Try our new research platform with insights from 80,000+ expert users

Wiz pros and cons

Vendor: Wiz

4.5 out of 5

33 reviews
96% willing to recommend

Pros & Cons summary

Wiz offers comprehensive cloud visibility, enabling swift risk assessment and vulnerability prioritization. Its automation reduces tool reliance, though workflow and preventive controls need enhancements. Despite excelling in vulnerability management, its API capabilities and executive reporting require improvement, posing integration challenges. Wiz supports compliance with agentless scanning and graph-based risk prioritization. However, complexities with script and logging integrations and a lack of automation result in high manual effort, particularly affecting leadership assessments and universality across infrastructures.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Wiz provides comprehensive visibility across cloud environments, enabling quick risk assessment and prioritization of vulnerabilities and configurations.

Wiz's integration and automation capabilities reduce the need for multiple tools, consolidating tasks such as security scoring and inventory management.

Wiz excels in vulnerability management, offering timely alerts and detailed security analysis that enhance organizational security posture and reduce alert fatigue.

The agentless scanning and graph-based risk prioritization provide greater insight and strategic value when managing cloud security.

Wiz effectively supports compliance and cloud security posture management through features like policy as code and multi-cloud coverage.

CONS

Wiz's remediation workflow and preventive controls need improvement, particularly in waiting on critical remediations due to cost or other constraints.

There are complexities with script integrations and certain logging integrations, limiting its universality across different infrastructure components.

Executive-level reporting and data reporting in Wiz require enhancements, as the current reports are not user-friendly for leadership evaluation.

Wiz's API capabilities are limited and need maturity, making integration with other systems like Splunk challenging.

Automation in Wiz is lacking, requiring too many human hours for tasks, particularly in areas like FinOps and managing false-positive alerts.

Wiz Pros review quotes

reviewer2041074

CyberSecurity Sr Manager at a retailer with 10,001+ employees

Jun 3, 2024

Out of all the features, the one item that has been most valuable is the fact that Wiz puts into context all the pieces that create an issue, and applies a particular risk evaluation that helps us prioritize when we need to address a misconfiguration, vulnerability, or any issue that would put our environment into risk.

Read full review

reviewer2059842

Director Information Security at a computer software company with 501-1,000 employees

Dec 22, 2022

The vulnerability management modules and the discovery and inventory are the most valuable features. Before using Wiz, it was a very manual process for both. After implementing it, we're able to get all of the analytics into a single platform that gives us visibility across all the systems in our cloud. We're able to correspond and understand what the vulnerability landscape looks like a lot faster.

Read full review

reviewer1534569

Chief Information Security Officer (CISO) at a outsourcing company with 501-1,000 employees

Feb 23, 2023

The CSPM module has been the most effective. It was easy to deploy and covered all our accounts through APIs, requiring no agents. Wiz provides instant visibility into high-level risks that we need to address.

Read full review

Free Report: Wiz Reviews and More

Learn what your peers think about Wiz. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.

880,315 professionals have used our research since 2012.

reviewer2121129

Senior Security Architect at Deliveroo

Mar 6, 2023

The product supports out-of-the-box reporting with context about the asset and allows us to perform complex custom queries on UI.

Read full review

reviewer2129682

Senior Information Security Engineer at a financial services firm with 1,001-5,000 employees

Mar 15, 2023

The automation roles are essential because we ultimately want to do less work and automate more. The dashboards are easy to read and visually pleasing. You can understand things quickly, which makes it easy for our other teams. The network and infrastructure teams don't know as much about security as we do, so it helps to have a tool that's accessible and nice to look at.

Read full review

reviewer2130933

Sr. Manager AVP - Vuln Management and Threat Intelligence at a computer software company with 201-500 employees

Mar 23, 2023

The solution is very user-friendly.

Read full review

KS

Kamran Siddique

VP Information Security at boxed.com

Mar 22, 2023

The first thing that stood out was the ease of installation and the quick value we got out of the solution.

Read full review

MA

Assistant Vice President at a tech vendor with 10,001+ employees

Mar 23, 2023

Our most important features are those around entitlement, external exposure, vulnerabilities, and container security.

Read full review

EA

InfoSec Engineer at Cotiviti

Apr 3, 2023

I like Wiz's reporting, and it's easy to do queries. For example, it's pretty simple to find out how many servers we have and the applications installed on each. I like Wiz's security graph because you can use it to see the whole organization even if you have multiple accounts.

Read full review

JB

Director at Cloud Dynamix

Feb 7, 2024

The security baseline and vulnerability assessments is the valuable feature.

Read full review

Show 10 more reviews (out of 32)

Wiz Cons review quotes

reviewer2041074

CyberSecurity Sr Manager at a retailer with 10,001+ employees

Jun 3, 2024

We wish there were a way, beyond providing visibility and automated remediation, to wait on a given remediation, due to a critical aspect, such as the cost associated with a particular upgrade... We would like to see preventive controls that can be applied through Wiz to protect against vulnerabilities that we're not going to be able to remediate immediately.

Read full review

reviewer2059842

Director Information Security at a computer software company with 501-1,000 employees

Dec 22, 2022

The only small pain point has been around some of the logging integrations. Some of the complexities of the script integrations aren't supported with some of the more automated infrastructure components. So, it's not as universal. For example, they have great support for cloud formation and other services, but if you're using another type of management utility or governance language for your infrastructure-as-code automation components, it becomes a little bit trickier to navigate that.

Read full review

reviewer1534569

Chief Information Security Officer (CISO) at a outsourcing company with 501-1,000 employees

Feb 23, 2023

Wiz's reporting capabilities could be refined a bit. They are making headway on that, but more executive-style dashboards would be nice. They just implemented a community aspect where you can share documents and feedback. This was something users had been requesting for a while. They are listening to customer feedback and making changes.

Read full review

Free Report: Wiz Reviews and More

Learn what your peers think about Wiz. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.

880,315 professionals have used our research since 2012.

reviewer2121129

Senior Security Architect at Deliveroo

Mar 6, 2023

We would like to see improvements to executive-level reporting and data reporting in general, which we understand is being rolled out to the platform.

Read full review

reviewer2129682

Senior Information Security Engineer at a financial services firm with 1,001-5,000 employees

Mar 15, 2023

The reporting isn't that great. They have executive summaries, but it's only a compliance report that maps all current issues to specific controls. Whether you look at one subscription or project, regardless of the size, you will get a multipage report on how the issues in that account map to that control. Our CSO isn't going to read through that. He won't filter that out or show that to his leadership and say, "Here's what we're doing." It isn't a helpful report. They're working on it, but it's a poor executive summary.

Read full review

reviewer2130933

Sr. Manager AVP - Vuln Management and Threat Intelligence at a computer software company with 201-500 employees

Mar 23, 2023

The remediation workflow within the Wiz could be improved.

Read full review

KS

Kamran Siddique

VP Information Security at boxed.com

Mar 22, 2023

The only thing that needs to be improved is the number of scans per day.

Read full review

MA

Assistant Vice President at a tech vendor with 10,001+ employees

Mar 23, 2023

One significant issue is that the searches are case-sensitive, so finding a misconfigured resource can become very challenging.

Read full review

EA

InfoSec Engineer at Cotiviti

Apr 3, 2023

Given the level of visibility into all the cloud environments Wiz provides, it would be nice if they could integrate some kind of mechanism to better manage tenants on multiple platforms. For example, let's say that some servers don't have an application they need, such as an antivirus. Wiz could include an API or something to push those applications out to the servers. It would be great if you could remedy these issues directly from the Wiz platform.

Read full review

JB

Director at Cloud Dynamix

Feb 7, 2024

We're looking at some of the data compliance stuff that they've got Jon offer. I know they're looking at container security, which we gonna be looking at next.

Read full review

Show 10 more reviews (out of 32)

Related questions

39

How would you compare Wiz vs Lacework?

63

AWS Cloud Security Posture tool - has anyone used either Wiz or Ermetic cloud security products and can compare them to AWS Security Hub?

90

Which tool is best for CNAPP: Wiz or Orca?

134

How to minimize false positives for PII and PCI around different data systems across the globe?

33

When evaluating Cloud-Native Application Protection Platforms (CNAPP), what aspect do you think is the most important to look for?

44

Why is a CNAPP (Cloud-Native Application Protection Platform) important?

38

What CNAPP solution do you recommend for a hybrid cloud?

57

Why are Cloud-Native Application Protection Platforms (CNAPP) tools important for companies?

46

When evaluating Cloud-Native Application Protection Platforms (CNAPP) solutions, what aspect do you think is the most important to look for?

191

Why is Cloud-Native Application Protection Platforms (CNAPP) important for companies?