6smarketersSoftware
Home/Security/Vulnerability Management/Wiz

Wiz

Vulnerability Management

Visit websiteCompare
★★★★☆ 4.7 / 5 on G2 · 4.7 on Capterra (700 G2 reviews)
4.7 / 5
G2 rating, 700 reviews [source]
2020
Founded [source]
CNAPP
Agentless cloud [source]
Graph
Attack paths [source]

Quick facts

CategoryCloud security (CNAPP)
VendorWiz
Founded2020
Starts atAnnual quote
Best forCloud security and exposure
DeploymentAgentless (cloud)
Free planDemo / assessment
IntegrationsAWS, Azure, GCP, Kubernetes, security stack
G2 rating4.7 / 5
Capterra rating4.7 / 5

What is Wiz?

Wiz is the fast growing cloud security platform (CNAPP), agentlessly finding vulnerabilities, misconfigurations and risks across cloud, with a graph that prioritises real attack paths, loved by cloud teams. Founded in 2020 and one of the fastest growing security companies ever, it connects agentlessly to cloud environments (AWS, Azure, Google Cloud, Kubernetes) and builds a security graph of the whole cloud, finding vulnerabilities, misconfigurations, exposed secrets, identity risks and more, and crucially correlating them to show the real attack paths and toxic combinations that create genuine risk, so teams fix what truly matters. Loved by cloud and security teams for its agentless coverage, prioritisation and ease, Wiz is a leader in cloud security and exposure. For cloud security and exposure, Wiz is a leading choice.

Wiz's distinction is agentless, graph based cloud security that prioritises real attack paths, with remarkable ease and adoption. By connecting agentlessly and building a graph of the cloud, it gives broad coverage without agents and, uniquely, correlates issues into the attack paths and toxic combinations that create real risk, cutting through alert noise, which cloud teams love. That agentless breadth, attack path prioritisation and ease drove its rapid rise and set it apart.

Wiz at a glanceWiz is the fast growing cloud security platform (CNAPP) with agentless scanning and attack path prioritisation [Wiz]. It holds a 4.7 out of 5 rating across 700 reviews on G2 and 4.7 on Capterra, loved by cloud teams.

Who Wiz is best for

Wiz is best for organisations running in the cloud (AWS, Azure, Google Cloud, Kubernetes) that want broad, agentless cloud security and exposure, finding vulnerabilities, misconfigurations and risks and prioritising by real attack paths, with ease and fast time to value. It suits cloud security and exposure. It is a weaker fit for organisations focused on traditional on premise infrastructure VM, where Tenable or Qualys fit, endpoint led VM, where CrowdStrike fits, or the simplest SMB external scanner, where Intruder fits.

Key features

The core strengths are agentless connection to cloud (AWS, Azure, Google Cloud, Kubernetes), a security graph of the whole cloud, detection of vulnerabilities, misconfigurations, exposed secrets and identity risks, and attack path and toxic combination prioritisation that shows real risk. Wiz offers broad CNAPP coverage, ease, and fast deployment. Its agentless breadth, attack path prioritisation and ease are its defining advantages.

Wiz pricing

Wiz is priced on an annual subscription by cloud footprint (workloads or resources) and quoted, typically an enterprise investment reflecting its breadth and value, with assessments available. Pricing suits cloud running organisations and is negotiated. Costs scale with cloud footprint. Get details via the Wiz site.

Integrations and ecosystem

Wiz integrates agentlessly with AWS, Azure, Google Cloud and Kubernetes, and with ticketing, CI/CD, SIEM and the security stack, with APIs. Its deep cloud integrations and security stack connections, which let it cover the whole cloud agentlessly and feed prioritised risk into workflows, are a signature strength and a reason for its rapid adoption.

Wiz and attack path prioritisation

Agentless coverage with attack path prioritisation is the signature strength: Wiz connects agentlessly and builds a graph of the cloud, then correlates vulnerabilities, misconfigurations, secrets and identity into the real attack paths and toxic combinations that create genuine risk, so teams cut through noise and fix what truly matters. For cloud teams wanting that, this is the main reason to choose Wiz.

Ease of use and support

Wiz is among the highest rated security tools, praised for agentless ease, fast time to value, attack path prioritisation and support, which drove its rapid growth. Its G2 reviews highlight agentless coverage, prioritisation and ease, with being cloud focused (not traditional on premise VM) the main consideration.

Is Wiz worth it?

For organisations running in the cloud that want broad, agentless cloud security and exposure with attack path prioritisation and ease, Wiz is an outstanding, top rated choice. The main caution is that it is cloud focused, so organisations centred on traditional on premise infrastructure VM may prefer Tenable or Qualys, endpoint led VM CrowdStrike, and simplest SMB scanning Intruder, but for cloud security and exposure Wiz leads.

Pricing

Wiz (CNAPP)

Custom
annual quote
  • Agentless cloud security
  • Attack path prioritisation
  • Vulnerabilities and misconfigurations

Platform modules

Custom
quote
  • Code to cloud
  • Identity and data security
  • DSPM and more

Pros and cons

Pros

  • Agentless cloud coverage
  • Graph based attack path prioritisation
  • Broad CNAPP (vulns, misconfig, secrets, identity)
  • Fast time to value and ease
  • Among highest rated security tools

Cons

  • Cloud focused, not on premise VM
  • Enterprise priced
  • Not endpoint led like CrowdStrike
  • More than simplest SMB needs

Wiz alternatives

These vulnerability management tools come up most often against Wiz.

Wiz FAQ

What is Wiz used for?
Wiz is used for cloud security (CNAPP): agentlessly connecting to AWS, Azure, Google Cloud and Kubernetes, building a security graph, finding vulnerabilities, misconfigurations, exposed secrets and identity risks, and prioritising by the real attack paths that create genuine risk.
How much does Wiz cost?
Wiz is priced on an annual subscription by cloud footprint (workloads or resources) and quoted, typically an enterprise investment, with assessments available. Get details via the Wiz site.
Why is Wiz popular?
Wiz grew rapidly because it connects to cloud agentlessly for broad coverage without agents, builds a graph that prioritises the real attack paths and toxic combinations that matter (cutting alert noise), and is easy with fast time to value, which cloud teams love.
Wiz vs Tenable, which is better?
Wiz is an agentless cloud security platform (CNAPP) prioritising cloud attack paths, while Tenable is strong in traditional vulnerability and exposure management across infrastructure. Wiz suits cloud security and exposure; Tenable suits broad infrastructure VM, and some use both.
Is Wiz agentless?
Yes. Wiz connects agentlessly to cloud environments, scanning workloads and building a security graph without deploying agents, which gives broad coverage quickly and is a key reason for its popularity and fast deployment.
What is a CNAPP?
A CNAPP (cloud native application protection platform) unifies cloud security capabilities, vulnerability scanning, misconfiguration detection, identity and data security, and more, into one platform. Wiz and Orca Security are leading CNAPPs that cover cloud risk agentlessly.

External links