Compare Semgrep and Wiz 
At a Glance
Market Segments
Enterprise (47.2% of reviews)
Enterprise (54.6% of reviews)
Entry-Level Pricing
Starting at $40.00 1 contributor Per Month
No pricing available
Semgrep
Star Rating
(54)4.6 out of 5
Market Segments
Enterprise (47.2% of reviews)
Pros & Cons
Entry-Level Pricing
Starting at $40.00 1 contributor Per Month
Free Trial is available
Learn more about SemgrepWiz
Star Rating
(775)4.7 out of 5
Market Segments
Enterprise (54.6% of reviews)
Pros & Cons
Entry-Level Pricing
No pricing available
Free Trial is available
Learn more about WizSummary
AI Generated Summary
AI-generated. Powered by real user reviews.
- G2 reviewers report that Wiz excels in providing comprehensive visibility across cloud environments, allowing users to easily identify misconfigurations and vulnerabilities in real time. This agentless architecture is highlighted as a significant advantage, enabling quick deployment without the need for extensive setup.
- Users say that Semgrep stands out for its robust security scanning capabilities, particularly in code security scans for various platforms like Azure Data Factory and Python code. Reviewers appreciate the straightforward setup process and seamless integration into existing workflows, making it a practical choice for teams focused on code quality.
- According to verified reviews, Wiz receives high marks for its quality of support, with users noting the platform's ability to turn complex data into clear, actionable insights. This level of support is crucial for organizations looking to enhance their security posture effectively.
- Reviewers mention that while Semgrep offers a flexible and transparent rule engine, it may not match the depth of visibility provided by Wiz. Users appreciate the YAML syntax and extensive public registry for customization, but some feel that it lacks the comprehensive asset visibility that Wiz provides.
- G2 reviewers highlight that Wiz's overall user satisfaction is significantly higher, with a G2 Score of 97.36 compared to Semgrep's 52.79. This indicates a stronger overall performance and user experience, particularly in enterprise environments where security needs are more complex.
- Users report that while Semgrep is easy to use and requires less scripting, it faces challenges in areas like detection rates and false positives compared to Wiz. This can impact the effectiveness of security measures, especially in larger, more dynamic environments.
Pricing
Entry-Level Pricing
Semgrep
Semgrep Code, Supply Chain, and Secrets Detection
Starting at $40.00
1 contributor Per Month
Extensible AppSec for growing teams. Choose from Code (SAST), Supply Chain (SCA), and Secrets Detection to eliminate noise out of the box, streamline developer workflows, and give security teams full visibility.
- Choose from SAST, SCA, and Secrets Detection
- Pro Rules and cross-file analysis
- AI Assistant
Wiz
No pricing availableFree Trial
Semgrep
Free Trial is available
Wiz
Free Trial is available
Ratings
Meets Requirements
8.8
48
9.1
639
Ease of Use
9.1
49
8.8
643
Ease of Setup
9.4
36
9.1
503
Ease of Admin
9.1
22
9.0
487
Quality of Support
8.8
43
9.2
609
Has the product been a good partner in doing business?
9.6
22
9.4
476
Product Direction (% positive)
9.2
45
9.8
598
Features by Category
Management
Not enough data
8.7
119
Not enough data
8.4
107
Not enough data
9.3
120
Operations
Not enough data
8.9
107
Not enough data
8.6
110
Not enough data
9.0
112
Security Controls
Not enough data
8.6
76
Not enough data
Feature Not Available
Not enough data
9.1
107
Not enough data
Feature Not Available
Administration
9.0
18
Not enough data
8.2
17
Not enough data
Analysis
8.4
19
Not enough data
9.1
21
Not enough data
9.4
21
Not enough data
9.1
21
Not enough data
Testing
8.7
20
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
7.7
17
Not enough data
7.5
18
Not enough data
8.1
19
Not enough data
7.3
21
Not enough data
Agentic AI - Static Application Security Testing (SAST)
7.9
11
Not enough data
Dynamic Application Security Testing (DAST)Hide 13 FeaturesShow 13 Features
Not enough data
Not enough data
Administration
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Testing
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Administration
Not enough data
9.0
194
Not enough data
8.2
183
Not enough data
9.1
198
Not enough data
8.9
191
Monitoring
Not enough data
8.4
169
Not enough data
7.9
162
Not enough data
8.6
180
Protection
Not enough data
8.5
174
Not enough data
8.0
169
Not enough data
Feature Not Available
Not enough data
7.7
163
Security
Not enough data
9.0
275
Not enough data
8.3
224
Not enough data
Feature Not Available
Not enough data
8.9
250
Compliance
Not enough data
8.7
245
Not enough data
8.4
231
Not enough data
8.3
230
Administration
Not enough data
8.5
259
Not enough data
8.6
233
Not enough data
8.3
248
Performance
8.2
12
8.4
281
8.0
11
8.8
276
8.0
11
7.4
275
9.0
10
9.0
280
Network
8.5
10
8.6
258
7.8
10
8.5
254
8.0
10
8.8
274
Application
Feature Not Available
Feature Not Available
8.9
11
Feature Not Available
8.5
11
Feature Not Available
Agentic AI - Vulnerability Scanner
6.9
6
7.4
29
7.5
6
7.3
30
Functionality - Software Composition Analysis
8.4
18
8.8
54
8.2
18
9.3
60
8.5
18
9.2
56
Effectiveness - Software Composition Analysis
8.5
18
8.7
59
8.3
18
9.2
58
8.3
18
9.2
60
Activity Monitoring
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
7.5
183
Not enough data
8.0
196
Security
Not enough data
8.6
204
Not enough data
8.9
216
Not enough data
8.4
221
Administration
Not enough data
8.4
201
Not enough data
8.7
213
Not enough data
9.1
213
Agentic AI - Cloud Security Monitoring and Analytics
Not enough data
7.5
20
Not enough data
7.4
21
Not enough data
7.5
19
Detection & Response
Not enough data
9.1
27
Not enough data
9.2
26
Not enough data
9.6
26
Not enough data
8.5
28
Management
Not enough data
8.6
26
Not enough data
8.9
25
Not enough data
9.2
23
Analytics
Not enough data
8.8
27
Not enough data
8.2
26
Not enough data
8.8
27
Agentic AI - Extended Detection and Response (XDR) Platforms
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Services - Extended Detection and Response (XDR)
Not enough data
Not enough data
Documentation
8.9
19
Not enough data
9.3
20
Not enough data
8.2
20
Not enough data
Security
7.4
21
Not enough data
7.9
17
Not enough data
8.9
17
Not enough data
Configuration
Not enough data
Feature Not Available
Not enough data
8.9
278
Not enough data
8.4
251
Not enough data
8.1
248
Not enough data
8.5
270
Visibility
Not enough data
9.3
290
Not enough data
9.2
287
Vulnerability Management
Not enough data
8.4
268
Not enough data
9.2
298
Not enough data
9.0
278
Not enough data
9.1
294
Asset Management
Not enough data
9.3
193
Not enough data
8.0
167
Not enough data
7.6
163
Monitoring
Not enough data
8.6
176
Not enough data
9.0
191
Not enough data
8.8
179
Not enough data
9.0
188
Risk Management
Not enough data
9.2
207
Not enough data
8.6
195
Not enough data
8.7
192
Not enough data
8.5
196
Generative AI
Not enough data
8.0
101
Alerts management
Not enough data
8.8
109
Not enough data
8.5
110
Not enough data
9.0
119
Monitoring
Not enough data
8.4
104
Not enough data
8.5
115
Not enough data
8.4
101
Not enough data
7.8
104
Automation
Not enough data
8.2
109
Not enough data
8.6
112
Analysis
Not enough data
8.7
126
Not enough data
8.5
123
Not enough data
9.3
126
Not enough data
8.5
114
Issue Resolution
Not enough data
8.6
117
Not enough data
8.9
122
Not enough data
9.0
114
Cloud Infrastructure Entitlement Management (CIEM)Hide 8 FeaturesShow 8 Features
Not enough data
8.2
51
Access control - Cloud Infrastructure Entitlement Management (CIEM)
Not enough data
8.1
44
Not enough data
8.7
45
Not enough data
8.5
45
Not enough data
6.8
43
Monitoring - Cloud Infrastructure Entitlement Management (CIEM)
Not enough data
8.4
47
Not enough data
7.2
46
Auditing - Cloud Infrastructure Entitlement Management (CIEM)
Not enough data
9.0
50
Not enough data
8.9
49
Cloud-Native Application Protection Platform (CNAPP)Hide 11 FeaturesShow 11 Features
Not enough data
9.0
27
Security - Cloud-Native Application Protection Platform (CNAPP)
Not enough data
9.5
20
Not enough data
9.3
20
Not enough data
8.9
20
Not enough data
9.6
23
Artificial Intelligence - Cloud-Native Application Protection Platform (CNAPP)
Not enough data
8.9
19
Not enough data
9.2
22
Not enough data
9.0
18
Cloud Configuration Management - Cloud-Native Application Protection Platform (CNAPP)
Not enough data
9.4
21
Not enough data
9.5
20
Agentic AI - Cloud-Native Application Protection Platform (CNAPP)
Not enough data
7.9
18
Not enough data
8.1
17
Generative AI - Exposure Management Platforms
Not enough data
6.2
14
Not enough data
5.9
13
Risk Identification and Assessment - Exposure Management Platforms
Not enough data
8.3
13
Not enough data
8.3
13
Monitoring and Integration - Exposure Management Platforms
Not enough data
8.3
13
Not enough data
8.6
14
Agentic AI - Static Code Analysis
7.7
10
Not enough data
7.6
9
Not enough data
7.7
10
Not enough data
Discovery & Classification - Data Security Posture Management (DSPM)
Not enough data
8.7
9
Not enough data
8.3
8
Not enough data
8.1
7
Risk Prioritization - Data Security Posture Management (DSPM)
Not enough data
8.7
9
Not enough data
9.0
8
Not enough data
8.8
8
Remediation & Governance - Data Security Posture Management (DSPM)
Not enough data
8.5
10
Not enough data
8.5
9
Not enough data
8.5
8
Model Protection - AI Security Solutions
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Runtime Monitoring - AI Security Solutions
Not enough data
Not enough data
Not enough data
Not enough data
Policy Enforcement and Compliance - AI Security Solutions
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
AI Security Posture Management (AI-SPM) ToolsHide 9 FeaturesShow 9 Features
Not enough data
Not enough data
Functionality - AI Security Posture Management (AI-SPM) Tools
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Risk Assessment - AI Security Posture Management (AI-SPM) Tools
Not enough data
Not enough data
Not enough data
Not enough data
Governance & Compliance - AI Security Posture Management (AI-SPM) Tools
Not enough data
Not enough data
Not enough data
Not enough data
Performance - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Integration - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Cloud Visibility
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Identity
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Compliance
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Administration
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Interactive Application Security Testing (IAST)Hide 1 FeatureShow 1 Feature
Not enough data
Not enough data
Agentic AI - Interactive Application Security Testing (IAST)
Not enough data
Not enough data
Agentic AI - Cloud Detection and Response (CDR)
Not enough data
6.7
11
Not enough data
7.0
11
Not enough data
7.0
11
Services - Cloud Detection and Response (CDR)
Not enough data
8.2
12
Categories
Categories
Shared Categories
Semgrep and Wiz are categorized as Software Composition Analysis and Vulnerability Scanner
Unique Categories
Wiz is categorized as Data Security Posture Management (DSPM), Cloud Infrastructure Entitlement Management (CIEM), Exposure Management Platforms, Cloud Detection and Response (CDR), Cloud-Native Application Protection Platform (CNAPP), Attack Surface Management, Cloud Security Posture Management (CSPM), Extended Detection and Response (XDR) Platforms, Cloud Security Monitoring and Analytics, Cloud Compliance, Container Security, Cloud Workload Protection Platforms, Container Monitoring, AI Security Solutions, and AI Security Posture Management (AI-SPM) Tools
Reviews
Reviewers' Company Size
Semgrep
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Wiz
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Small-Business
(50 or fewer emp.)
Mid-Market
(51-1000 emp.)
Enterprise
(> 1000 emp.)
Reviewers' Industry
Information Technology and Services
24.5%
Computer Software
20.8%
Financial Services
15.1%
Computer & Network Security
5.7%
Semiconductors
5.7%
Other
28.3%
Financial Services
18.3%
Information Technology and Services
12.0%
Computer Software
11.2%
Computer & Network Security
4.1%
Hospital & Health Care
4.1%
Other
50.3%
Alternatives
Discussions
Semgrep has no discussions with answers
Wiz has no discussions with answers
Hunting for software insights?
With over 3 million reviews, we can provide the specific details that help you make an informed software buying decision for your business. Finding the right product is important, let us help.
or continue with
or continue with
By proceeding, you agree to our Terms of Use and Privacy Policy
