# Best Cloud Infrastructure Entitlement Management (CIEM) Software for Medium-Sized Businesses

*By [Lauren Worth](https://research.g2.com/insights/author/lauren-worth)*


Products classified in the overall Cloud Infrastructure Entitlement Management (CIEM) category are similar in many regards and help companies of all sizes solve their business problems. However, medium-sized business features, pricing, setup, and installation differ from businesses of other sizes, which is why we match buyers to the right Medium-Sized Business Cloud Infrastructure Entitlement Management (CIEM) to fit their needs. Compare product ratings based on reviews from enterprise users or connect with one of G2's buying advisors to find the right solutions within the Medium-Sized Business Cloud Infrastructure Entitlement Management (CIEM) category.

In addition to qualifying for inclusion in the Cloud Infrastructure Entitlement Management (CIEM) Software category, to qualify for inclusion in the Medium-Sized Business Cloud Infrastructure Entitlement Management (CIEM) Software category, a product must have at least 10 reviews left by a reviewer from a medium-sized business.






## G2 Grid® for Cloud Infrastructure Entitlement Management (CIEM) Software
![G2 Grid® for Cloud Infrastructure Entitlement Management (CIEM) Software plotting products by satisfaction and market presence](https://www.g2.com/categories/cloud-infrastructure-entitlement-management-ciem/grids.png?focus%5B%5D=146504&focus%5B%5D=20461&focus%5B%5D=123609)
Highlighted products: Wiz, Cortex Cloud, and Orca Security.
Underlying data: [Grid® JSON](https://www.g2.com/categories/cloud-infrastructure-entitlement-management-ciem/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=cortex-cloud&focus%5B%5D=orca-security&segment=mid-market)


## How Many Cloud Infrastructure Entitlement Management (CIEM) Software Products Does G2 Track?
**Total Products under this Category:** 24

### Category Stats (Jul 2026)
- **Average Rating**: 4.54/5 (↓0.01 vs Jun 2026) The average rating of products in this category, based on all submitted ratings
- **Top Trending Product**: Cortex Cloud (+0.75%) - Among all products in this category, Cortex Cloud recorded the largest rating increase compared to last month
*Last updated: July 17, 2026*


## How Does G2 Rank Cloud Infrastructure Entitlement Management (CIEM) Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 2,200+ Authentic Reviews
- 24+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.



---

**Sponsored**

### Upwind

Upwind is the runtime-first cloud security platform that secures your deployments, configurations, and applications by providing real-time visibility from the inside out. We’ve built a unified fabric that maps your environment as it runs - revealing what’s truly at risk, what’s actively happening, and how to respond quickly and effectively. With Upwind, security, dev, and ops teams move faster, stay focused, and fix risks that matter most.



[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1006814&secure%5Bchosen_at%5D=2026-07-17T17%3A23%3A57Z&secure%5Bdisplayable_resource_id%5D=1456&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=neighbor_category&secure%5Bplacement_resource_ids%5D%5B%5D=1456&secure%5Bplacement_resource_ids%5D%5B%5D=2647&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1333227&secure%5Bresource_id%5D=1006814&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fcloud-infrastructure-entitlement-management-ciem%2Fmid-market&secure%5Btoken%5D=55aac63f71c10a1eeb889eec31d907c6310653275c6c173d0a15a1b00dc4c4e2&secure%5Burl%5D=https%3A%2F%2Fwww.upwind.io&secure%5Burl_type%5D=custom_url)

---

## What Are the Top-Rated Cloud Infrastructure Entitlement Management (CIEM) Software Products in 2026?
### 1. [Wiz](https://www.g2.com/products/wiz-wiz/reviews)
Wiz transforms cloud security for customers – including more than 50% of the Fortune 100 – by enabling a new operating model. With Wiz, organizations can democratize security across the development lifecycle, empowering them to build fast and securely. Its Cloud Native Application Protection Platform (CNAPP) consolidates CSPM, KSPM, CWPP, Vulnerability management, IaC scanning, CIEM, DSPM into a single platform. Wiz drives visibility, risk prioritization, and business agility. Protecting Your Cloud Environments Requires a Unified, Cloud Native Platform. Wiz connects to every cloud environment, scans every layer, and covers every aspect of your cloud security - including elements that normally require installing agents. Its comprehensive approach has all of these cloud security solutions built in. Hundreds of organizations worldwide, including 50 percent of the Fortune 100, to rapidly identify and remove critical risks in cloud environments. Its customers include Salesforce, Slack, Mars, BMW, Avery Dennison, Priceline, Cushman & Wakefield, DocuSign, Plaid, and Agoda, among others. Wiz is backed by Sequoia, Index Ventures, Insight Partners, Salesforce, Blackstone, Advent, Greenoaks, Lightspeed and Aglaé. Visit https://www.wiz.io for more information.


**Average Rating:** 4.7/5.0
**Total Reviews:** 822

**Who Is the Company Behind Wiz?**

- **Seller:** [Wiz](https://www.g2.com/sellers/wiz-76a0133b-42e5-454e-b5da-860e503471db)
- **Company Website:** https://www.wiz.io/
- **Year Founded:** 2020
- **HQ Location:** New York, US
- **Twitter:** @wiz_io (24,733 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/wizsecurity/ (3,383 employees on LinkedIn®)

**Who Uses This Product?**
- **Who Uses This:** CISO, Security Engineer
- **Top Industries:** Financial Services, Computer Software
- **Company Size:** 54% Enterprise, 39% Mid-Market


#### What Are Wiz's Pros and Cons?

**Pros:**

- Features (110 reviews)
- Security (107 reviews)
- Ease of Use (103 reviews)
- Visibility (86 reviews)
- Easy Setup (67 reviews)

**Cons:**

- Learning Curve (34 reviews)
- Feature Limitations (33 reviews)
- Improvement Needed (33 reviews)
- Improvements Needed (28 reviews)
- Complexity (27 reviews)


### What Do G2 Reviewers Say About Wiz?
*AI-generated summary from verified user reviews*

**Pros:**

- Users commend the **capable APIs and user-friendly UI** , providing valuable insights and continuous improvements in security features.
- Users value the **unmatched security features** of Wiz, providing comprehensive visibility and proactive threat management capabilities.
- Users find Wiz's product suite **extremely easy to use** , benefiting from seamless integration and a user-friendly interface.
- Users appreciate the **visibility** Wiz offers, enhancing security posture and prioritizing critical vulnerabilities effectively.
- Users praise the **easy setup** of Wiz, enabling quick deployment and seamless integration across modules for enhanced security.

**Cons:**

- Users experience a **steep learning curve** with Wiz, making it challenging for newcomers to fully utilize the platform.
- Users find the **feature limitations** of Wiz, such as complex reporting and management, hinder user-friendliness and efficiency.
- Users highlight the need for **improvement in performance and reporting capabilities** to enhance overall usability of Wiz.
- Users note several **improvements needed** , particularly in dashboard reporting and the complexity of the pricing model.
- Users find the **complexity of the interface** overwhelming initially, requiring time to adapt and learn effectively.

#### What Are Recent G2 Reviews of Wiz?

**"[Wiz Delivers Clear Visibility Into Cloud Risks That Truly Matter](https://www.g2.com/survey_responses/wiz-review-12960477)"**

**Rating:** 4.5/5.0 stars
*— Jason I.*

[Read full review](https://www.g2.com/survey_responses/wiz-review-12960477)

---

**"[Excellent Cloud Risk Visibility and Fast Insights with Wiz](https://www.g2.com/survey_responses/wiz-review-12964571)"**

**Rating:** 4.5/5.0 stars
*— Ruben F.*

[Read full review](https://www.g2.com/survey_responses/wiz-review-12964571)

---



### 2. [Cortex Cloud](https://www.g2.com/products/cortex-cloud/reviews)
Cortex Cloud by Palo Alto Networks, the next version of Prisma Cloud, understands a unified security approach is essential for effectively addressing AppSec, CloudSec, and SecOps. Connecting cloud security and SOC workflows enables teams to achieve holistic visibility, trace risk across the lifecycle, and correlate real-time threat activity with development and runtime contexts. Cortex Cloud is a unified platform built on three core pillars: data integration, AI-driven intelligence, and automation. Now you can safeguard applications, data, and infrastructure across multicloud and hybrid environments with a unified data model that consolidates telemetry from code, runtime, identity, and endpoints, all into a single data source. Empower teams with precise, AI-powered insights and 2200+ machine learning models to identify and stop zero-day threats with real-time advanced threat detection and response. And automate with 1000+ prebuilt playbooks across your cloud stack to reduce manual workloads, accelerate remediations, and cut response times tenfold. Cortex Cloud delivers more than tools—it transforms how organizations secure their cloud environments.


**Average Rating:** 4.1/5.0
**Total Reviews:** 122

**Who Is the Company Behind Cortex Cloud?**

- **Seller:** [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks)
- **Company Website:** https://www.paloaltonetworks.com
- **Year Founded:** 2005
- **HQ Location:** Santa Clara, CA
- **Twitter:** @PaloAltoNtwks (128,951 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/30086/ (22,313 employees on LinkedIn®)

**Who Uses This Product?**
- **Top Industries:** Information Technology and Services, Computer & Network Security
- **Company Size:** 38% Enterprise, 31% Mid-Market


#### What Are Cortex Cloud's Pros and Cons?

**Pros:**

- Ease of Use (49 reviews)
- Features (45 reviews)
- Security (43 reviews)
- Visibility (38 reviews)
- Cloud Integration (34 reviews)

**Cons:**

- Expensive (31 reviews)
- Difficult Learning (30 reviews)
- Learning Curve (29 reviews)
- Pricing Issues (24 reviews)
- Complex Setup (21 reviews)


### What Do G2 Reviewers Say About Cortex Cloud?
*AI-generated summary from verified user reviews*

**Pros:**

- Users find Cortex Cloud to be **extremely easy to use** , appreciating its intuitive interface and seamless integration.
- Users value **strong cloud security** and appreciate the intuitive interface and effective compliance support of Cortex Cloud.
- Users value the **ease of managing cloud security** with Cortex Cloud, enhancing focus on critical threats efficiently.
- Users value the **clear visibility** provided by Cortex Cloud, enhancing their management of cloud security and team coordination.
- Users value the **ease of integration** with operations, enhancing the management of cloud security efficiently.

**Cons:**

- Users find the **high cost** of Cortex Cloud to be a significant drawback, impacting budget for mid-sized organizations.
- Users find the **difficult learning** curve challenging, especially with complex features and insufficient documentation for beginners.
- Users find the **learning curve steep** due to time-intensive onboarding and a cluttered user interface.
- Users express concerns about **pricing issues** with Cortex Cloud, as costs can rise significantly in larger setups.
- Users find the **complex setup** of Cortex Cloud to be time-consuming and challenging to navigate effectively.

#### What Are Recent G2 Reviews of Cortex Cloud?

**"[Cortex Cloud earned it's place before every release.](https://www.g2.com/survey_responses/cortex-cloud-review-13089470)"**

**Rating:** 5.0/5.0 stars
*— Johanna K.*

[Read full review](https://www.g2.com/survey_responses/cortex-cloud-review-13089470)

---

**"[Cortex Cloud Unifies Cloud Security with Real-Time Protection and Smart Prioritization](https://www.g2.com/survey_responses/cortex-cloud-review-12997786)"**

**Rating:** 4.0/5.0 stars
*— Galateya M.*

[Read full review](https://www.g2.com/survey_responses/cortex-cloud-review-12997786)

---



### 3. [Orca Security](https://www.g2.com/products/orca-security/reviews)
The Orca Cloud Security Platform identifies, prioritizes, and remediates risks and compliance issues in workloads, configurations, and identities across your cloud estate spanning AWS, Azure, Google Cloud, Kubernetes, Alibaba Cloud, and Oracle Cloud. Orca offers the industry’s most comprehensive cloud security solution in a single platform — eliminating the need to deploy and maintain multiple point solutions. Orca is agentless-first, and connects to your environment in minutes using Orca’s patented SideScanning™ technology that provides deep and wide visibility into your cloud environment, without requiring agents. In addition, Orca can integrate with third-party agents for runtime visibility and protection for critical workloads. Orca is at the forefront of leveraging Generative AI for simplified investigations and accelerated remediation – reducing required skill levels and saving cloud security, DevOps, and development teams time and effort, while significantly improving security outcomes. As a Cloud Native Application Protection Platform (CNAPP), Orca consolidates many point solutions in one platform, including: CSPM, CWPP, CIEM, Vulnerability Management, Container and Kubernetes Security, DSPM, API Security, CDR, Multi-cloud Compliance, Shift Left Security, and AI-SPM.


**Average Rating:** 4.7/5.0
**Total Reviews:** 301

**Who Is the Company Behind Orca Security?**

- **Seller:** [Orca Security](https://www.g2.com/sellers/orca-security)
- **Company Website:** https://orca.security
- **Year Founded:** 2019
- **HQ Location:** Portland, Oregon
- **Twitter:** @orcasec (4,835 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/35573984/ (515 employees on LinkedIn®)

**Who Uses This Product?**
- **Who Uses This:** Security Engineer, CISO
- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 51% Enterprise, 38% Mid-Market


#### What Are Orca Security's Pros and Cons?

**Pros:**

- Ease of Use (13 reviews)
- Vulnerability Scanning (13 reviews)
- Features (11 reviews)
- Visibility (11 reviews)
- Comprehensive Security (9 reviews)

**Cons:**

- Security Vulnerabilities (6 reviews)
- Dashboard Issues (5 reviews)
- Delayed Detection (5 reviews)
- False Positives (5 reviews)
- Improvement Needed (5 reviews)


### What Do G2 Reviewers Say About Orca Security?
*AI-generated summary from verified user reviews*

**Pros:**

- Users praise the **ease of use** of Orca Security, appreciating its intuitive interface and quick setup process.
- Users value the **visibility and prioritization** of vulnerabilities provided by Orca Security, enhancing their cloud security posture.
- Users praise Orca Security for its **agentless features** , intuitive interface, and effective compliance and security modules.
- Users value the **exceptional visibility** provided by Orca Security, enhancing insight into their cloud environment effortlessly.
- Users value the **comprehensive security** features of Orca Security, enhancing visibility and ease of implementation across cloud environments.

**Cons:**

- Users note that Orca Security has **security vulnerabilities** , particularly regarding API security and vulnerable package detection.
- Users experience **dashboard issues** like cluttered information and slow performance, leading to navigation challenges and bugs.
- Users experience **delayed detection** with Orca Security due to slow scans and accumulated issues affecting troubleshooting efficiency.
- Users report frequent **false positives** in Orca Security, causing confusion over actual vulnerabilities in their systems.
- Users note that **improvement is needed** in reporting, automation, and granularity for a better Orca Security experience.

#### What Are Recent G2 Reviews of Orca Security?

**"[Orca Makes Shadow AI Agents Visible and Governable Across Our Cloud](https://www.g2.com/survey_responses/orca-security-review-13119948)"**

**Rating:** 5.0/5.0 stars
*— Bilal J.*

[Read full review](https://www.g2.com/survey_responses/orca-security-review-13119948)

---

**"[Orca Makes Least Privilege Practical with Clear Permission and Usage Visibility](https://www.g2.com/survey_responses/orca-security-review-13122107)"**

**Rating:** 5.0/5.0 stars
*— Alvaro V.*

[Read full review](https://www.g2.com/survey_responses/orca-security-review-13122107)

---


#### What Are G2 Users Discussing About Orca Security?

- [Where is Orca security based?](https://www.g2.com/discussions/where-is-orca-security-based) - 2 comments
- [How much does Orca security cost?](https://www.g2.com/discussions/how-much-does-orca-security-cost) - 1 comment
- [What is ORCA platform?](https://www.g2.com/discussions/what-is-orca-platform) - 1 comment
- [What does Orca Security do?](https://www.g2.com/discussions/what-does-orca-security-do) - 1 comment


## What Is Cloud Infrastructure Entitlement Management (CIEM) Software?

[Cloud Security Software](https://www.g2.com/categories/cloud-security)

## What Software Categories Are Similar to Cloud Infrastructure Entitlement Management (CIEM) Software?

- [Cloud Workload Protection Platforms](https://www.g2.com/categories/cloud-workload-protection-platforms)
- [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance)
- [Cloud Security Posture Management (CSPM) Software](https://www.g2.com/categories/cloud-security-posture-management-cspm)