My organization operates as a service provider for some small companies, so we started working with Wiz. I am not fully confident in discussing how work is going on with Wiz. I am having a training session on how to use the tool.
External reviews
External reviews are not included in the AWS star rating for the product.
CNAPP Rewiew Wiz
Wiz is magically!
Great CSPM and CIEM tool
Great product to use Wiz to identify and drive down vulnerabilities and misconfigurations.
Cloud Security Truumph : Zero Critical issues reached with wiz.io's Support
Easy to use and helps businesses save time
What is our primary use case?
What needs improvement?
There are no major complaints associated with the tool.
As the tool is a good fit for small and medium-sized businesses, the solution should focus on making the product suitable for large-scale businesses.
For how long have I used the solution?
I have been using Wiz for six to seven months.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
I provide the solution for small companies. The tool suits small and medium-sized businesses.
My company did not get to use the product for an enterprise-sized business, but we may try it for large companies if we get an opportunity.
How are customer service and support?
I have not contacted technical support for the solution.
Which solution did I use previously and why did I switch?
I have not worked with any other tools.
How was the initial setup?
One of our company's team members already completed the product's initial setup phase. I just started exploring the tool after that.
What was our ROI?
The tool helps our company save time.
Which other solutions did I evaluate?
Over the other tools in the market, my company started to use Wiz after our clients started to use it based on our recommendation. One of our team managers proposed Wiz, and then we started working on it.
What other advice do I have?
My company has not integrated the product with any other tools. We have just started exploring the product, which we mainly use for Azure-based tools and for detecting vulnerabilities. Actually, one of my other teams in my company has good experience with the tool. I am in the first stage of exploring Wiz.
The tool is very powerful in nature.
It is easy to use the tool.
I recommend the tool to others since it is a user-friendly product.
I have started using the product for any AI-based projects. I am trying to switch over from exchange to security platforms.
I will recommend the tool to other people. It is good to use. I can recommend the tool to anyone.
I have not yet started using the AI features in the tool.
I rate the tool an eight out of ten.
Useful for security assessment and maintaining correct security posture
What is our primary use case?
I use the solution for test and demo environments, and then we deploy the platform's last version for our customers. We use the advanced license type, so we have all the features in the platform.
The tool is used for security assessment and maintaining our customers' correct security posture. We have different types of customers, so there are different types of use cases. But in general, the main need is for the maintenance of cloud security posture.
What is most valuable?
The tool's most valuable feature is its attack path analysis. The feature of the tool for inspecting running containers and the new feature of intelligent artificial intelligence security posture is good. With the attack path analysis, I can see the perfect path of a possible attack, I can see the exposure of different types of resources, and I can stop the attack with the remediation or suggestion of the platform. Regarding the container runtime security, I can see how the container runs and what type of action the container takes during execution. I can take some action to modify the running of the container. For the artificial intelligence security posture, I can see the misconfiguration problem with the security permission that customers give to the platform, like Bedrock or OpenAI, and so on. We can help the customer resolve this problem of data security exposure and so on. All such features are effective in identifying vulnerabilities. The platform allows users to collect information without the need for an install agent. So it's totally agentless, and it is a great feature. I don't need to install an agent, so onboarding the platform is very easy and very speedy.
What needs improvement?
The tool keeps improving on a weekly basis. Wiz enters into a lot of partnerships with other technologies. I don't have any idea about the improvements needed in the tool at the moment.
For me, Wiz is a very complete product, but it is not the perfect one. Other technologies are better for our customers' specific use cases. A possible way to grow the tool is by introducing new functionality or features.
In the future, the tool can introduce an on-prem infrastructure or platform. Not having an on-prem version can be an obstacle for customers who have a large workload in an on-prem environment.
The onboarding can be done in five minutes or five to ten minutes. Then, there is the configuration, and it depends on the type of the use case of the customer. There is a customer that has simple use cases for whom the onboarding can be done in four to eight hours a day. If there are some customers with a lot of use cases and a lot of different cloud providers, more time is needed. In general, we don't need more than five days to deploy the tool, even in the case of a very complex architecture and hybrid cloud environment.
To deploy the tool, we need to have access to the account of the customer, and Wiz is a stuff that we need to make with the customer. We do the onboarding together. The customer creates the correct authorization in the cloud platform and gives us the key to connect to the platform, and then the platform connector starts and begins to collect information.
For how long have I used the solution?
I have been using Wiz since 2023. My company is a service integrator and a partner of Wiz. I use the solution's latest version.
What do I think about the stability of the solution?
It is a stable solution. Stability-wise, I rate the solution an eight to nine out of ten.
What do I think about the scalability of the solution?
Scalability-wise, I rate the solution a ten out of ten.
I don't know the exact number of users because every customer can create a user autonomously on the platform. So, I don't have availability at the moment for the total number of users. We have five customers at the moment, and we have done a lot of PoC during the last two years. I suppose that we will have around 22 different customers. If you need a number, a minimum of 60 users use the tool.
My customers are medium and large enterprises.
How are customer service and support?
The solution's technical support was excellent. We have had excellent communication and availability for any of our needs or questions. They answer quickly, and we have had a great experience with the technical support. I rate the technical support a nine out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
If one is difficult and ten is easy to set up, I rate the product's initial setup phase a nine out of ten.
The solution is deployed on the cloud. In the future, the tool can introduce an on-prem infrastructure or on-prem platform, but at the moment, it is only cloud.
What's my experience with pricing, setup cost, and licensing?
If one is cheap and ten is expensive, I rate the tool's price as a five out of ten. The pricing depends on the customer and the dimension of the environment, whether the customer is strategic or not. I suppose that it is available at a middle price. In some cases, it has a very aggressive price, so very cheap, in order it's expensive. In particular, if the workload is poor, they can't make grid cells, so the price is high, and it is not in terms of real value but in terms of the budget of the customer.
What other advice do I have?
The tool can be used for all customers who don't have a security structure or security team inside because the platform is very easy to use. It is a very useful tool for developer teams that can use the platform without having security knowledge, and the platform helps the developer of code applications. The tool adapts to a use case in which there is a SOC team because of the rich data that the SOC can correlate and manage.
I recommend the tool to companies that use cloud products. Wiz can be integrated with other customer platforms because it enriches information and makes inaction very valuable in terms of security.
I rate the tool as an eight out of ten.
How Wiz Transformed Our Cloud Security Posture
Wiz has been instrumental in helping us monitor, detect, and correct deployment deviations and obsolete resources. Today, it enables us to demonstrate compliance with industry frameworks.
Furthermore, Wiz's user-friendly interface and SaaS-based operation have significantly enhanced our overall experience. We were able to easily deploy Wiz using Terraform and manage 100% of its configuration through code. Whenever we needed assistance, their support team was always there to help. Now,
Wiz serves as our central command center for cloud security, which we consult daily. To ensure the compliance of all our Infrastructure as Code (IaC) deployments, we've integrated Wiz into our CI/CD pipelines.
Overall, dedicated team training is essential for effectively utilizing the tool.
Wiz enables the consolidation of different rules and security postures, providing a holistic view of the cloud environment. This centralized perspective can be effectively communicated back to teams, empowering them with insights into their specific resources and projects.