698 Wiz Reviews
Overall Review Sentiment for Wiz
Log in to view review sentiment.
We've been using Wiz Essentials for about a year now and it's proving one of those rare security products that genuinely solves a problem rather than just creating new ones. It's quick to implement, simple to use, doesn't require security specialists or need the team to go on endless training courses to master and makes the vulnerability management problem actually manageable. Review collected by and hosted on G2.com.
Not much, it's expensive but probably no more than it's competitors and they're willing to negotiate. Review collected by and hosted on G2.com.
Wiz takes the context of the workload into account when determining criticality. This lets us focus our efforts on the areas of biggest impact first. They've developed new and useful features at a blazing pace and respond to customer feedback. We pointed out that a development package we were using wasn't being detected during our initial Proof of Concept and they added support for it within a week. They also have an excellent API and CLI that we have integrated into our development pipelines for custom workflows. Review collected by and hosted on G2.com.
There is a lot of information available in the portal and can be overwhelming to new users. It is important to create custom dashboards to scope the necessary information for specific teams/workloads. Review collected by and hosted on G2.com.

1. Visual Dashboard: The visual board provided by Wiz is exceptional. It allows us to see all issues and vulnerabilities across our AWS and Azure platforms at a glance. This intuitive visualization has been crucial for quickly identifying and prioritizing issues.
2. Vulnerability Resolution: During our use of Wiz, we identified 17 critical and 36 high vulnerabilities within our system. Thanks to Wiz's detailed insights and actionable recommendations, we have successfully resolved all these vulnerabilities. As a result, our resistance to malicious attacks has improved significantly.
3. Support and Flexibility: The support and flexibility of the Wiz product are top-notch. From day one, the Wiz team introduced their product and the tools they offer to scan our system. As a Senior Cloud Engineer, I frequently reached out to Wiz support via email, and they consistently provided timely and helpful responses to resolve any issues I encountered. Review collected by and hosted on G2.com.
1. Unified Solutions: Some issues came with generic solution options instead of personalized ones.
2. Lack of Quick Scan Option: After fixing platform issues, there is no option for a quick scan of the system in the Wiz board. Scanning goes once in a day. And not twice. There is no option to customize timeline.
3. Customer Support Options: There is no call line or live chat for customer support, which is not a significant problem but could be improved. Review collected by and hosted on G2.com.

Wiz stands out in the crowded CNAAP and CSPM market due to its innovative graph-based approach to security, ruthless prioritization of critical risks, and ability to provide comprehensive visibility across numerous cloud environments. Not only do these key features allow us to identify and remediate vulnerabilities more efficiently than with traditional tools, but Wiz's agentless architecture and intuitive interface make it remarkably easy to deploy and manage across our complex infrastructure. Within a short time frame, we achieved full visibility without any operational overhead, allowing our security team to quickly identify critical vulnerabilities and address them promptly. Review collected by and hosted on G2.com.
The are a little slow in adding support for new compliance frameowkrs. Even though adding support for new compliance frameworks takes time, Wiz's commitment to providing top-notch support once it's available demonstrates their dedication to meeting our evolving needs. Review collected by and hosted on G2.com.
*User Interface: Wiz is a complex tool with many features, the user interface is exceptionally well put together considering the amount of data and features it must glue together
*Breadth and Accuracy: Wiz is able to tie together disparate cloud presences in a complete way, allowing for easy querying across multiple environments
*Rapid Development: Wiz evolves quickly and new features appear rapidly
*Help Center: AI and up-to-date documentation are incredibly userful
*Integrations and Automations: The ability to tie event triggered automations to a myriad of systems out-of-the-box is extremely helpful.
*Flexibility: The ability to both see the logic and create/modify/suppress any check in the system is incredibly powerful. Review collected by and hosted on G2.com.
*Cost: Wiz is expensive
*Licensing: Wiz moves rapidly, and sometimes features are shifted between licenses, meaning a feature in preview could be moved to a different license once GA'd, which has occasionally caused confusion and caught us off guard Review collected by and hosted on G2.com.
After more then 2 years of managing and deploying Wiz platform on our company i can say that this is one of the best in class cloud security products .
Integration and ease of total implementation compare to other vendors was amazing.
the new features that Wiz deploying to the product is very fast.
Customer support (specialy the tech sales team ) are top in compare to other vendors as well. Review collected by and hosted on G2.com.
Only thing i can think about is adding more exclusions capabilities to the Issues and Policies for K8s.
Granularity is very important on large scale of deployments. Review collected by and hosted on G2.com.
Integrating Wiz was complete in under an hour. Customer support is extremely responsive and is able to assist without having to escalate across multiple departments. The platform is simple to use by even low level engineering staff and the options for managing platform RBAC are second to none. The API explorer is an incredible feature for custom development and the integrations with third party platforms are second to none. We sincerely appreciate the time they've spent in assisting us with implementation services and support. Review collected by and hosted on G2.com.
Nothing notable, only positive experiences. Review collected by and hosted on G2.com.
As an azure cloud user we appreciate greatly the added value over Azure advisor. It allows us to prioritize vulnerabilities and focus on those with the highest risk.
We also see that, although already a lot of functionality exists, a constant flow of new features are being added, all of this implemented with a single click.
We also love the regular followup meetings and feel we are heard and our needs are really what they need. With NIS2 coming up it really becomes something crucial in managing our assets. Review collected by and hosted on G2.com.
Wiz is activated on a subscription which is an all or nothing approach. Although this seems the right way to do, a more granular approach would be better manageable from a timing and budget perspective. Review collected by and hosted on G2.com.
The all around ease of use for Wiz has stood out since day one. From deployment to configuration of cloud setting to now the upgrading of those setting. Wiz has continued to shine and impress. I'm tasked with getting users onboarded and acclimated to Wiz, and this has been a breeze. The logical point and click nature of Wiz has made for a seamless transition from other tools. Review collected by and hosted on G2.com.
There's not much to dislike, but I can point to the lack of reporting. Analyzing the number of remediated alerts month to month for executive summaries is a very manual task. Review collected by and hosted on G2.com.

Wiz has proven to be an invaluable asset in our cybersecurity toolkit. One of the best features for us is the dashboard overview that presents actionable insights that have a direct, measurable impact on our overall security posture using their "Toxic Three" formula. Not only does it tell you what is wrong, but it also explains why it is an issue and proposes a solution including relevant instructions. This approach allows our team to prioritize the real important and critical issues without getting bogged down by a noisy alert system. It is really easy to create a dashboard of widgets that you deem most important and use that to display on a dedicated monitor.
We especially appreciate the rapid anomaly detection capabilities. It consistently identifies unusual patterns or behaviors in our environment with remarkable speed and accuracy, enabling us to respond swiftly to potential threats.
An other feature that has proven valuable is the compliance posture reporting. As we pursue SOC 2 certification, and want to maintain several already achived cerifications, these reports have been instrumental in guiding our compliance efforts. They provide a clear, comprehensive view of our current compliance status, highlighting areas that need attention and offering specific recommendations for improvement. This has streamlined our certification process considerably.
We where pleasantly surprised by how easy it was to implement and intigrate Wiz into our environment. Together with a dedicated customer support agent we've had our whole enviroment monitored in a couple of hours. Review collected by and hosted on G2.com.
While the "Toxic Three" feature helps prioritize critical issues, the general vulnerability findings page can still be quite noisy. This is somewhat inherent to the nature of comprehensive vulnerability scanning, but further refinement in this area would be appreciated.
The ability to mark findings or rules for future ignoring is useful, but the process isn't always consistent. Sometimes it prompts for a reason (which is helpful for audits), while other times it simply ignores the rule without explanation.
The same goes for marking findings as resolved. Most often you can mark a finding as resolved and allowing you to connect a (Jira) ticket and add some additional information. Other times it can only be resolved by making sure the scanner does not detect the issue anymore, effectifly solving the issue, which is beneficial but not always possible. Review collected by and hosted on G2.com.