What problems is Wiz solving and how is that benefiting you?
We use Wiz primarily to solve the challenge of understanding and prioritizing cloud vulnerabilities across a large, complex environment.
Before Wiz, we struggled with:
- Fragmented visibility: vulnerability data was spread across multiple tools and scanners, making it hard to see the full picture of risk in our workloads, containers, and code.
- Poor prioritization: we had long lists of CVEs but limited context about which ones were truly critical in our environment, so a lot of time was spent on triage rather than remediation.
- Slow, manual investigations: identifying the riskiest components and resources required manual correlation between different systems and reports.
After implementing Wiz:
- We can see all cloud vulnerabilities in one place, with clear severity breakdowns (Critical, High, Medium, Low) and views like Vulnerability Findings, Top Exploitable Components, and Top Vulnerable Resources that highlight where risk is concentrated.
- We can quickly identify specific components (for example, libraries like google.golang.org/grpc, jackson-databind, netty, minimist, sequelize, glib, etc.) and resources (such as particular VMs, container images, and clusters) that have the highest number of critical and high vulnerabilities.
- We can filter and group findings by resource type, detection method, and related risk issues, which makes it much easier to focus on the vulnerabilities that matter most to our environment and business.
This has resulted in several measurable benefits:
- Faster triage: instead of spending large amounts of time manually aggregating and sorting vulnerability data, we can use Wiz’s views and filters to get to the highest-risk items in minutes.
- More effective remediation: by focusing on the most exploitable components and the most vulnerable resources, we spend remediation effort where it has the biggest impact on reducing risk.
- Better collaboration: having a single, consistent view of vulnerabilities and related risk issues improves communication between security and engineering teams and helps align on what to fix first. Review collected by and hosted on G2.com.