Try our new research platform with insights from 80,000+ expert users

Vanta vs Wiz comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Vanta
Ranking in Compliance Management
3rd
Average Rating
8.6
Reviews Sentiment
5.3
Number of Reviews
10
Ranking in other categories
Compliance Consulting (1st), Data Governance (11th)
Wiz
Ranking in Compliance Management
1st
Average Rating
9.0
Reviews Sentiment
7.1
Number of Reviews
33
Ranking in other categories
Vulnerability Management (1st), Container Security (2nd), Cloud Workload Protection Platforms (CWPP) (3rd), Cloud Security Posture Management (CSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (1st), Data Security Posture Management (DSPM) (1st), Cloud Detection and Response (CDR) (1st)
 

Mindshare comparison

As of January 2026, in the Compliance Management category, the mindshare of Vanta is 8.1%, down from 14.7% compared to the previous year. The mindshare of Wiz is 19.4%, down from 27.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Compliance Management Market Share Distribution
ProductMarket Share (%)
Wiz19.4%
Vanta8.1%
Other72.5%
Compliance Management
 

Featured Reviews

reviewer2585640 - PeerSpot reviewer
Consultant at a consultancy with 11-50 employees
Compliance workflows have become organized and automation supports ongoing healthcare audits
There are always tons of rooms for improvement for Vanta. I kind of exaggerated a little bit about the policy control. I don't really love the way they handle the revision management of that feature. If I'm on V1 of the policy document and I make some changes to it, then I get rid of V1 and then I re-upload V2. It's not that it keeps a running history of each of the different revisions. A little bit of an issue with that, but workable. I don't really have any negative complaint right now that would be worthwhile expressing. It's just that there's a lot of features. The UI is not super intuitive, but now that I've worked with it for a couple of years, I know how to navigate and get around. Initially, it was a little bit of a struggle understanding how these things would all work.
Marcel Velica - PeerSpot reviewer
Senior Program Manager, Security at Eventbrite
Unified cloud visibility has transformed our risk prioritization and reduced alert fatigue while improving collaboration across security and DevSecOps teams
The standout features of Wiz that make it valuable for me include good multi-cloud environment support, data governance, shadow IT detection, DevSecOps governance, automation, level reporting, threat detection, and good infrastructure detection. Wiz has positively impacted my organization by implementing zero trust authorization, providing good reporting that shows the top attack path, critical assets, overall risk posture, and demonstrating AI and ML workload capabilities towards my team, as well as good infrastructure detection and vulnerability detection accuracy with security posture management at massive scale and identity exposure. There is a massive reduction in risk exposure, immediate visibility across the entire cloud estate, reduced noise and better prioritization, stronger DevSecOps collaboration, continuous compliance instead of ad hoc panic, faster incident response with real context, significant cost savings through tool consolidation, and stronger AI and data governance.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Vanta is its prebuilt control frameworks."
"It helps us track the compliance of the components listed in our partner's directory. We can also check if the password manager, XML, and three log policies have been properly implemented on the desktop."
"They integrate into New Relic as a performance monitoring tool."
"The most valuable feature of Vanta would be the time savings from the automation and the continuous compliance monitoring once set up."
"Vanta has positively impacted my organization by streamlining the whole HITRUST R2 assessment process."
"Vanta's integrations and automated tests have streamlined our SOC 2 compliance and provided a single entry point for addressing risks and failed tests."
"Vanta provides a necessary repository that any compliance expert will look at and recognize right away."
"Task management and vendor assurance are the most valuable features. It is also an easy tool to use."
"I rate Wiz's customer service as ten out of ten."
"The tool is very powerful in nature."
"Wiz can accomplish this and easily provide the total inventory in the cloud, which is crucial when managing large cloud databases or environments such as AWS, Azure, or Google environments, where it's difficult to have one view for all cloud components."
"With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment."
"Wiz has significantly reduced alert fatigue in our organization by grouping together elements that form toxic combinations, allowing us to quickly identify and remediate critical issues instead of chasing isolated alerts from multiple tools."
"The security baseline and vulnerability assessments is the valuable feature."
"If anyone wants to secure their infrastructure, cloud environment, or Kubernetes cluster, I would strongly recommend Wiz as a tool because it is easy to use and user-friendly."
"Wiz offers greater visibility and more in-depth findings in terms of configuration, misconfiguration, and vulnerabilities."
 

Cons

"I would tell others looking into using Vanta to use it for HITRUST E1 and I1 assessments, as the R2 assessments are still a work in progress."
"There is a delay with customer support and they are unsure of the answers we need."
"Scalability could be improved."
"The main area for improvement in Vanta is the user interface's refresh rate."
"They have an AI generator for the system description for SOC 2, however, the outline is a little sketchy."
"Failed tests for device CVEs seem to be cumulative, meaning I have to clear all CVEs before the test will pass, which makes it difficult to resolve the test before the next round of CVEs are published."
"There are connection problems about 50% of the time because of the automated evidence collection."
"Currently, Vanta's user access review module is still in development, and we've been giving them continuous feedback to help them improve that."
"We are still analyzing its behavior as we are in the midst of the implementation."
"Once you get a threat and fix it, to see that fix reflected in Wiz, you have to wait 24 hours. That is something I am not happy with."
"We wish there were a way, beyond providing visibility and automated remediation, to wait on a given remediation, due to a critical aspect, such as the cost associated with a particular upgrade... We would like to see preventive controls that can be applied through Wiz to protect against vulnerabilities that we're not going to be able to remediate immediately."
"Not having an on-prem version can be an obstacle for customers who have a large workload in an on-prem environment."
"Wiz does encounter some glitches similar to other tools in the market; I remember facing certain challenges, such as problems scanning encrypted disks or discrepancies in the findings from already remediated vulnerabilities not reflecting accurately in the tool."
"We noticed some capabilities that were lacking, specifically ignoring some false-positive Issue findings. The good news - with the latest update, this has been resolved."
"The APIs are currently quite limited and not very mature, which makes integration with Splunk difficult."
"The reporting should be improved because until a few months ago, the reports were only in CSV format, which made it difficult to clean up. Wiz tried to improve the reporting process, but it's not as valuable as Tenable."
 

Pricing and Cost Advice

"Vanta is expensive."
"I wish the pricing was more transparent."
"The pricing is fair and comparable to their competitors. The cost seems to be going up, which is a concern. There are potential savings from consolidating tools, but we're uncertain how Wiz's pricing will change over time."
"Based on the features and capabilities, the product pricing seems reasonable."
"If one is cheap and ten is expensive, I rate the tool's price as a five out of ten."
"Regarding pricing, it’s more than $100k because we have a very big infrastructure. Our environment supports around three thousand people, and we offer business-to-client financial services to around one million clients, so we rely heavily on Wiz."
"The pricing seems pretty simple. We don't have to do a lot of calculations to figure out what the components are. They do it by enabling specific features, either basics or advanced, which makes it easy to select."
"Wiz is a moderately priced solution, where it is neither cheap nor costly."
"The pricing is fair. Some of the more advanced features and functionalities and how the tiers are split can be somewhat confusing."
report
Use our free recommendation engine to learn which Compliance Management solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Financial Services Firm
9%
University
8%
Outsourcing Company
6%
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
9%
Healthcare Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise3
Large Enterprise1
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise8
Large Enterprise20
 

Questions from the Community

What do you like most about Vanta?
The most valuable feature of Vanta is its prebuilt control frameworks.
What needs improvement with Vanta?
Failed tests for device CVEs seem to be cumulative, meaning I have to clear all CVEs before the test will pass, which makes it difficult to resolve the test before the next round of CVEs are publis...
What is your primary use case for Vanta?
My use case involves SOC 2 and ISO 27001 compliance.
What do you like most about Wiz?
With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment.
What is your experience regarding pricing and costs for Wiz?
My experience with pricing, setup cost, and licensing for Wiz was through an RFP where they offered us a good price, and the licensing was a flexible solution based on our business.
What needs improvement with Wiz?
I feel there is a delay in detection, though I am uncertain whether this is due to our implementation disadvantage. Wiz can detect all the issues, threats, and security vulnerabilities, but the del...
 

Comparisons

 

Overview

 

Sample Customers

Care Directives, Shortcut , Nayya, Heizenrader, Treasury Prime
Wiz is the fastest growing software company ever - $100M ARR in 18 months: Wiz becomes the fastest-growing software company ever | Wiz Blog  Discover why companies, including Salesforce, Morgan Stanley, Fox, and Bridgewater choose Wiz as their cloud security partner. Read their success stories here: Customers | Wiz
Find out what your peers are saying about Vanta vs. Wiz and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.