What I like best about Wiz is how it transformed cloud security from a fragmented, reactive process into a unified and strategic business enabler. As Co founder of Cysfera, I value platforms that help organizations move faster without compromising security, and Wiz does exactly that.

The visibility Wiz provides across multi-cloud environments is exceptional. It allows security, DevOps, and engineering teams to understand risks in context, prioritize what actually matters, and remediate issues quickly. Instead of drowning in alerts, we get actionable insights tied to real business impact.

Another major differentiator is the simplicity of deployment and usability. Wiz delivers enterprise-grade security without creating operational friction, which is critical for growing companies and modern cloud-native environments.

From a leadership perspective, Wiz helps create alignment between security and innovation. It gives executives confidence that the organization can scale securely while maintaining agility and operational efficiency. Review collected by and hosted on G2.com.

Nothing!! It’s an amazing product, and I recommend it to all customers around the world. Review collected by and hosted on G2.com.

One of the things I appreciate most about Wiz is how it simplifies cloud security visibility across complex environments. The platform provides a very intuitive way to identify critical risks, correlate vulnerabilities, misconfigurations, exposed secrets, and toxic combinations — all in a single view.

What stands out is the agentless approach, fast deployment, and the ability to prioritize issues based on real impact rather than just alert volume. It helps security and infrastructure teams focus on what truly matters- the support was really nice while integration towards our VUL Platform

The graph-based visualization and contextual risk analysis make investigations much easier, especially in multi-cloud environments. Wiz has significantly improved operational efficiency and collaboration between security, cloud, and DevOps teams.

A modern platform that makes cloud security management far more practical and actionable.

Also their AI mode helped us a lot about the vulnerabilities and affected system Review collected by and hosted on G2.com.

i can't find any issues in wiz at this moment . their performance is very good Review collected by and hosted on G2.com.

I appreciate that Wiz gives us a unified view of our cloud infrastructure, including security findings, risk and posture issues, resource inventory, and cloud attack paths. I can prioritize findings based on risk analysis that goes beyond CVSS or a single scoring model, which helps our ops teams focus on critical vulnerabilities among the many findings. Lens makes it fairly intuitive to narrow searches and filter for resources and findings. I also find the Wiz Red Agent useful for simulating red team testing and enriching some findings beyond what standard scans or Wiz sensors collect. Wiz also offers better capabilities and reporting, along with cloud attack path modeling. Review collected by and hosted on G2.com.

I’ve heard from our developers that Wiz’s schema and some API interactions can be problematic. As Wiz changes and adds features, changes to schemas or result sets can potentially mess up our internal reporting and monitoring. API versioning and more notice of changes would help. The more complicated part of setup was deploying Wiz sensors across our Kubernetes and container environments. Searching with filters also requires our cloud account and resource metadata to be properly tagged. Review collected by and hosted on G2.com.

Agentless, quick to set up, no headaches. Best part: it doesn't drown you in alerts - it shows real attack paths, so you know what to fix first. The AI side is interesting and potentially in high demand - Mika answers tricky security questions and pulls reports in plain language, and the new agents (Green, Red, Blue) hint at where this is all heading. Review collected by and hosted on G2.com.

Licensing for WIZ Cloud and WIZ Code is the weak spot - it's rigid and not transparent enough, and figuring out what you actually need (and what it'll cost) takes more effort than it should.

Reporting could be more flexible. You also can't assign owners for fixing vulnerabilities, which makes remediation harder to track. Review collected by and hosted on G2.com.

Wiz excels at cloud security posture visibility and attack path analysis. It clearly shows the complete access path from the internet to internal resources — not just a list of alerts, but actual exploitable paths. We have it integrated with AWS, GCP, GitHub, and Jira, and the integrations work smoothly for tracking findings through to remediation.

The MCP integration with Claude AI is a standout feature — we can query security findings in natural language in real time, which saves the security team significant time compared to manually navigating the console. Being able to ask "is this asset exposed to the internet?" and get an immediate, accurate answer with full network path details is genuinely useful. Review collected by and hosted on G2.com.

The MCP API connection can drop mid-response when querying large datasets — for example, querying all HIGH/CRITICAL findings across the environment (140,000+ results) caused timeouts. Filtering options help, but better handling of large result sets would improve the experience. VPC Flow Logs visibility could also be surfaced more prominently in the UI when they are disabled, as this is an important gap for network traffic auditing. Additionally, reverse-lookup from a Jira ticket number to the corresponding Wiz resource is unreliable — sometimes the linked asset cannot be found, which breaks the traceability workflow between ticketing and security findings. Review collected by and hosted on G2.com.

Secrets management and auto detection of vulnerabilities against repos is obviously incredibly useful, I also like the red agent that auto-remediates and creates PRs for mitigating vulnerabilities. Review collected by and hosted on G2.com.

This is a bit picky and might actually be an org setting but rescans can sometimes take up to 24 hours, while we get reports we would like to know as soon as possible if the vulner has been remediated Review collected by and hosted on G2.com.

We integrated the Wiz CLI into our pipeline, so it scans our Docker images and we can see issues and changes before deployment. Security Graph: Wiz connects issues and shows us the real risks, so we don’t have to go through thousands of separate alerts. Review collected by and hosted on G2.com.

Wiz doesn’t scan new files when they’re added to an S3 bucket, only at the next scheduled scan, so issues are found late. Scanning on upload would help. Review collected by and hosted on G2.com.

Toxic combination, validating security findings real risk. Good integrations into Slack for triaging alerts. Mika AI can provide good outputs when prompted well. Review collected by and hosted on G2.com.

As an analyst I don't find huge downsides. I feel perhaps the Compliance Dashboard is a bit neglected as the graph control mappings to security frameworks don't really align to what they are trying to measure. Review collected by and hosted on G2.com.

What I like best about Wiz is its clean and intuitive user interface, which makes it easy to navigate across projects, cloud environments, and security findings.

The project management capabilities are especially useful for organizing assets, separating environments, assigning ownership, and tracking remediation progress.

Wiz CLI is another major advantage because it allows security checks to be integrated directly into developer workflows and CI/CD pipelines, helping identify vulnerabilities, secrets, misconfigurations, and other risks before deployment.

The findings are clearly presented, prioritized by risk, and supported with useful context such as affected resources, attack paths, remediation guidance, and business impact.

Overall, Wiz provides strong visibility across the cloud environment, reduces the time required to investigate findings, and helps security and engineering teams collaborate more effectively. Review collected by and hosted on G2.com.

I cant open jira tickets for all the findings only for issues. Review collected by and hosted on G2.com.

Great visibility into threat detections and vulnerabilities. Helps prioritize cloud security risks effectively. Review collected by and hosted on G2.com.

Some findings require manual investigation. Review collected by and hosted on G2.com.