Snyk and Wiz Code compete in the cloud security domain, focusing on application security. Snyk tends to have the upper hand in integration with development workflows, while Wiz Code is favored for its comprehensive security offerings.
Features: Snyk provides real-time vulnerability scanning, integration with CI/CD pipelines, and developer-friendly tools. Wiz Code offers robust threat intelligence, comprehensive visibility in multi-cloud environments, and advanced threat detection capabilities.
Ease of Deployment and Customer Service: Snyk ensures straightforward deployment in various development environments with responsive support. Wiz Code's deployment is more complex but accompanied by detailed guidance and strong support.
Pricing and ROI: Snyk offers a competitive pricing model, focused on cost-effectiveness for smaller teams with efficient security integration. Wiz Code, despite higher costs, delivers greater ROI for enterprises requiring advanced security features.
The solution provides a good ROI, especially for regular customers, offering discounts for three-year licenses.
I don't think the tool in itself is very capable of doing that, but we have XSOAR and other tool integrations done on the platform, so this can be accomplished.
I can see that Snyk saves the costs of hiring security developers for vulnerability scanning and security checks, as that responsibility is now managed by Snyk.
Wiz Code allows us to scan all accounts within minutes.
Now, with the security graph automatically correlating findings, critical issues are identified in 30 minutes, resulting in a 90 percent plus reduction in investigation effort.
If I make it a high priority, they have resolved one query within 20 minutes.
If local Indian support cannot resolve an issue, global tech support aligns promptly within the agreed SLA.
Fast response times and knowledgeable staff who understand the intricacies of the system.
Our long-standing association has ensured smooth communication, resulting in favorable support experiences and satisfactory issue resolution.
Their response time aligns with their SLA commitments.
We could understand the implementation of the product and other features without the need for human interaction.
When we initiate a case for Wiz Code customer support, they immediately respond and contact us to help reduce that issue and address any possibilities.
They've set up regular connects with the team, they share new updates, and they want to get feedback in terms of what we think could be done differently.
the response time or RTO is longer than expected, indicating where they need to improve.
For stability, scalability, mean time to response, and potential incident investigation improvements, I would give it a nine or probably even a ten.
Onboarding endpoints and assets on Cortex Cloud by Palo Alto Networks is very easy.
The platform is able to auto-shut certain resources that are not in use through the agentless scan feature.
Snyk allows for scaling across large organizations, accommodating tens of thousands of applications and over 60,000 repositories.
Snyk is very scalable and can handle my organization's growth and changing needs.
Till now, we did not face any scaling issues and I did not hear of any.
In terms of cloud environment scalability, this is where Wiz Code generally excels, being built to handle thousands of AWS accounts, multi-cloud environments, and millions of cloud resources.
We use Wiz Code dashboards and queries daily to identify vulnerabilities.
My impression of Cloud Runtime Security in stopping attacks in real-time is that I have never had an issue where it has let something through, causing an outage or concerns to the customer.
However, now in Cortex Cloud, I have not seen any lag or buffer.
My evaluation of how stable and reliable Cortex Cloud by Palo Alto Networks is very positive.
The best part is that their entire solution is built on APIs, allowing for easy integration without a codeless approach.
From the CNAPP focus, it has been serving me exceptionally with zero failure rate since I've been using it.
Wiz Code is stable, and we can customize it according to our requirements.
Regarding the generative AI security tool, I know for sure it's Agentic.
The solution is quite premium in cost compared to alternatives such as Wiz.
There is not a clear MSP model compared to other vendors such as CrowdStrike.
It lacks the ability to select branches on its Web UI, forcing users to rely on CLI or CI/CD for that functionality.
The inclusion of AI to remove false positives would be beneficial.
As we are moving toward GenAI, we expect Snyk to leverage AI features to improve code scanning findings.
Governance is the area where Wiz Code actually shines; for large enterprises, governance is not just finding vulnerabilities; it includes ownership, accountability, exceptions, policies, risk acceptance, and auditability.
If a particular vulnerability is compromised, it could be a low severity, but if it's compromised, what business impact does it have?
When discussing IaC policies, you want to ensure engineers cannot merge anything non-compliant to your environment.
The solution is costly, with high-end capabilities suitable for enterprises.
Today, it is smart and easy to calculate the licenses.
Snyk is recognized as the cheapest option we have evaluated.
After negotiations, we received a special package with a good price point.
Snyk is less expensive.
If you are a small scale enterprise organization, you probably would not pay such a hefty amount of money to protect your organization.
Wiz Code scans your containers twice, first during runtime and then during shift-left when you build the Kubernetes manifest, which causes Wiz Code to charge separately for running the agent on the containers to give runtime posture, as well as for scanning images in the environment during shift-left.
I would say the pricing is not too high.
AI/ML aids in anticipating remediation for misconfigurations and vulnerabilities, and automatic remediation can be easily configured.
Cortex Cloud by Palo Alto Networks has reduced the time spent on incident investigations, and if I had to estimate, I would say it has cut our investigation time in half.
This simplifies the management of shared responsibility among different people and entities, allowing you to use one single tool instead of having dozens of different tools to orchestrate and integrate.
Our integration of Snyk into GitHub allows us to automatically scan codebases and identify issues, which has improved efficiency.
Snyk helps detect vulnerabilities before code moves to production, allowing for integration with DevOps and providing a shift-left advantage by identifying and fixing bugs before deployment.
Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients.
Wiz Code takes CNAPP to the next level by offering AppSec capabilities on top of CSPM functionality.
Wiz Code is a platform that serves most of these features as a single entity, which has definitely reduced the time for triaging the security aspects of vulnerabilities and helps in overall innovation for the team.
Since using Wiz Code, we have reduced the number of our vulnerabilities by 50%, criticals by 90%, so we are very satisfied with it.
| Product | Mindshare (%) |
|---|---|
| Snyk | 2.1% |
| Cortex Cloud by Palo Alto Networks | 1.1% |
| Wiz Code | 1.0% |
| Other | 95.8% |


| Company Size | Count |
|---|---|
| Small Business | 7 |
| Midsize Enterprise | 1 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 10 |
| Large Enterprise | 23 |
| Company Size | Count |
|---|---|
| Small Business | 2 |
| Midsize Enterprise | 2 |
| Large Enterprise | 14 |
Cortex Cloud by Palo Alto Networks enhances cloud security with features like AI/ML threat detection and automated remediation, ensuring real-time protection and efficient management across cloud environments.
Cortex Cloud by Palo Alto Networks offers comprehensive cloud security posture management and runtime protection. It reduces manual tasks and accelerates incident investigation through advanced threat detection and AI-driven anomaly detection. With integration to the MITRE ATT&CK framework, it boosts threat response while reducing incident resolution time. Although users find the UI complex and pricing high, its capabilities in securing AWS, Azure, and other environments, as well as its potential integration with CyberArk, emphasize its enterprise-ready design for cloud transformation across diverse industry sectors.
What are the key features of Cortex Cloud by Palo Alto Networks?Cortex Cloud by Palo Alto Networks is deployed across industries like telecom, BFSI, and manufacturing for robust cloud security. It's leveraged for detecting misconfigurations and vulnerabilities, aiding cloud transformation and compliance with standards such as GDPR and NIST. The integration across cloud infrastructures, including AWS and Azure, supports policy creation and threat management strategies for diverse enterprises.
Snyk excels in integrating security within the development lifecycle, providing teams with an AI Trust Platform that combines speed with security efficiency, ensuring robust AI application development.
Snyk empowers developers with AI-ready engines offering broad coverage, accuracy, and speed essential for modern development. With AI-powered visibility and security, Snyk allows proactive threat prevention and swift threat remediation. The platform supports shifts toward LLM engineering and AI code analysis, enhancing security and development productivity. Snyk collaborates with GenAI coding assistants for improved productivity and AI application threat management. Platform extensibility supports evolving standards with API access and native integrations, ensuring comprehensive and seamless security embedding in development tools.
What are Snyk's standout features?
What benefits can users expect?
Industries leverage Snyk for security in CI/CD pipelines by automating checks for dependency vulnerabilities and managing open-source licenses. Its Docker and Kubernetes scanning capabilities enhance container security, supporting a proactive security approach. Integrations with platforms like GitHub and Azure DevOps optimize implementation across diverse software environments.
Wiz Code is a cutting-edge tool designed to enhance business processes by offering dynamic solutions tailored to meet advanced technological demands. It delivers actionable insights and streamlines operations, making it an indispensable asset for businesses aiming for efficiency.
Renowned for its innovation, Wiz Code addresses complex business challenges through its robust features. With its adaptability, it assists organizations in optimizing workflows and improving productivity. By integrating advanced analytics, it offers unrivaled accuracy and speed, empowering decision-makers to act swiftly and confidently. Its broad array of functionalities ensures that companies can scale their operations while minimizing costs, thus optimizing overall performance.
What are the key features of Wiz Code?Industries implementing Wiz Code see streamlined operations, particularly in finance, healthcare, and logistics. In finance, it optimizes transaction processing and compliance checks. Healthcare providers rely on it for patient management and data analysis, while logistics companies benefit from improved supply chain management and inventory tracking. Its flexibility allows it to fit seamlessly into these sectors, driving efficiency and fostering growth.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.