Try our new research platform with insights from 80,000+ expert users

Wiz pros and cons

Vendor: Wiz

4.5 out of 5

22 reviews
95% willing to recommend

245 followers

Pros & Cons summary

Wiz offers robust context and risk evaluation, prioritizing resolution of vulnerabilities and misconfigurations with agentless CSPM deployment and comprehensive security views through its security graph. It continuously updates vulnerability metrics, providing fresh security snapshots. While offering streamlined analytics, Wiz struggles with limited APIs, immature integrations, and inadequate executive reporting. Searches are case-sensitive, complicating resource identification, and regional cost issues, particularly in Brazil, pose challenges due to currency rates.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Wiz excels in putting issues into context with a specific risk evaluation, aiding in prioritizing misconfigurations and vulnerabilities.

The CSPM module effectively provides instant visibility into high-level risks across accounts without needing agents.

Wiz offers comprehensive reporting and analytics that enable complex custom queries and timely alerts for vulnerabilities.

Granular visibility into network configurations and asset findings allows for powerful attack path analysis and confident security decisions.

Customer service at Wiz is rated highly, offering support that users find exceptionally satisfactory.

CONS

Wiz lacks a way to delay a remediation due to critical factors like cost.

There are challenges with logging and script integrations, affecting universality with infrastructure-as-code automation components.

Search functionality in Wiz is case-sensitive, making resource identification difficult.

APIs are limited and immature, complicating integration with tools like Splunk.

Wiz reports are primarily in CSV format, making data cleanup cumbersome compared to other platforms.

Wiz Pros review quotes

reviewer2129682

Senior Information Security Engineer at a financial services firm with 1,001-5,000 employees

Mar 15, 2023

The automation roles are essential because we ultimately want to do less work and automate more. The dashboards are easy to read and visually pleasing. You can understand things quickly, which makes it easy for our other teams. The network and infrastructure teams don't know as much about security as we do, so it helps to have a tool that's accessible and nice to look at.

Read full review

reviewer2130933

Sr. Manager AVP - Vuln Management and Threat Intelligence at a computer software company with 201-500 employees

Mar 23, 2023

The solution is very user-friendly.

Read full review

KS

Kamran Siddique

VP Information Security at boxed.com

Mar 22, 2023

The first thing that stood out was the ease of installation and the quick value we got out of the solution.

Read full review

Free Report: Wiz Reviews and More

Learn what your peers think about Wiz. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.

856,873 professionals have used our research since 2012.

reviewer2041074

CyberSecurity Sr Manager at a retailer with 10,001+ employees

Jun 3, 2024

Out of all the features, the one item that has been most valuable is the fact that Wiz puts into context all the pieces that create an issue, and applies a particular risk evaluation that helps us prioritize when we need to address a misconfiguration, vulnerability, or any issue that would put our environment into risk.

Read full review

reviewer2059842

Director Information Security at a computer software company with 501-1,000 employees

Dec 22, 2022

The vulnerability management modules and the discovery and inventory are the most valuable features. Before using Wiz, it was a very manual process for both. After implementing it, we're able to get all of the analytics into a single platform that gives us visibility across all the systems in our cloud. We're able to correspond and understand what the vulnerability landscape looks like a lot faster.

Read full review

MA

Assistant Vice President at Genpact - Headstrong

Mar 23, 2023

Our most important features are those around entitlement, external exposure, vulnerabilities, and container security.

Read full review

Mindaugas Dailidonis

Security Solutions Architect - Cloud Security Consultant at a consultancy with 10,001+ employees

Sep 10, 2024

Wiz saves time by validating a network misconfiguration by not only looking at the cloud asset configuration but also by testing if a port that is stated to be open is actually open.

Read full review

Pietro Villivà

Business Line Manager at S2E

Aug 6, 2024

The tool's most valuable feature is its attack path analysis.

Read full review

reviewer1534569

Chief Information Security Officer (CISO) at a outsourcing company with 501-1,000 employees

Feb 23, 2023

The CSPM module has been the most effective. It was easy to deploy and covered all our accounts through APIs, requiring no agents. Wiz provides instant visibility into high-level risks that we need to address.

Read full review

SE

Samuel Egbaiyelo

Manager Cybersecurity Operation at Grant Thornton (US)

May 8, 2025

I rate Wiz's customer service as ten out of ten.

Read full review

Show 10 more reviews (out of 21)

Wiz Cons review quotes

reviewer2129682

Senior Information Security Engineer at a financial services firm with 1,001-5,000 employees

Mar 15, 2023

The reporting isn't that great. They have executive summaries, but it's only a compliance report that maps all current issues to specific controls. Whether you look at one subscription or project, regardless of the size, you will get a multipage report on how the issues in that account map to that control. Our CSO isn't going to read through that. He won't filter that out or show that to his leadership and say, "Here's what we're doing." It isn't a helpful report. They're working on it, but it's a poor executive summary.

Read full review

reviewer2130933

Sr. Manager AVP - Vuln Management and Threat Intelligence at a computer software company with 201-500 employees

Mar 23, 2023

The remediation workflow within the Wiz could be improved.

Read full review

KS

Kamran Siddique

VP Information Security at boxed.com

Mar 22, 2023

The only thing that needs to be improved is the number of scans per day.

Read full review

Free Report: Wiz Reviews and More

Learn what your peers think about Wiz. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.

856,873 professionals have used our research since 2012.

reviewer2041074

CyberSecurity Sr Manager at a retailer with 10,001+ employees

Jun 3, 2024

We wish there were a way, beyond providing visibility and automated remediation, to wait on a given remediation, due to a critical aspect, such as the cost associated with a particular upgrade... We would like to see preventive controls that can be applied through Wiz to protect against vulnerabilities that we're not going to be able to remediate immediately.

Read full review

reviewer2059842

Director Information Security at a computer software company with 501-1,000 employees

Dec 22, 2022

The only small pain point has been around some of the logging integrations. Some of the complexities of the script integrations aren't supported with some of the more automated infrastructure components. So, it's not as universal. For example, they have great support for cloud formation and other services, but if you're using another type of management utility or governance language for your infrastructure-as-code automation components, it becomes a little bit trickier to navigate that.

Read full review

MA

Assistant Vice President at Genpact - Headstrong

Mar 23, 2023

One significant issue is that the searches are case-sensitive, so finding a misconfigured resource can become very challenging.

Read full review

Mindaugas Dailidonis

Security Solutions Architect - Cloud Security Consultant at a consultancy with 10,001+ employees

Sep 10, 2024

We noticed some capabilities that were lacking, specifically ignoring some false-positive Issue findings. The good news - with the latest update, this has been resolved.

Read full review

Pietro Villivà

Business Line Manager at S2E

Aug 6, 2024

Not having an on-prem version can be an obstacle for customers who have a large workload in an on-prem environment.

Read full review

reviewer1534569

Chief Information Security Officer (CISO) at a outsourcing company with 501-1,000 employees

Feb 23, 2023

Wiz's reporting capabilities could be refined a bit. They are making headway on that, but more executive-style dashboards would be nice. They just implemented a community aspect where you can share documents and feedback. This was something users had been requesting for a while. They are listening to customer feedback and making changes.

Read full review

SE

Samuel Egbaiyelo

Manager Cybersecurity Operation at Grant Thornton (US)

May 8, 2025

I cannot recommend Wiz to others until I have a clear understanding of its full capacity and benefits.

Read full review

Show 10 more reviews (out of 21)

Related questions

33

How would you compare Wiz vs Lacework?

86

AWS Cloud Security Posture tool - has anyone used either Wiz or Ermetic cloud security products and can compare them to AWS Security Hub?

120

Which tool is best for CNAPP: Wiz or Orca?

11

How to minimize false positives for PII and PCI around different data systems across the globe?

18

When evaluating Cloud-Native Application Protection Platforms (CNAPP), what aspect do you think is the most important to look for?

26

Why is a CNAPP (Cloud-Native Application Protection Platform) important?

32

What CNAPP solution do you recommend for a hybrid cloud?

24

Why are Cloud-Native Application Protection Platforms (CNAPP) tools important for companies?

18

When evaluating Cloud-Native Application Protection Platforms (CNAPP) solutions, what aspect do you think is the most important to look for?

118

Why is Cloud-Native Application Protection Platforms (CNAPP) important for companies?