Wiz review

Wiz is the strongest choice here when most of your assets live in public cloud. Its vulnerability management scans cloud workloads without agents, using a catalog Wiz puts at more than 120,000 vulnerabilities across over 40 operating systems. Findings are placed on the Wiz Security Graph, so a vulnerable package on an internet-exposed machine with admin permissions ranks above the same package on an isolated test box. Wiz can also ingest results from other scanners, pen tests, SAST and DAST tools to build one queue across cloud, code and on premises, and it assigns owners through Wiz Projects and CMDB links. The Threat Center flags workloads affected by vulnerabilities exploited in the wild. The drawbacks are price transparency and fit. Wiz does not publish prices, and it is built as a cloud security platform, so a company with mostly on-premises Windows machines will get more from Tenable, Qualys or ManageEngine.

Who it is for

Cloud-first companies on AWS, Azure or Google Cloud that want vulnerabilities ranked by exposure, identity access and data sensitivity.

Price

See vendor pricing (USD check pending).

US price check pending. See the vendor pricing page.

Key features

• Agentless cross-cloud scanning with a catalog of 120,000+ vulnerabilities across 40+ operating systems
• Third-party scanner aggregation for cloud, code and on-premises findings
• Context from the Wiz Security Graph and external exposure validation
• Owner assignment through Wiz Projects and CMDB integration
• Threat Center for emerging threats exploited in the wild

Strengths and weaknesses

• Strength: Agentless setup reaches full cloud coverage quickly
• Strength: Prioritization uses network exposure, identity and data context
• Strength: Can centralize findings from other scanners and pen tests
• Weakness: No public pricing
• Weakness: On-premises coverage depends on the Sensor and third-party data
• Weakness: Priced for cloud security programs, not small IT teams

Key facts

• Vulnerability catalog: 120,000+ vulnerabilities, 40+ operating systems
• Scanning: Agentless, plus optional Wiz Sensor
• Coverage: Cloud, code, on premises via third-party aggregation
• Pricing: Quote only

Where it ranks

Wiz is No. 8 in our Best Vulnerability Management Software verdict.