I use Wiz for both my own company and other companies to detect and investigate vulnerabilities and any type of alerts that pop up.
External reviews
747 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Incredible Pace of Feature Updates and Upgrades Make Wiz a Standout Platform
What do you like best about the product?
Wiz delivers a highly satisfying user interface and user experience, offering a clean and intuitive environment. The dashboard features are particularly robust, and the overlays, together with seamless integrations into the cloud console and other services, make it straightforward and extremely useful for triaging, investigating, and responding to alerts. The security graph is a fantastic addition to threat modelling sessions, and the compound issues (e.g. actually exploitable issues) are a great way to prioritise effort and resource allocation.
What do you dislike about the product?
There isn't anything I directly dislike, but the rapid pace of product updates and feature enhancements makes it challenging to fully learn the platform from start to finish. With new features being added so frequently, it can be difficult for small teams who have other responsibilities to keep up.
What problems is the product solving and how is that benefiting you?
We use Wiz as our Cloud-Native Application Protection Platform, focusing on securing the cloud deployments of our products and services. One of the main advantages is its unified platform, which offers multiple views tailored to various roles and use cases. This makes Wiz a powerful, all-in-one solution for our needs.
Effortless Cloud Security and Fast Multi-Platform Visibility
What do you like best about the product?
It helps in making cloud security feel simple. It helps in giving you clear picture of what's going on across all your environment without forcing you to dig through endless dashboard and alerts. The another thing which i liked about it is that how fast it works. You have the ability to get visibility across multiple cloud platform in minutes, that really helps in saving time.
What do you dislike about the product?
Everything is fine but the thing which i didn't like the most is that there are lots of data and functionality and it takes time to fully understand how everything connects.
What problems is the product solving and how is that benefiting you?
It is really helping us in dealing with problems related to cloud security like visibility and context. Earlier it was like in most of the cloud environments, there are tons of assets, configurations and workload spread across different platforms. Wiz helps in bringing everything into one place and shows how different risks are connected.
Visibility and control over cloud workloads
What do you like best about the product?
Wiz stands out for its clear visibility across cloud environments. I like how quickly it highlights risks without forcing me to dig through endless dashboards. The interface feels intuitive, and it connects security findings directly to what matters most, which saves a lot of time. It also integrates smoothly with different cloud platforms, so I don’t have to jump between tools.
What do you dislike about the product?
While Wiz offers impressive capabilities, there are times when the sheer volume of information can be overwhelming, particularly for those who are new to cloud security. Some alerts would benefit from more precise tuning to help minimize unnecessary noise. The platform is making steady improvements, but I would appreciate quicker response times when working with large environments.
What problems is the product solving and how is that benefiting you?
Wiz enables us to effectively manage cloud security risks that would otherwise be difficult to identify manually. Rather than spending countless hours trying to connect the dots ourselves, the platform provides a comprehensive view of misconfigurations, vulnerabilities, and compliance issues across all our environments.
The most significant advantage is the time we save—we're able to quickly focus on the most important issues and cut down on unnecessary distractions. Additionally, Wiz enhances collaboration between our security and DevOps teams, as everyone has access to the same findings and can respond more efficiently. In summary, Wiz simplifies the process of maintaining a robust security posture without hindering business operations.
The most significant advantage is the time we save—we're able to quickly focus on the most important issues and cut down on unnecessary distractions. Additionally, Wiz enhances collaboration between our security and DevOps teams, as everyone has access to the same findings and can respond more efficiently. In summary, Wiz simplifies the process of maintaining a robust security posture without hindering business operations.
Helps eliminate critical issues and streamline threat investigation
What is our primary use case?
What is most valuable?
I am really enjoying the new Threat Detection that they have set up; it is pretty nice. I appreciate the way that it lays out the data.
For some of my customers, I create custom dashboards, charts, or counters, and they're actually really helpful. It's quite easy. They have extensive technical documentation that guides you through the process. Additionally, there are short videos available in each section that demonstrate how to do things.
Wiz has helped my organization achieve zero criticals in its issue queues after a month.
What needs improvement?
It would be better if, when you get an alert type, you are able to view the regex or alert logic without having to dig through all the different options; it is difficult to find where the alert logic is because you have to go to the investigations and then actually find and search for the individual alert. If they just showed the alert logic, that would be really nice.
Also, if there was an easier way for threats to convert those into issues rather than having to set up a custom rule to pull those in as issues, it would be great.
For how long have I used the solution?
I have been using Wiz for just under a year.
What do I think about the stability of the solution?
I have not seen any sort of instability with Wiz; I was curious how their SRE team works because I have not seen a single downtime.
What do I think about the scalability of the solution?
Wiz scales really efficiently; I have worked with some huge companies that have multiple clouds and thousands of workflows, and it all seems to work.
How are customer service and support?
We have account executive people that we talk to for help with Wiz. We talk to them sometimes when new features come out or when we see weird things for the first time. They provide help with writing either new regex alert queries or just helping us figure out how to do something with using the product. They are very helpful and very responsive, and if they cannot get you the answer, then they will find someone to help you; it has been as quick as a turnaround time of one business day, which is really good.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have used CrowdStrike, Prisma, and I think that Wiz is the best out of all of them. Wiz is good at conveying the information for the active threats. The way that it shows you is easier to understand as a human. It is about the same quality of detection, but the presentation is better.
How was the initial setup?
It's really easy. It's very user-friendly, and it's very intuitive.
My team had Wiz set up already when I joined, but I have gone through the whole setup process myself; they let me reset it up. I found that to be pretty simple. It only took about an hour and a half to install Wiz because we do not have a super big system.
Once you set up Wiz, it is good to go. As a security engineer, you need to maintain the alerts and keep that stuff moving. Once we have the system in place, I have not noticed it disconnect any of our accounts. It seems once you set it, it is good to go.
What about the implementation team?
One person can deploy Wiz; they just have to have the right access.
What's my experience with pricing, setup cost, and licensing?
I don't know how much we pay, but I do know that Wiz charges a lot. However, they're offering a good product, so it might be fair. I haven't seen the exact numbers.
What other advice do I have?
I would rate Wiz a 10 out of 10. I really like it.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Fantastic product and team!
What do you like best about the product?
Immediately gained actionable insight into our cloud security posture which was previously considered a 'security black hole'.
The onboarding process was a breeze and the team we are working with know their stuff!
It's very intuitive, even for someone with no prior devsecops experience.
The onboarding process was a breeze and the team we are working with know their stuff!
It's very intuitive, even for someone with no prior devsecops experience.
What do you dislike about the product?
Not an issue with Wiz itself but we are still working on buy-in and utilization from all our devs on the Wiz Code component.
What problems is the product solving and how is that benefiting you?
Lack of visibility into cloud security posture. No dedicated DevSecOps staff.
Engineer-Friendly Cloud Risk Management
What do you like best about the product?
Wiz provides comprehensive visibility across AWS without agents (so really easy to get started). The security graph highlights risks by factoring in exposure, lateral movement, known vulnerabilities, so only the most relevant issues surface. This reduces false positives and alert fatigue compared to for example AWS native Security Hub. Dashboards, root cause analysis, and Terraform fix snippets make it engineer-friendly and actionable, not just a compliance tool.
What do you dislike about the product?
The platform can feel overwhelming at first due to the breadth of features and data. Role-based access and project scoping require careful setup to avoid visibility gaps.
What problems is the product solving and how is that benefiting you?
Wiz solves the lack of visibility across a complex AWS environment. It consolidates security findings, eliminates noise from false positives, and prioritizes risks based on exposure and business impact. This reduces alert fatigue, accelerates remediation, and frees engineers from manual triage. Also supports compliance audits (useful if you have yearly audits), and enables proactive risk reduction.
Single pane of glass for multicloud security
What do you like best about the product?
Security starts with visibility, in WIZ we have the complete inventory, starting from the cloud layer up to the application deployed on workloads, including data and identity. Posture and behavior rules are based on this solid basement.
What do you dislike about the product?
The product is constantly evolving, pretty hard to follow and some changes are a bit not expected.
What problems is the product solving and how is that benefiting you?
We have a single window that is enough for solving 85%+ of questions for a multi-cloud enterprise environment. There is a solution for each stage from code to cloud, and everything is visible in a single console.
Wiz is helping us better secure our company
What do you like best about the product?
Visibility and Team Ownership: Setting up projects and dashboards has helped our teams take ownership of their areas of the organization.
Risk Prioritization: We know exactly what to work on because Wiz helps identify assets with external exposure, vulnerabilities, data findings, misconfigurations, etc.
Solve issues, not just identify them: This is where I think Wiz has the secret sauce so to speak. Not only can it identify issues in your environment, but generating code fixes or steps how to remediate an issue makes it much easier for development teams to solve.
Setup: Integrations are seamless, easy to implement and work right away.
Dashboard: Allows you to quickly check each day the status of your environment and what needs to be tackled next.
Support Team: Support is fast and has a ton of helpful documents to assist you in the need arises.
Risk Prioritization: We know exactly what to work on because Wiz helps identify assets with external exposure, vulnerabilities, data findings, misconfigurations, etc.
Solve issues, not just identify them: This is where I think Wiz has the secret sauce so to speak. Not only can it identify issues in your environment, but generating code fixes or steps how to remediate an issue makes it much easier for development teams to solve.
Setup: Integrations are seamless, easy to implement and work right away.
Dashboard: Allows you to quickly check each day the status of your environment and what needs to be tackled next.
Support Team: Support is fast and has a ton of helpful documents to assist you in the need arises.
What do you dislike about the product?
Custom Dashboards: The board views right now are limited to some predefined queries. While very good and useful. I would like to see this expanded in the future to allow more customizations.
Some of the views and issues do require some time in seat being in the application. If you want your dev team to be in the console, you will need to provide some training or use the integrations to send the information to them elsewhere.
Some of the views and issues do require some time in seat being in the application. If you want your dev team to be in the console, you will need to provide some training or use the integrations to send the information to them elsewhere.
What problems is the product solving and how is that benefiting you?
Lack of Visibility and Context: It can be hard to know exactly what is going on in your cloud environments and that's where Wiz has shined for us. Integrating from our code repository to our cloud service provides us with a really cool security graph that shows potential attack paths. The context of not only a vulnerability or exploit in your environment, but seeing how it impacts your organization is huge.
Overwhelming Security Alerts and "Alert Fatigue": While Wiz doesn't completely remove false positives, my team knows when alerts come in, it means action is needed.
Slow Remediation and Collaboration Issues: Remediation steps provided directly to the engineering teams shortens investigation time and allows our team to actually resolve issues rather than Jira tickets sitting in a backlog.
Vulnerability Management: Connecting to our code repository we can instantly create PRs to update packages in our repositories.
Overwhelming Security Alerts and "Alert Fatigue": While Wiz doesn't completely remove false positives, my team knows when alerts come in, it means action is needed.
Slow Remediation and Collaboration Issues: Remediation steps provided directly to the engineering teams shortens investigation time and allows our team to actually resolve issues rather than Jira tickets sitting in a backlog.
Vulnerability Management: Connecting to our code repository we can instantly create PRs to update packages in our repositories.
CIO review on Wiz
What do you like best about the product?
Wiz is intuitive, easy to use, and gives clear visibility into our environment while saving time with smart automation
What do you dislike about the product?
At times, Wiz can feel a bit overwhelming with the amount of data it surfaces, and some advanced features take time to fully understand. More streamlined reporting and customization options would make it even better
What problems is the product solving and how is that benefiting you?
Wiz helps us identify security risks across our cloud environment in real time, from misconfigurations to vulnerabilities. By having a unified view and automated prioritization, we can address the most critical issues faster and reduce risk. This saves time for the team, improves compliance, and strengthens overall security posture
Wiz's Product Expansion And Its Impact On Cloud Security
What do you like best about the product?
1- The way Wiz proactively gives us threat info, especially those alerts that come with ready-to-use searches to see if we're affected, has been super helpful for finding and fixing important weaknesses fast. It's now just part of what our security team does every day.
2- The querying in Wiz, based on KQL, is seriously strong and flexible. Being able to create our own specific searches means our team can really dig deep and spot anomalies in our environment that we wouldn't be able to do otherwise.
3- It's cool to see Wiz moving into other areas like Wiz Code and Defend. It shows they're not standing still and could become a central place for all our cloud security tools, which would be awesome.
2- The querying in Wiz, based on KQL, is seriously strong and flexible. Being able to create our own specific searches means our team can really dig deep and spot anomalies in our environment that we wouldn't be able to do otherwise.
3- It's cool to see Wiz moving into other areas like Wiz Code and Defend. It shows they're not standing still and could become a central place for all our cloud security tools, which would be awesome.
What do you dislike about the product?
1 - Even though it's mostly comprehensive, the support for Google Cloud isn't quite as good as it is for AWS in some specific things, like how it handles tags and finds leftover domain names. It also feels like when we ask for GCP improvements, they don't always get get the attention they deserve.
2 - Most of the support folks we've dealt with have been fantastic, even helping us with things beyond what we originally asked. But with how fast Wiz is growing, we've noticed a slight dip in how quickly they get back to us sometimes, and the quality of the answers a be a bit hit or miss now and then.
2 - Most of the support folks we've dealt with have been fantastic, even helping us with things beyond what we originally asked. But with how fast Wiz is growing, we've noticed a slight dip in how quickly they get back to us sometimes, and the quality of the answers a be a bit hit or miss now and then.
What problems is the product solving and how is that benefiting you?
Wiz enhances our security posture by providing a valuable complement to our existing tools. Its risk-based approach is particularly beneficial, allowing us to prioritize and address the most critical issues within our cloud environment. Furthermore, we leverage Wiz to streamline our regulatory reporting obligations. The seamless integration with Jira has significantly simplified our workflows, and its connectivity with our XDR and SIEM platforms enables efficient threat identification and triage by our security operations team
showing 11 - 20