No more typing reviews! Try our Samantha, our new voice AI agent.

Wiz pros and cons

Vendor: Wiz

4.4 out of 5

42 reviews
97% willing to recommend

Pros & Cons summary

Wiz offers visibility and risk prioritization through agentless scanning and graph-based insights, identifying vulnerabilities and aiding compliance with security policies as code in deployment pipelines. Its advanced attack path analysis sets it apart, though reporting, API integrations, and real-time detection need improvement. Enhancements in FinOps and user-friendliness for hybrid clouds are necessary. Addressing false positives, duplicate alerts, and automation can further streamline and boost security efficiency.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Wiz provides comprehensive visibility and risk prioritization through agentless scanning and graph-based insights.

It effectively identifies vulnerabilities, configuration issues, and provides guidance for mitigation with actionable insights.

Wiz helps organizations achieve compliance requirements by integrating security policies as code within continuous deployment pipelines.

The platform supports extensive vulnerability management and streamlines security by consolidating multiple tools into a single platform.

Wiz's advanced capabilities in attack path analysis and threat detection distinguish it from other cloud-native application protection platforms (CNAPPs).

CONS

Wiz reporting capabilities and executive dashboards require refinement. Currently, reports are not valuable compared to Tenable, and there is poor executive summary creation.

APIs are limited and immature, complicating integration with tools like Splunk, while integrations with ServiceNow also need enhancement.

There is a need for improving automation to reduce human hours and streamline tasks, as well as enhancing remediation workflows within Wiz.

Wiz should offer better FinOps capabilities and improved user-friendliness when integrating multiple clouds, especially for hybrid cloud scenarios.

Issues with runtime and real-time detection, alongside false positives and duplicate alerts in large environments, need addressing to enhance security efficiency.

Wiz Pros review quotes

CISO at a computer software company with 1,001-5,000 employees

Feb 13, 2026

Wiz distinguished itself immediately in the PoC, surfacing important issues that were entirely missed by both the products we were already using and other CNAPP's that we tested.

Read full review

Senior Program Manager, Security at Eventbrite

Nov 29, 2025

Wiz has positively impacted my organization by implementing zero trust authorization, providing good reporting that shows the top attack path, critical assets, overall risk posture, and demonstrating AI and ML workload capabilities towards my team, as well as good infrastructure detection and vulnerability detection accuracy with security posture management at massive scale and identity exposure.

Read full review

reviewer2796903

Manager at a manufacturing company with 10,001+ employees

Feb 26, 2026

For any organization who want to think of moving to Wiz, the Security Graph feature is amazing and awesome, giving you deeper information than any other tools does and allowing a small security team to manage a massive complex cloud environment without hiring dozens of additional users to look into it.

Read full review

Free Report: Wiz Reviews and More

Learn what your peers think about Wiz. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.

893,244 professionals have used our research since 2012.

Senior Engineer at a insurance company with 10,001+ employees

Apr 24, 2026

Wiz positively impacts my organization, especially since we are in the insurance sector where data security is paramount.

Read full review

Principal Engineer at Aviatrix

Oct 1, 2025

Wiz has significantly reduced alert fatigue in our organization by grouping together elements that form toxic combinations, allowing us to quickly identify and remediate critical issues instead of chasing isolated alerts from multiple tools.

Read full review

E VP And Chief Information Security Officer at Rate

Jan 12, 2026

One of the things that Wiz has done well is that there are no agents for the CSPM, at least from what we are doing, and it is very easy to roll out, easy to configure, maintain, and generally it does what it says it does with few issues.

Read full review

BC

Senior Cloud Infrastructure Engineer at Self-Employed

Apr 30, 2026

Wiz significantly helped with our compliance requirements.

Read full review

MM

Mrinal Madhukar

Senior Engineering Manager, Data & AI at Omnissa

Oct 30, 2025

Wiz has helped me consolidate some tools, as it is not just doing the job of the security tool alone, and we do not need to invest in multiple tools because all aspects such as infrastructure, application, vulnerabilities, and the regular security scoring patterns are in-built into Wiz along with the inventory manager.

Read full review

HV

Technical Specialist at Zensar Technologies

Mar 27, 2026

I have found that Wiz covers all the stages of the software development life cycle; it covers application or code security, DevOps security, and runtime security, and it is a full-fledged CNAPP solution where all the areas within the development and the deployment side are covered.

Read full review

Madhav Shyam Lakhera

Cyber Security Engineer at a consultancy with 10,001+ employees

Dec 6, 2025

One feature I particularly appreciate about Wiz is that, similar to other cloud-native security tools like Microsoft's Defender for Cloud, it allows you to define policies as code and deploy them through a version control system with a continuous deployment pipeline.

Read full review

Show 10 more reviews (out of 41)

Wiz Cons review quotes

CISO at a computer software company with 1,001-5,000 employees

Feb 13, 2026

As for stability, we have seen some issues where our results changed radically from one day to the next, but we had not made radical changes, so we opened a case with support.

Read full review

Senior Program Manager, Security at Eventbrite

Nov 29, 2025

Wiz can be improved with better maturity in code scanning and developer workflows, expanding secret detection to full lifecycle management, stronger IAM across multi-account environments, more transparent attack path scoring and risk modeling, improved AI and ML security scanning, reduced false positives in runtime threat detection, more fine-grained access control and tenant separation, and better integration for serverless workloads.

Read full review

reviewer2796903

Manager at a manufacturing company with 10,001+ employees

Feb 26, 2026

Two percent would be that the loading time is taking a bit longer while loading the graph, and while navigating to other links, that is also taking some time.

Read full review

Free Report: Wiz Reviews and More

Learn what your peers think about Wiz. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.

893,244 professionals have used our research since 2012.

Senior Engineer at a insurance company with 10,001+ employees

Apr 24, 2026

While Wiz provides excellent data and reports, sometimes the suggested fixes for vulnerabilities are not always accurate based on our code compatibility.

Read full review

Principal Engineer at Aviatrix

Oct 1, 2025

One significant area for improvement would be increasing automation. While they excel at identifying issues, we need assistance in minimizing the human hours required for tasks.

Read full review

E VP And Chief Information Security Officer at Rate

Jan 12, 2026

We have an integration with ServiceNow, but Wiz's ServiceNow integration is not the best.

Read full review

BC

Senior Cloud Infrastructure Engineer at Self-Employed

Apr 30, 2026

From a technical perspective, Wiz is excellent, but the pricing is too expensive.

Read full review

MM

Mrinal Madhukar

Senior Engineering Manager, Data & AI at Omnissa

Oct 30, 2025

More or less, Wiz is doing well, but the false alerts at random times would be another area for improvement.

Read full review

HV

Technical Specialist at Zensar Technologies

Mar 27, 2026

Sometimes it is a very big concern and a big headache for the customer because it finds a lot of findings that could be false positives.

Read full review

Madhav Shyam Lakhera

Cyber Security Engineer at a consultancy with 10,001+ employees

Dec 6, 2025

Wiz does encounter some glitches similar to other tools in the market; I remember facing certain challenges, such as problems scanning encrypted disks or discrepancies in the findings from already remediated vulnerabilities not reflecting accurately in the tool.

Read full review

Show 10 more reviews (out of 41)

Related questions

62

How would you compare Wiz vs Lacework?

83

AWS Cloud Security Posture tool - has anyone used either Wiz or Ermetic cloud security products and can compare them to AWS Security Hub?

105

Which tool is best for CNAPP: Wiz or Orca?

275

How to minimize false positives for PII and PCI around different data systems across the globe?

113

When evaluating Cloud-Native Application Protection Platforms (CNAPP), what aspect do you think is the most important to look for?

113

Why is a CNAPP (Cloud-Native Application Protection Platform) important?

118

What CNAPP solution do you recommend for a hybrid cloud?

126

Why are Cloud-Native Application Protection Platforms (CNAPP) tools important for companies?

120

When evaluating Cloud-Native Application Protection Platforms (CNAPP) solutions, what aspect do you think is the most important to look for?

269

Why is Cloud-Native Application Protection Platforms (CNAPP) important for companies?