# Best Cloud Infrastructure Entitlement Management (CIEM) Software for Medium-Sized Businesses

*By [Lauren Worth](https://research.g2.com/insights/author/lauren-worth)*


Products classified in the overall Cloud Infrastructure Entitlement Management (CIEM) category are similar in many regards and help companies of all sizes solve their business problems. However, medium-sized business features, pricing, setup, and installation differ from businesses of other sizes, which is why we match buyers to the right Medium-Sized Business Cloud Infrastructure Entitlement Management (CIEM) to fit their needs. Compare product ratings based on reviews from enterprise users or connect with one of G2's buying advisors to find the right solutions within the Medium-Sized Business Cloud Infrastructure Entitlement Management (CIEM) category.

In addition to qualifying for inclusion in the Cloud Infrastructure Entitlement Management (CIEM) Software category, to qualify for inclusion in the Medium-Sized Business Cloud Infrastructure Entitlement Management (CIEM) Software category, a product must have at least 10 reviews left by a reviewer from a medium-sized business.






## G2 Grid® for Cloud Infrastructure Entitlement Management (CIEM) Software
![G2 Grid® for Cloud Infrastructure Entitlement Management (CIEM) Software plotting products by satisfaction and market presence](https://www.g2.com/categories/cloud-infrastructure-entitlement-management-ciem/grids.png?focus%5B%5D=146504&focus%5B%5D=20461&focus%5B%5D=123609)
Highlighted products: Wiz, Cortex Cloud, and Orca Security.
Underlying data: [Grid® JSON](https://www.g2.com/categories/cloud-infrastructure-entitlement-management-ciem/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=cortex-cloud&focus%5B%5D=orca-security&segment=mid-market)


## How Many Cloud Infrastructure Entitlement Management (CIEM) Software Products Does G2 Track?
**Total Products under this Category:** 24

### Category Stats (Jul 2026)
- **Average Rating**: 4.55/5 The average rating of products in this category, based on all submitted ratings
- **Top Trending Product**: Orca Security (+0.67%) - Among all products in this category, Orca Security recorded the largest rating increase compared to last month
*Last updated: July 16, 2026*


## How Does G2 Rank Cloud Infrastructure Entitlement Management (CIEM) Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 2,200+ Authentic Reviews
- 24+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.



---

**Sponsored**

### Intruder

Intruder's continuous exposure management platform helps security, IT, and engineering teams stop breaches before they start. By unifying AI penetration testing, attack surface monitoring, cloud security, and vulnerability management in one intuitive platform, Intruder gives stretched teams an always-on security source of truth. Our approach focuses on continuous automated scanning using expertise and agentic solutions to ensure that the findings we deliver are accurate, prioritized by real-world risk, and ready to act on. Founded in 2015 by Chris Wallis, a former ethical hacker turned corporate blue teamer, Intruder is now protecting over 3,000 companies worldwide. Intruder has been awarded multiple accolades, was selected for GCHQ’s Cyber Accelerator, included on Deloitte’s Tech Fast 50 2023 list as the fastest-growing cybersecurity company in the UK and was named in G2’s 2026 Best Software Awards.



[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1006814&secure%5Bchosen_at%5D=2026-07-16T09%3A09%3A54Z&secure%5Bdisplayable_resource_id%5D=2647&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=neighbor_category&secure%5Bplacement_resource_ids%5D%5B%5D=2647&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=27706&secure%5Bresource_id%5D=1006814&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fcloud-infrastructure-entitlement-management-ciem%2Fmid-market&secure%5Btoken%5D=8afece76df2cb0b20c19c3270c861ae82409f2a92ce41e3e3ff9bbd943021a98&secure%5Burl%5D=https%3A%2F%2Fwww.intruder.io%2F%3Futm_source%3Dg2%26utm_medium%3Dp_referral%26utm_campaign%3Dglobal%7Cfixed%7Cg2_clicks_2025&secure%5Burl_type%5D=free_trial)

---

## What Are the Top-Rated Cloud Infrastructure Entitlement Management (CIEM) Software Products in 2026?
### 1. [Wiz](https://www.g2.com/products/wiz-wiz/reviews)
Wiz transforms cloud security for customers – including more than 50% of the Fortune 100 – by enabling a new operating model. With Wiz, organizations can democratize security across the development lifecycle, empowering them to build fast and securely. Its Cloud Native Application Protection Platform (CNAPP) consolidates CSPM, KSPM, CWPP, Vulnerability management, IaC scanning, CIEM, DSPM into a single platform. Wiz drives visibility, risk prioritization, and business agility. Protecting Your Cloud Environments Requires a Unified, Cloud Native Platform. Wiz connects to every cloud environment, scans every layer, and covers every aspect of your cloud security - including elements that normally require installing agents. Its comprehensive approach has all of these cloud security solutions built in. Hundreds of organizations worldwide, including 50 percent of the Fortune 100, to rapidly identify and remove critical risks in cloud environments. Its customers include Salesforce, Slack, Mars, BMW, Avery Dennison, Priceline, Cushman & Wakefield, DocuSign, Plaid, and Agoda, among others. Wiz is backed by Sequoia, Index Ventures, Insight Partners, Salesforce, Blackstone, Advent, Greenoaks, Lightspeed and Aglaé. Visit https://www.wiz.io for more information.


**Average Rating:** 4.7/5.0
**Total Reviews:** 822

**Who Is the Company Behind Wiz?**

- **Seller:** [Wiz](https://www.g2.com/sellers/wiz-76a0133b-42e5-454e-b5da-860e503471db)
- **Company Website:** https://www.wiz.io/
- **Year Founded:** 2020
- **HQ Location:** New York, US
- **Twitter:** @wiz_io (24,733 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/wizsecurity/ (3,383 employees on LinkedIn®)

**Who Uses This Product?**
- **Who Uses This:** CISO, Security Engineer
- **Top Industries:** Financial Services, Computer Software
- **Company Size:** 54% Enterprise, 39% Mid-Market


#### What Are Wiz's Pros and Cons?

**Pros:**

- Features (113 reviews)
- Security (107 reviews)
- Ease of Use (104 reviews)
- Visibility (87 reviews)
- Easy Setup (68 reviews)

**Cons:**

- Improvement Needed (35 reviews)
- Feature Limitations (34 reviews)
- Learning Curve (34 reviews)
- Improvements Needed (29 reviews)
- Complexity (27 reviews)


### What Do G2 Reviewers Say About Wiz?
*AI-generated summary from verified user reviews*

**Pros:**

- Users value the **seamless integration** of Wiz's modules, enhancing visibility and ease of security management across multi-cloud environments.
- Users value the **exceptional security capabilities** of Wiz, enhancing visibility and simplifying compliance in multi-cloud environments.
- Users find Wiz incredibly **easy to use** , with seamless integrations and responsive support enhancing their overall experience.
- Users value the **visibility** Wiz offers, enhancing security posture and prioritizing critical vulnerabilities effectively.
- Users commend the **easy setup** of Wiz, enabling swift integration and effective management across their cloud environment.

**Cons:**

- Users find that **improvement is needed** in Wiz's user interface and reporting capabilities for better overall experience.
- Users note the **feature limitations** of Wiz, indicating the need for enhancements in various technical aspects.
- Users find the **learning curve steep** , requiring time to grasp the UX and interconnected functionalities effectively.
- Users find the **alert tuning experience cumbersome** and suggest improvements for AI capabilities and detection rules.
- Users find the **complexity** of Wiz overwhelming, requiring time and training to navigate its extensive features effectively.

#### What Are Recent G2 Reviews of Wiz?

**"[Wiz Delivers Clear Visibility Into Cloud Risks That Truly Matter](https://www.g2.com/survey_responses/wiz-review-12960477)"**

**Rating:** 4.5/5.0 stars
*— Jason I.*

[Read full review](https://www.g2.com/survey_responses/wiz-review-12960477)

---

**"[Excellent Cloud Risk Visibility and Fast Insights with Wiz](https://www.g2.com/survey_responses/wiz-review-12964571)"**

**Rating:** 4.5/5.0 stars
*— Ruben F.*

[Read full review](https://www.g2.com/survey_responses/wiz-review-12964571)

---



### 2. [Cortex Cloud](https://www.g2.com/products/cortex-cloud/reviews)
Cortex Cloud by Palo Alto Networks, the next version of Prisma Cloud, understands a unified security approach is essential for effectively addressing AppSec, CloudSec, and SecOps. Connecting cloud security and SOC workflows enables teams to achieve holistic visibility, trace risk across the lifecycle, and correlate real-time threat activity with development and runtime contexts. Cortex Cloud is a unified platform built on three core pillars: data integration, AI-driven intelligence, and automation. Now you can safeguard applications, data, and infrastructure across multicloud and hybrid environments with a unified data model that consolidates telemetry from code, runtime, identity, and endpoints, all into a single data source. Empower teams with precise, AI-powered insights and 2200+ machine learning models to identify and stop zero-day threats with real-time advanced threat detection and response. And automate with 1000+ prebuilt playbooks across your cloud stack to reduce manual workloads, accelerate remediations, and cut response times tenfold. Cortex Cloud delivers more than tools—it transforms how organizations secure their cloud environments.


**Average Rating:** 4.1/5.0
**Total Reviews:** 121

**Who Is the Company Behind Cortex Cloud?**

- **Seller:** [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks)
- **Company Website:** https://www.paloaltonetworks.com
- **Year Founded:** 2005
- **HQ Location:** Santa Clara, CA
- **Twitter:** @PaloAltoNtwks (128,951 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/30086/ (22,313 employees on LinkedIn®)

**Who Uses This Product?**
- **Top Industries:** Information Technology and Services, Computer & Network Security
- **Company Size:** 38% Enterprise, 31% Mid-Market


#### What Are Cortex Cloud's Pros and Cons?

**Pros:**

- Ease of Use (49 reviews)
- Features (45 reviews)
- Security (43 reviews)
- Visibility (38 reviews)
- Cloud Integration (34 reviews)

**Cons:**

- Expensive (31 reviews)
- Difficult Learning (30 reviews)
- Learning Curve (29 reviews)
- Pricing Issues (24 reviews)
- Complex Setup (21 reviews)


### What Do G2 Reviewers Say About Cortex Cloud?
*AI-generated summary from verified user reviews*

**Pros:**

- Users find Cortex Cloud highly **user-friendly** , appreciating its intuitive interface and seamless integration for efficient cloud security management.
- Users appreciate the **advanced cloud security features** of Cortex Cloud, effectively identifying vulnerabilities and ensuring compliance.
- Users find the **ease of managing cloud security** with Cortex Cloud invaluable, boosting efficiency and focus.
- Users appreciate the **clear visibility** provided by Cortex Cloud, enhancing management of complex cloud security environments.
- Users value the **ease of integration** of Cortex Cloud, which simplifies cloud security management and enhances workflow efficiency.

**Cons:**

- Users find Cortex Cloud **expensive** , with high licensing costs and potential for escalated pricing based on usage.
- Users find the **difficult learning curve** of Cortex Cloud challenging, especially with hidden features and complex customization.
- Users find the **learning curve steep** for Cortex Cloud, requiring time and effort to achieve optimal settings.
- Users express concerns about **pricing issues** , noting potential high costs and complicated setup affecting overall value.
- Users find the **complex setup** of Cortex Cloud time-consuming and challenging, particularly with fine-tuning policies and navigating interfaces.

#### What Are Recent G2 Reviews of Cortex Cloud?

**"[Cortex Cloud earned it's place before every release.](https://www.g2.com/survey_responses/cortex-cloud-review-13089470)"**

**Rating:** 5.0/5.0 stars
*— Johanna K.*

[Read full review](https://www.g2.com/survey_responses/cortex-cloud-review-13089470)

---

**"[Cortex Cloud Unifies Cloud Security with Real-Time Protection and Smart Prioritization](https://www.g2.com/survey_responses/cortex-cloud-review-12997786)"**

**Rating:** 4.0/5.0 stars
*— Galateya M.*

[Read full review](https://www.g2.com/survey_responses/cortex-cloud-review-12997786)

---



### 3. [Orca Security](https://www.g2.com/products/orca-security/reviews)
The Orca Cloud Security Platform identifies, prioritizes, and remediates risks and compliance issues in workloads, configurations, and identities across your cloud estate spanning AWS, Azure, Google Cloud, Kubernetes, Alibaba Cloud, and Oracle Cloud. Orca offers the industry’s most comprehensive cloud security solution in a single platform — eliminating the need to deploy and maintain multiple point solutions. Orca is agentless-first, and connects to your environment in minutes using Orca’s patented SideScanning™ technology that provides deep and wide visibility into your cloud environment, without requiring agents. In addition, Orca can integrate with third-party agents for runtime visibility and protection for critical workloads. Orca is at the forefront of leveraging Generative AI for simplified investigations and accelerated remediation – reducing required skill levels and saving cloud security, DevOps, and development teams time and effort, while significantly improving security outcomes. As a Cloud Native Application Protection Platform (CNAPP), Orca consolidates many point solutions in one platform, including: CSPM, CWPP, CIEM, Vulnerability Management, Container and Kubernetes Security, DSPM, API Security, CDR, Multi-cloud Compliance, Shift Left Security, and AI-SPM.


**Average Rating:** 4.7/5.0
**Total Reviews:** 298

**Who Is the Company Behind Orca Security?**

- **Seller:** [Orca Security](https://www.g2.com/sellers/orca-security)
- **Company Website:** https://orca.security
- **Year Founded:** 2019
- **HQ Location:** Portland, Oregon
- **Twitter:** @orcasec (4,835 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/35573984/ (515 employees on LinkedIn®)

**Who Uses This Product?**
- **Who Uses This:** Security Engineer, CISO
- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 52% Enterprise, 38% Mid-Market


#### What Are Orca Security's Pros and Cons?

**Pros:**

- Ease of Use (37 reviews)
- Features (33 reviews)
- Security (29 reviews)
- User Interface (22 reviews)
- Visibility (22 reviews)

**Cons:**

- Improvement Needed (15 reviews)
- Feature Limitations (12 reviews)
- Limited Features (10 reviews)
- Missing Features (10 reviews)
- Ineffective Alerts (9 reviews)


### What Do G2 Reviewers Say About Orca Security?
*AI-generated summary from verified user reviews*

**Pros:**

- Users value the **ease of use** of Orca Security, appreciating its straightforward implementation and intuitive navigation.
- Users appreciate the **intuitive interface and powerful reporting** features of Orca Security, enhancing their overall experience.
- Users commend Orca Security for its **comprehensive cloud security capabilities** , providing valuable insights and a seamless experience.
- Users appreciate the **user-friendly interface** of Orca Security, finding it easy to navigate and understand.
- Users value the **incredible visibility** provided by Orca Security, enhancing their cloud security and observability efforts.

**Cons:**

- Users note **significant improvement needed** in module loading speed, documentation access, and CSV export functionality.
- Users find **feature limitations** in Orca Security, highlighting issues with vulnerability reporting and asset scan capabilities.
- Users experience **limited features** in Orca Security, hindering functionality and complicating tasks like report generation.
- Users face **missing features** in Orca Security, including limited compliance modules and export functionality challenges.
- Users experience **ineffective alerts** from Orca Security, leading to confusion and alert fatigue due to overloaded information.

#### What Are Recent G2 Reviews of Orca Security?

**"[Orca Gives Us a Single View of AI Agent Risk Across AWS, Azure, and GCP](https://www.g2.com/survey_responses/orca-security-review-13091849)"**

**Rating:** 5.0/5.0 stars
*— Kevin J.*

[Read full review](https://www.g2.com/survey_responses/orca-security-review-13091849)

---

**"[Orca Unifies AppSec, Cloud, and Agent Context in One Clear View](https://www.g2.com/survey_responses/orca-security-review-13096711)"**

**Rating:** 5.0/5.0 stars
*— Samuel J.*

[Read full review](https://www.g2.com/survey_responses/orca-security-review-13096711)

---


#### What Are G2 Users Discussing About Orca Security?

- [Where is Orca security based?](https://www.g2.com/discussions/where-is-orca-security-based) - 2 comments
- [How much does Orca security cost?](https://www.g2.com/discussions/how-much-does-orca-security-cost) - 1 comment
- [What is ORCA platform?](https://www.g2.com/discussions/what-is-orca-platform) - 1 comment
- [What does Orca Security do?](https://www.g2.com/discussions/what-does-orca-security-do) - 1 comment


## What Is Cloud Infrastructure Entitlement Management (CIEM) Software?

[Cloud Security Software](https://www.g2.com/categories/cloud-security)

## What Software Categories Are Similar to Cloud Infrastructure Entitlement Management (CIEM) Software?

- [Cloud Workload Protection Platforms](https://www.g2.com/categories/cloud-workload-protection-platforms)
- [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance)
- [Cloud Security Posture Management (CSPM) Software](https://www.g2.com/categories/cloud-security-posture-management-cspm)