Try our new research platform with insights from 80,000+ expert users

Vanta vs Wiz comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Vanta
Ranking in Compliance Management
3rd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
6
Ranking in other categories
Compliance Consulting (1st), Data Governance (13th)
Wiz
Ranking in Compliance Management
2nd
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
22
Ranking in other categories
Vulnerability Management (2nd), Container Security (2nd), Cloud Workload Protection Platforms (CWPP) (1st), Cloud Security Posture Management (CSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (2nd), Data Security Posture Management (DSPM) (1st), Cloud Detection and Response (CDR) (1st)
 

Mindshare comparison

As of July 2025, in the Compliance Management category, the mindshare of Vanta is 11.3%, down from 21.3% compared to the previous year. The mindshare of Wiz is 30.1%, up from 21.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Compliance Management
 

Featured Reviews

Anupam Dutta - PeerSpot reviewer
Helps us maintain compliance with standards like SOC 2 and various data policies, but the customer support needs improvement
It helps us track the compliance of the components listed in our partner's directory. We can also check if the password manager, XML, and three log policies have been properly implemented on the desktop. We use JEM Cloud, which is a SaaS solution, and sometimes it experiences access issues. With Vanta, we can work on resolving these issues and ensuring policy compliance. Vanta also helps us maintain compliance with standards like SOC 2 and various data policies, which are essential for our documentation and communication requirements, ultimately ensuring enterprise software policy compliance. In my role, which primarily involves IT responsibilities, I often deal with various policies. There are instances where specific policies, especially those related to quality, may not be implemented correctly. This primarily occurs with mainframes and devices owned by particular users. In such cases, Vanta helps us enable these policies on the devices and assign them to the relevant users. It also highlights when certain policies, such as version 86.x, are not assigned through SAP. Vanta provides guidance on configuring and mitigating these issues. Additionally, it helps us with GitHub account provisioning and deprovisioning, as well as managing GitHub and Google Workspace Flex. We also use the 1Password password manager, which Vanta assists in overseeing.
Pietro Villivà - PeerSpot reviewer
Useful for security assessment and maintaining correct security posture
The tool keeps improving on a weekly basis. Wiz enters into a lot of partnerships with other technologies. I don't have any idea about the improvements needed in the tool at the moment. For me, Wiz is a very complete product, but it is not the perfect one. Other technologies are better for our customers' specific use cases. A possible way to grow the tool is by introducing new functionality or features. In the future, the tool can introduce an on-prem infrastructure or platform. Not having an on-prem version can be an obstacle for customers who have a large workload in an on-prem environment. The onboarding can be done in five minutes or five to ten minutes. Then, there is the configuration, and it depends on the type of the use case of the customer. There is a customer that has simple use cases for whom the onboarding can be done in four to eight hours a day. If there are some customers with a lot of use cases and a lot of different cloud providers, more time is needed. In general, we don't need more than five days to deploy the tool, even in the case of a very complex architecture and hybrid cloud environment. To deploy the tool, we need to have access to the account of the customer, and Wiz is a stuff that we need to make with the customer. We do the onboarding together. The customer creates the correct authorization in the cloud platform and gives us the key to connect to the platform, and then the platform connector starts and begins to collect information.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Vanta would be the time savings from the automation and the continuous compliance monitoring once set up."
"They integrate into New Relic as a performance monitoring tool."
"The most valuable feature of Vanta is its prebuilt control frameworks."
"It helps us track the compliance of the components listed in our partner's directory. We can also check if the password manager, XML, and three log policies have been properly implemented on the desktop."
"Task management and vendor assurance are the most valuable features. It is also an easy tool to use."
"The product has provided automated security controls for our cloud provider. It helps to automate security checks. Vanta offers a list of things that can be done to achieve ISO 27001 compliance."
"The security baseline and vulnerability assessments is the valuable feature."
"The product supports out-of-the-box reporting with context about the asset and allows us to perform complex custom queries on UI."
"The CSPM module has been the most effective. It was easy to deploy and covered all our accounts through APIs, requiring no agents. Wiz provides instant visibility into high-level risks that we need to address."
"I like Wiz's reporting, and it's easy to do queries. For example, it's pretty simple to find out how many servers we have and the applications installed on each. I like Wiz's security graph because you can use it to see the whole organization even if you have multiple accounts."
"A valuable feature is that Wiz helps in identifying vulnerabilities."
"The tool is very powerful in nature."
"Wiz offers greater visibility and more in-depth findings in terms of configuration, misconfiguration, and vulnerabilities."
"Wiz saves time by validating a network misconfiguration by not only looking at the cloud asset configuration but also by testing if a port that is stated to be open is actually open."
 

Cons

"Currently, Vanta's user access review module is still in development, and we've been giving them continuous feedback to help them improve that."
"They have an AI generator for the system description for SOC 2, however, the outline is a little sketchy."
"Scalability could be improved."
"The main area for improvement in Vanta is the user interface's refresh rate."
"There is a delay with customer support and they are unsure of the answers we need."
"Some of the tool's automated tests do not work the way it should."
"The APIs are currently quite limited and not very mature, which makes integration with Splunk difficult."
"In Brazil, the cost is a significant issue due to the currency exchange rate."
"Wiz's reporting capabilities could be refined a bit. They are making headway on that, but more executive-style dashboards would be nice. They just implemented a community aspect where you can share documents and feedback. This was something users had been requesting for a while. They are listening to customer feedback and making changes."
"Given the level of visibility into all the cloud environments Wiz provides, it would be nice if they could integrate some kind of mechanism to better manage tenants on multiple platforms. For example, let's say that some servers don't have an application they need, such as an antivirus. Wiz could include an API or something to push those applications out to the servers. It would be great if you could remedy these issues directly from the Wiz platform."
"Not having an on-prem version can be an obstacle for customers who have a large workload in an on-prem environment."
"We are still analyzing its behavior as we are in the midst of the implementation."
"The only small pain point has been around some of the logging integrations. Some of the complexities of the script integrations aren't supported with some of the more automated infrastructure components. So, it's not as universal. For example, they have great support for cloud formation and other services, but if you're using another type of management utility or governance language for your infrastructure-as-code automation components, it becomes a little bit trickier to navigate that."
"The solution's container security could be improved."
 

Pricing and Cost Advice

"Vanta is expensive."
"The pricing is fair and comparable to their competitors. The cost seems to be going up, which is a concern. There are potential savings from consolidating tools, but we're uncertain how Wiz's pricing will change over time."
"The cost of the other solutions is comparable to Wiz."
"If one is cheap and ten is expensive, I rate the tool's price as a five out of ten."
"The pricing is fair. Some of the more advanced features and functionalities and how the tiers are split can be somewhat confusing."
"I wish the pricing was more transparent."
"Based on the features and capabilities, the product pricing seems reasonable."
"The pricing seems pretty simple. We don't have to do a lot of calculations to figure out what the components are. They do it by enabling specific features, either basics or advanced, which makes it easy to select."
"Wiz is a moderately priced solution, where it is neither cheap nor costly."
report
Use our free recommendation engine to learn which Compliance Management solutions are best for your needs.
859,687 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
21%
Financial Services Firm
9%
University
8%
Comms Service Provider
5%
Financial Services Firm
15%
Computer Software Company
15%
Manufacturing Company
10%
Healthcare Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Vanta?
The most valuable feature of Vanta is its prebuilt control frameworks.
What needs improvement with Vanta?
Every product has a lot of areas to improve. They have an AI generator for the system description for SOC 2, for example, however, the outline is a little sketchy. The system description has to hav...
What is your primary use case for Vanta?
We're trying to get SOC 2 compliance, and we're trying to get HIPAA compliance.
What do you like most about Wiz?
With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment.
What is your experience regarding pricing and costs for Wiz?
This feedback is not based on much experience yet, as we have only conducted POV or POC.
What needs improvement with Wiz?
In Wiz, if there is one vulnerability that occurs multiple times, it is listed only once. However, even if it is a single vulnerability in the same category, it repeats multiple times. This feature...
 

Comparisons

 

Overview

 

Sample Customers

Care Directives, Shortcut , Nayya, Heizenrader, Treasury Prime
Wiz is the fastest growing software company ever - $100M ARR in 18 months: Wiz becomes the fastest-growing software company ever | Wiz Blog  Discover why companies, including Salesforce, Morgan Stanley, Fox, and Bridgewater choose Wiz as their cloud security partner. Read their success stories here: Customers | Wiz
Find out what your peers are saying about Vanta vs. Wiz and other solutions. Updated: June 2025.
859,687 professionals have used our research since 2012.