configuration compliance, scalability, and vulnerability management with features like offline attack simulation and extensive vendor support. It includes firewall assurance, vulnerability control, and network path analysis. Wiz excels in cloud security posture management, offering threat intelligence and risk prioritization. It provides visibility across cloud environments, combining detection for vulnerabilities and misconfigurations, leveraging an advanced CNAPP platform.
Room for Improvement: Skybox needs a fully web-based interface for improved accessibility and usability, change management enhancements, and better reporting. Wiz could improve reporting with executive dashboards and refine security features for enhanced cross-cloud visibility. API integration and support for on-demand scanning are areas for development.
Ease of Deployment and Customer Service: Skybox Security Suite is mainly on-premises, requiring substantial setup and lacking a modern web interface, affecting deployment. Wiz offers more flexibility with its focus on the public and hybrid cloud, allowing straightforward deployment. Skybox's customer service sometimes requires escalation, while Wiz's support is responsive, integrating customer feedback efficiently.
Pricing and ROI: Skybox Security Suite is pricey but offers ROI through its comprehensive features, benefiting larger networks with high licensing costs. Wiz's pricing is higher-end but justified by its robust cloud security, providing value across environments with moderate upfront costs and potential tool consolidation benefits.
We have seen ROI from Wiz and we continued to see value in Wiz.
I think we're reaching the point where we'll see a return on investment, and we'll be there by the end of the year.
We estimate a cost reduction of around 35% to 50%, or even more, due to consolidating our security management into one platform.
A significant issue was contacting support after hours on the weekends.
On a scale from 1 to 10, I would give Wiz's support a 10.
The vendor was readily available to assist us over calls, clarifying both technical aspects and theoretical insights.
If I were to put Wiz support on a scale from one to ten, I would give them a ten.
One issue I faced with scalability was the transition from Skybox Security Suite's 6500 platform to the 7500 series due to licensing costs becoming prohibitive.
We have deployed Wiz in three organizations on AWS, each with approximately 70 to 80 accounts, totaling more than 120 accounts.
Scalability-wise, I rate the solution a ten out of ten.
Our environment quadrupled in size. We didn’t have to make any adjustments or configuration changes; it just accommodated the growth.
The stability of Wiz has been good, with no downtime, bugs, or glitches.
Stability-wise, I rate the solution an eight to nine out of ten.
The solution is very stable.
Reporting could have been improved, and feature requests often were not implemented.
Only the licensing part of Skybox had an edge. We were not renewing the licenses of Skybox every year, but in the case of other tools, we would have to renew if we wanted to use those tools.
It would be better if something more attractive or similar useful information found in AlgoSec was available.
We would like to see preventive controls that can be applied through Wiz to protect against vulnerabilities that we're not going to be able to remediate immediately.
One significant area for improvement would be increasing automation. While they excel at identifying issues, we need assistance in minimizing the human hours required for tasks.
It's critical for our team to demonstrate the tool's value.
From a commercial perspective, AlgoSec is more expensive compared to Skybox Security Suite.
The pricing became prohibitive when transitioning between the 6500 and 7500 series models.
We are paying 250k per year.
In some cases, it has a very aggressive price, so very cheap.
I don’t think there’s anyone else out there offering the same level, scale, or efficiency.
The tool successfully helped in preventing vulnerabilities and breaches.
Skybox Security Suite's network modeling and path analysis is a good feature when we need to check regarding the connectivity.
The most helpful feature is the firewall analyzer.
The ability to scan every layer without agents is a huge selling point because we're multi-agent.
The feature leads to minimal false positives and a low volume of alerts, which is highly valuable for our operations.
It's highly customizable, allowing us to manage many custom features effectively.
| Product | Mindshare (%) |
|---|---|
| Wiz | 6.4% |
| Skybox Security Suite | 0.6% |
| Other | 93.0% |
| Company Size | Count |
|---|---|
| Small Business | 21 |
| Midsize Enterprise | 4 |
| Large Enterprise | 21 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 9 |
| Large Enterprise | 23 |
Skybox Security Suite provides network path analysis, firewall assurance, change management, and vulnerability control. It supports diverse security operations with automation and threat insights through a comprehensive dashboard, offering scalability in large networks and integration with various vendors.
Skybox Security Suite excels in network visualization, firewall rule management, compliance checks, and vulnerability management. It enables cybersecurity teams to audit firewall configurations, ensure compliance with standards like NIST, and identify security gaps. It simplifies security operations for complex network environments with effective integration and optimization features. Despite its high pricing, the suite's automation capabilities, data extraction ease, and extensive threat insights are critical for network infrastructure optimization. Areas for improvement include a web interface, enhanced reporting and automation, broader vendor support, and improved customer support and integration with tools and devices.
What are the key features of Skybox Security Suite?Skybox Security Suite is utilized across industries for its robust network visualization, compliance, and vulnerability management capabilities. Financial services focus on auditing and firewall management to meet stringent regulatory standards. Healthcare relies on it for vulnerability monitoring and patient data protection. Energy sectors benefit from its change management and threat insight features to secure large and diverse infrastructures.
Wiz is a highly efficient solution for data security posture management (DSPM), with a 100% API-based approach that provides quick connectivity and comprehensive scans of platform configurations and workloads. The solution allows companies to automatically correlate sensitive data with relevant cloud context, such as public exposure, user identities, entitlements, and vulnerabilities.This integration enables them to understand data accessibility, configuration, usage, and movement within their internal environments.
Wiz's Security Graph delivers automated alerts whenever risks emerge, allowing teams to prioritize and address the most critical issues before they escalate into breaches. Furthermore, Wiz ensures rapid and agentless visibility into critical data across various repositories, enabling organizations to easily determine the location of their data assets.
Wiz provides various features in the following categories:
Agentless Scanning: The solution can scan every layer of a cloud environment without requiring agents, managing the entire process and providing comprehensive visibility.
Workflow Integration: Users can create customized workflows within Wiz to identify and assign actions based on urgency, integrating them with ticketing systems for quick and efficient remediation.
Vulnerability Management: Wiz's vulnerability management modules provide detailed analytics and visibility across cloud systems, streamlining the manual process of vulnerability discovery. The automated attack path analysis helps identify risks and trace potential points of exposure, allowing users to understand and mitigate them effectively and proactively.
CSPM (Cloud Security Posture Management): Wiz's CSPM module offers instant visibility into high-level risks to an enterprise’s cloud environment, covering all accounts without the need for agents.
Out-of-the-Box Reporting and Custom Queries: The service supports comprehensive reporting with asset context, allowing users to perform complex custom queries on the solution’s user-friendly interface.
Automation Roles and Dashboards: The solution facilitates automation by providing essential roles and dedicated dashboards that enable teams to understand security information quickly, even those with limited expertise.
Contextual Risk Evaluation: The service contextualizes the various components contributing to an issue, providing a risk evaluation framework that helps prioritize remediation efforts.
Security Graph and Visibility: Wiz's security graph offers visibility across the entire organization, even with multiple accounts, enabling users to understand their environment and assets effectively.
Wiz offers the following benefits:
Comprehensive agentless scanning
Effective identification and mitigation of vulnerabilities
Streamlined vulnerability management
Robust reporting capabilities and customizable queries
Enhanced automation and role-based access control
Prioritized risk evaluation for efficient remediation
Security posture across multiple accounts
Kamran Siddique, VP Information Security at boxed.com, remarks his company has seen a ROI while using Wiz, as it simplifies the process by integrating multiple useful tools into one solution.
According to a Senior Security Architect at Deliveroo, Wiz has given their company a fresh approach to vulnerability management, as Wiz's native integrations are extremely useful and paramount to the operational success of their platform.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
