Try our new research platform with insights from 80,000+ expert users

Vanta vs Wiz comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Vanta
Ranking in Compliance Management
3rd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
6
Ranking in other categories
Compliance Consulting (3rd), Data Governance (12th)
Wiz
Ranking in Compliance Management
1st
Average Rating
9.0
Reviews Sentiment
7.5
Number of Reviews
24
Ranking in other categories
Vulnerability Management (3rd), Container Security (2nd), Cloud Workload Protection Platforms (CWPP) (2nd), Cloud Security Posture Management (CSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (1st), Data Security Posture Management (DSPM) (1st), Cloud Detection and Response (CDR) (1st)
 

Mindshare comparison

As of October 2025, in the Compliance Management category, the mindshare of Vanta is 11.1%, down from 17.4% compared to the previous year. The mindshare of Wiz is 26.9%, up from 25.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Compliance Management Market Share Distribution
ProductMarket Share (%)
Wiz26.9%
Vanta11.1%
Other62.0%
Compliance Management
 

Featured Reviews

Anupam Dutta - PeerSpot reviewer
Helps us maintain compliance with standards like SOC 2 and various data policies, but the customer support needs improvement
It helps us track the compliance of the components listed in our partner's directory. We can also check if the password manager, XML, and three log policies have been properly implemented on the desktop. We use JEM Cloud, which is a SaaS solution, and sometimes it experiences access issues. With Vanta, we can work on resolving these issues and ensuring policy compliance. Vanta also helps us maintain compliance with standards like SOC 2 and various data policies, which are essential for our documentation and communication requirements, ultimately ensuring enterprise software policy compliance. In my role, which primarily involves IT responsibilities, I often deal with various policies. There are instances where specific policies, especially those related to quality, may not be implemented correctly. This primarily occurs with mainframes and devices owned by particular users. In such cases, Vanta helps us enable these policies on the devices and assign them to the relevant users. It also highlights when certain policies, such as version 86.x, are not assigned through SAP. Vanta provides guidance on configuring and mitigating these issues. Additionally, it helps us with GitHub account provisioning and deprovisioning, as well as managing GitHub and Google Workspace Flex. We also use the 1Password password manager, which Vanta assists in overseeing.
Wellington Franham - PeerSpot reviewer
Enhanced security profiling and predictive analysis in diverse industries
We are a partner and develop Wiz opportunities here in Brazil and Latin America. We already have some customers using Wiz as a DSPM platform. We use it in various industries, like retail, where it is used for security profiling and predictive analysis to identify risks. There is also a global…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Vanta is its prebuilt control frameworks."
"The most valuable feature of Vanta would be the time savings from the automation and the continuous compliance monitoring once set up."
"They integrate into New Relic as a performance monitoring tool."
"Task management and vendor assurance are the most valuable features. It is also an easy tool to use."
"It helps us track the compliance of the components listed in our partner's directory. We can also check if the password manager, XML, and three log policies have been properly implemented on the desktop."
"The product has provided automated security controls for our cloud provider. It helps to automate security checks. Vanta offers a list of things that can be done to achieve ISO 27001 compliance."
"Out of all the features, the one item that has been most valuable is the fact that Wiz puts into context all the pieces that create an issue, and applies a particular risk evaluation that helps us prioritize when we need to address a misconfiguration, vulnerability, or any issue that would put our environment into risk."
"The security baseline and vulnerability assessments is the valuable feature."
"Wiz has helped my organization achieve zero criticals in its issue queues after a month."
"The granularity of visibility that the platform provides is the most valuable aspect."
"The product supports out-of-the-box reporting with context about the asset and allows us to perform complex custom queries on UI."
"The tool is very powerful in nature."
"Wiz offers greater visibility and more in-depth findings in terms of configuration, misconfiguration, and vulnerabilities."
"With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment."
 

Cons

"Currently, Vanta's user access review module is still in development, and we've been giving them continuous feedback to help them improve that."
"Scalability could be improved."
"The main area for improvement in Vanta is the user interface's refresh rate."
"Some of the tool's automated tests do not work the way it should."
"There is a delay with customer support and they are unsure of the answers we need."
"They have an AI generator for the system description for SOC 2, however, the outline is a little sketchy."
"We noticed some capabilities that were lacking, specifically ignoring some false-positive Issue findings. The good news - with the latest update, this has been resolved."
"We would like to see improvements to executive-level reporting and data reporting in general, which we understand is being rolled out to the platform."
"The reporting isn't that great. They have executive summaries, but it's only a compliance report that maps all current issues to specific controls. Whether you look at one subscription or project, regardless of the size, you will get a multipage report on how the issues in that account map to that control. Our CSO isn't going to read through that. He won't filter that out or show that to his leadership and say, "Here's what we're doing." It isn't a helpful report. They're working on it, but it's a poor executive summary."
"In Wiz, if there is one vulnerability that occurs multiple times, it is listed only once. However, even if it is a single vulnerability in the same category, it repeats multiple times. This feature can be time-consuming as it requires continuous scrolling."
"In Brazil, the cost is a significant issue due to the currency exchange rate."
"The APIs are currently quite limited and not very mature, which makes integration with Splunk difficult."
"Wiz's reporting capabilities could be refined a bit. They are making headway on that, but more executive-style dashboards would be nice. They just implemented a community aspect where you can share documents and feedback. This was something users had been requesting for a while. They are listening to customer feedback and making changes."
"We're looking at some of the data compliance stuff that they've got Jon offer. I know they're looking at container security, which we gonna be looking at next."
 

Pricing and Cost Advice

"Vanta is expensive."
"The pricing is fair and comparable to their competitors. The cost seems to be going up, which is a concern. There are potential savings from consolidating tools, but we're uncertain how Wiz's pricing will change over time."
"Wiz is a moderately priced solution, where it is neither cheap nor costly."
"The pricing is fair. Some of the more advanced features and functionalities and how the tiers are split can be somewhat confusing."
"The pricing seems pretty simple. We don't have to do a lot of calculations to figure out what the components are. They do it by enabling specific features, either basics or advanced, which makes it easy to select."
"I wish the pricing was more transparent."
"Based on the features and capabilities, the product pricing seems reasonable."
"If one is cheap and ten is expensive, I rate the tool's price as a five out of ten."
"Regarding pricing, it’s more than $100k because we have a very big infrastructure. Our environment supports around three thousand people, and we offer business-to-client financial services to around one million clients, so we rely heavily on Wiz."
report
Use our free recommendation engine to learn which Compliance Management solutions are best for your needs.
868,787 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
20%
Financial Services Firm
9%
University
7%
Comms Service Provider
6%
Financial Services Firm
16%
Computer Software Company
14%
Manufacturing Company
10%
Healthcare Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise6
Large Enterprise11
 

Questions from the Community

What do you like most about Vanta?
The most valuable feature of Vanta is its prebuilt control frameworks.
What needs improvement with Vanta?
Every product has a lot of areas to improve. They have an AI generator for the system description for SOC 2, for example, however, the outline is a little sketchy. The system description has to hav...
What is your primary use case for Vanta?
We're trying to get SOC 2 compliance, and we're trying to get HIPAA compliance.
What do you like most about Wiz?
With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment.
What is your experience regarding pricing and costs for Wiz?
I don't know how much we pay, but I do know that Wiz charges a lot. However, they're offering a good product, so it might be fair. I haven't seen the exact numbers.
What needs improvement with Wiz?
It would be better if, when you get an alert type, you are able to view the regex or alert logic without having to dig through all the different options; it is difficult to find where the alert log...
 

Comparisons

 

Overview

 

Sample Customers

Care Directives, Shortcut , Nayya, Heizenrader, Treasury Prime
Wiz is the fastest growing software company ever - $100M ARR in 18 months: Wiz becomes the fastest-growing software company ever | Wiz Blog  Discover why companies, including Salesforce, Morgan Stanley, Fox, and Bridgewater choose Wiz as their cloud security partner. Read their success stories here: Customers | Wiz
Find out what your peers are saying about Vanta vs. Wiz and other solutions. Updated: September 2025.
868,787 professionals have used our research since 2012.