Wiz Features
Management (6)
Dashboards and Reports
Access pre-built and custom reports and dashboards.
Workflow Management
Creates new or streamlines existing workflows to better handle IT support tickets and service.
Administration Console
Provides Administration tools/console that are easy to use and learn for routine maintenance tasks
Extensibility
Allows for customized support for hybrid environments
Workflow Automation
Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
Unified Visibility
Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.
Operations (3)
Governance
Allows users to create, edit, and relinquish user access privileges.
Logging and Reporting
Provides required reports to manage business. Provides adequate logging to troubleshoot and support auditing.
API / Integrations
Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.
Security Controls (2)
Anomaly Detection
Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.
Security Auditing
Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.
Administration (10)
Risk Scoring
Provides risk scoring for suspicious activity, vulnerabilities, and other threats.
Secrets Management
Provides tools for managing authentication credentials such as keys and passwords.
Security Auditing
Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.
Configuration Management
Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Policy Enforcement
Allows administrators to set policies for security and data governance.
Auditing
Analyzes data associated with web traffic and site performance to provide vulnerability insights and best practices.
Workflow Management
Creates new or streamlines existing workflows to better handle IT support tickets and service.
Security Automation
Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
Security Integration
Integrates additional security tools to automate security and incident response processes.
Multicloud Visibility
Allows users to track and control activity across cloud services and providers.
Monitoring (11)
Continuous Image Assurance
Provides image verification features to establish container approval requirements and continuously monitor for policy violations to identify containers with known vulnerabilities, malware, and other threats.
Behavior Monitoring
Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns and fraud indicators.
Observability
Generate insights across IT systems utilizing event metrics, logging, traces, and metadata.
Gap Analysis
Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.
Vulnerability Intelligence
Stores information related to common vulnerabilities and how to resolve them once incidents occur.
Compliance Monitoring
Monitors data quality and sends alerts based on violations or misuse.
Continuous Monitoring
Aggregates real-time updates and historical data from multiplate internal and external data sources to support ongoing proactive threat response.
Resource utilization
Optimizes resource allocation.
Real-time monitoring
Consistently monitors processes for applications and IT infrastructure to detect anomalies in real-time.
Performance baseline
Sets up standard performance baseline to compare live container activities.
API monitoring
Traces connections between different containerized environments and detects anomalies in functionality, user accessibility, traffic flows, and tampering.
Protection (3)
Dynamic Image Scanning
Scans application and image source code for security flaws without executing it in a live environment
Runtime Protection
Monitors container activities and detects threats across containers, networks, and cloud service providers.
Network Segmentation
Allows administrative control over network components, mapping, and segmentation.
Security (6)
Compliance Monitoring
Monitors data quality and sends alerts based on violations or misuse.
Anomoly Detection
Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.
Cloud Gap Analytics
Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.
Compliance Monitoring
Monitors data quality and send alerts based on violations or misuse.
Risk Analysis
Identifies potential network security risks, vulnerabilities, and compliance impacts.
Reporting
Creates reports outlining log activity and relevant metrics.
Compliance (3)
Governance
Allows users to create, edit, and relinquish user access privileges.
Data Governance
Ensures user access management, data lineage, and data encryption.
Sensitive Data Compliance
Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.
Performance (4)
Issue Tracking
Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.
Detection Rate
The rate at which scans accurately detect all vulnerabilities associated with the target.
False Positives
The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.
Automated Scans
Runs pre-scripted vulnerability scans without requiring manual work.
Network (3)
Compliance Testing
Allows users to scan applications and networks for specific compliance requirements.
Perimeter Scanning
Analyzes network devices, servers and operating systems for vulnerabilities.
Configuration Monitoring
Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Functionality - Software Composition Analysis (3)
Language Support
Supports a useful and wide variety of programming languages.
Integration
Integrates seamlessly with the build environment and development tools like repositories, package managers, etc.
Transparency
Grants comprehensive user-friendly insight into all open source components.
Effectiveness - Software Composition Analysis (3)
Remediation Suggestions
Provides relevant and helpful suggestions for vulnerability remediation upon detection.
Continuous Monitoring
Monitors open source components proactively and continuously.
Thorough Detection
Comprehensively identifies all open source version updates, vulnerabilities, and compliance issues.
Activity Monitoring (2)
API Monitoring
Detects anomalies in functionality, user accessibility, traffic flows, and tampering.
Activity Monitoring
Actively monitors status of work stations either on-premise or remote.
Detection & Response (4)
Response Automation
Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Threat Hunting
Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.
Rule-Based Detection
Allows administrators to set rules specified to detect issues related to issues such as sensitive data misuse, system misconfiguration, lateral movement, and/or non-compliance.
Real-Time Detection
Constantly monitors system to detect anomalies in real time.
Analytics (3)
Threat Intelligence
Stores information related to common threats and how to resolve them once incidents occur.
Artificial Intelligence & Machine Learning
Facilitates Artificial Intelligence (AI) such as Machine Learning (ML) to enable data ingestion, performance suggestions, and traffic analysis.
Data Collection
Collects information from multiple sources to cross reference and build contextual to correlate intelligence.
Configuration (4)
Configuration Monitoring
Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Unified Policy Management
Allows users to track and control security policies across cloud services and providers.
Adaptive Access Control
Provides a risk-based approach to determining trust within the network.
API / Integrations
Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.
Visibility (2)
Multicloud Visibility
Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.
Asset Discovery
Detect new assets as they enter a cloud environments and networks to add to asset inventory.
Vulnerability Management (4)
Threat Hunting
Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.
Vulnerability Scanning
Analyzes your existing cloud, network, and IT infrastructure to outline access points that can be easily compromised.
Vulnerability Intelligence
Stores information related to new and common vulnerabilities and how to resolve them once incidents occur.
Risk-Prioritization
Allows for vulnerability ranking by customized risk and threat priorities.
Asset Management (3)
Asset Discovery
Detects new assets as they enter cloud environments and networks to add to asset inventory.
Shadow IT Detection
Identifies unsanctioned software.
Change Management
Provides tools to track and implement required security policy changes.
Risk Management (4)
Risk-Prioritization
Allows for vulnerability ranking by customized risk and threat priorities.
Reconnaissance
Gathers information about the system and potential exploits to be tested.
At-Risk Analysis
Uses machine learning to identify at-risk data.
Threat Intelligence
Stores information related to common threats and how to resolve them once incidents occur.
Alerts management (3)
Multi-mode alerts
Alerts over email, text, phone call, or more to multiple parties.
Opimization alerts
Provides information related to unnecessary spending and unused resources.
Incident alerts
Gives alerts when incidents arise.
Automation (2)
Resolution automation
Diagnoses and resolves incidents without the need for human interaction.
Automation
Efficiently scales resource usage to optimize spend whith increased or decreased resource usage requirements.
Analysis (4)
Search
Allows users to search logs for troubleshooting and open-ended exploration of data.
Reporting
Creates reports outlining resource, underutilization, cost trends, and/or functional overlap.
Visualization
Presents information and analytics in a digestible, intuitive, and visually appealing way.
Track trends
Allows users to track log trends.
Issue Resolution (3)
Root cause identification
Directly identifies, or increases identification speed for, root causes for container issues.
Resolution guidance
Provides paths, suggestions, or other general assistance towards issue resolution.
Proactive identification
Proactively identifies trends on container systems that could lead to failures or errors.
Generative AI (1)
AI Text Summarization
Condenses long documents or text into a brief summary.
Access control - Cloud Infrastructure Entitlement Management (CIEM) (4)
Policy Management
Helps define policies for access management
Fine-Grained Access Control
Uses principle of least privilege to ensure access control at granular level of specific resources and apps
Role-Based Access Control (RBAC)
Enables organization to define roles and assign access based on these roles
AI-driven access control
Streamlines the management of user access through AI
Monitoring - Cloud Infrastructure Entitlement Management (CIEM) (2)
Monitoring
Tracks and logs user activities, access requests, and changes to entitlements
AI-based detection
Detects and remediates risky, misconfigured permissions for human and machine identities using AI
Auditing - Cloud Infrastructure Entitlement Management (CIEM) (2)
Visibility
Provides visibility into all users and identities across the system
Compliance Reporting
Provides reporting capabilities to demonstrate compliance
Security - Cloud-Native Application Protection Platform (CNAPP) (4)
Workload and container security
Scans containers, workloads, and kubernetes clusters for any misconfigurations or vulnerabilities.
Threat detection and response
Monitor live environments for anomalies, risks and threats to ensure rapid response.
DevSecOps Integrations
Integrates with CI/CD pipelines to detect security risks early in the development life cycle.
Unified Visibility
Consolidate all security data across the tech and cloud stacks into one dashboard.
Artificial Intelligence - Cloud-Native Application Protection Platform (CNAPP) (3)
Intelligent remediations and suggestions
Offers an AI-powered engine to provide remediation guidance to the user based on the type of threat.
Risk prioritization
Uses context-aware analysis to identify critical and non-critical risks across vulnerabilities.
Anomaly detection using machine learning
Help detect anomalies across cloud workloads which could help present a potential breach.
Cloud Configuration Management - Cloud-Native Application Protection Platform (CNAPP) (2)
Multi-cloud visibility
Offers a unified view of all cloud assets across multi-cloud platforms such as AWS, Azure, GCP etc.
Cloud Security Posture Management (CSPM)
Continuously scans cloud environments for any misconfigurations, and provide benchmarks and guided remediation.
Generative AI - Exposure Management Platforms (2)
Predictive Analytics
Uses AI-driven models to analyze historical and current data to enable organizations to manage new exposures proactively.
Automated Threat Detection
Uses AI algorithms to analyze data for patterns and anomalies that signify potential risks.
Risk Identification and Assessment - Exposure Management Platforms (2)
Comprehensive Risk Assessment
Identifies, evaluates, and monitors various types of risks to understand the overall risk exposure and prioritize them based on potential impact.
Advanced Analytics and Reporting
Includes tools for deep analysis of risk data, providing insights into trends and patterns that support strategic risk assessment and decision-making.
Monitoring and Integration - Exposure Management Platforms (2)
Integration and Data Consolidation
Ensures seamless interaction with other systems and unification of risk data, enabling a comprehensive view and efficient management of risk exposure.
Real-time Monitoring and Alerts
Allows for continuous surveillance of risk factors, providing timely alerts to mitigate emerging risks effectively.
Agentic AI - Vulnerability Scanner (2)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Agentic AI - Cloud Security Monitoring and Analytics (3)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Agentic AI - Extended Detection and Response (XDR) Platforms (3)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Agentic AI - Cloud-Native Application Protection Platform (CNAPP) (2)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Adaptive Learning
Improves performance based on feedback and experience
Agentic AI - Cloud Detection and Response (CDR) (3)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Services - Extended Detection and Response (XDR) (1)
Managed Services
Offers managed detection and response services.
Services - Cloud Detection and Response (CDR) (1)
Managed Services
Offers managed detection and response services.
Discovery & Classification - Data Security Posture Management (DSPM) (3)
Continuous real‑time monitoring
Provide real‑time visibility into data exposures and activities.
Discover & classify sensitive data
Automatically scan across cloud, SaaS, on‑prem environments to locate and tag sensitive data.
Custom classification support
Allow business‑specific or regulatory data labels beyond default frameworks.
Risk Prioritization - Data Security Posture Management (DSPM) (3)
Detect excessive entitlements & toxic combinations
Identify over‑permissioned users, roles, or accounts in combination with misconfigurations.
Compliance posture assessment
Assess data risks against regulatory frameworks and internal policies.
Risk‑based exposure scoring
Prioritize findings based on data sensitivity, exploitability, and business impact.
Remediation & Governance - Data Security Posture Management (DSPM) (3)
Guided remediation actions
Provide context‑aware recommendations for fixing exposures (e.g., revoke access, encrypt, misconfiguration remediation).
Integration with enforcement tools
Integrate with CSPM, CIEM, SOAR, SIEM for automated policy enforcement.
Track remediation progress & trends
Monitor posture over time and track remediation efforts.
Model Protection - AI Security Solutions (4)
Input Hardening
Provides specific capability to defend AI assets from adversarial attacks (including prompt injection, data poisoning, model inversion or extraction) without requiring retraining of the underlying model.
Input/Output Inspection
Enables automatic inspection of model inputs (prompts) and/or outputs (responses) to prevent unsafe, sensitive or manipulated content.
Integrity Monitoring
Monitors the integrity of model weights, dependencies or metadata (for example via SBOM/AIBOM) to detect tampering, drift or unauthorised modification.
Model Access Control
Verifies the ability to enforce who or what (users, agents, systems) may access a model or LLM asset.
Runtime Monitoring - AI Security Solutions (2)
AI Behavior Anomaly Detection
Detects unusual or harmful runtime behaviour of AI models, agents or workflows (such as unexpected output patterns, excessive permissions use, or unknown agents).
Audit Trail
Provides a persistent, searchable audit log of AI‑asset inputs, outputs and interactions (including who/what invoked the model, when, and with what data) for forensics and compliance.
Policy Enforcement and Compliance - AI Security Solutions (4)
Scalable Governance
Ensures that the AI‑security platform supports scaling of AI‑asset protection (models, agents, multi‑cloud deployments) and applies governance/compliance frameworks as AI usage grows.
Integrations
Enables integration of the AI‑security solution with traditional security stacks (SIEM, SOAR, cloud security, application security, identity/access management) to unify visibility and response.
Shadow AI
Offers visibility into unmanaged or unauthorized AI/agent use (“shadow AI”) across the organisation and enforces control over such usage (e.g., agent creation, LLM‑based services).
Policy‑as‑Code for AI Assets
Supports codified, machine‑enforceable security policies targeting AI models/agents (for example, blocking certain categories of prompts, enforcing least‑privilege for model use, enforcing “no external data” rules).
Functionality - AI Security Posture Management (AI-SPM) Tools (5)
Security Ecosystem Integration
Integrate with existing security infrastructure (SIEM, CASB, IAM, DSPM/CSPM/SSPM) to bring AI‑SPM into the wider security ecosystem.
AI Asset Discovery
Discover AI applications, agents, chatbots and integrations across SaaS, APIs and other environments.
Adaptive Policy Updates
Support continuous updates to policies and controls as AI‑tool usage evolves and new threats emerge.
Access and Permissions Monitoring
Monitor data flows, permissions and resource access associated with AI integrations and tools.
Policy Enforcement
Enforce AI‑specific security policies in real time, such as limiting agent permissions and blocking unauthorized AI activity.
Risk Assessment - AI Security Posture Management (AI-SPM) Tools (2)
AI Risk Assessment
Continuously assess AI integration risks including misconfigurations, policy violations and exposure to external AI services.
AI Asset Posture Scoring
Provide dashboards, risk scores and prioritisation for remediation across the AI‑asset estate.
Governance & Compliance - AI Security Posture Management (AI-SPM) Tools (2)
AI‑Generated Content Controls
Monitor AI‑generated content for sensitive/regulated information and apply remediation or blocking controls.
Audit Trails
Maintain audit logs, governance controls and reporting tied specifically to AI assets, agent behaviours and integrations.





