G2

Ruben F.

Data Engineer

Enterprise (> 1000 emp.)

6/16/2026

"Excellent Cloud Risk Visibility and Fast Insights with Wiz"

4.5/5

What do you like best about Wiz?

What I like most about Wiz is the visibility it provides across our cloud environment. It makes it much easier to understand where risks exist and how they relate to identities, workloads, exposed services, secrets, permissions, and more. It’s especially valuable that we now have clearer insight into which issues need to be handled immediately versus later.

The graph based approach is also a big plus because it doesn’t just show findings, it shows the context around them. On the integration side, we are able to ingest most of our data into Wiz. Overall, Wiz has definitely helped us identify and follow up on misconfigurations and exposure paths much faster than we could have done manually

In terms of performance, Wiz is quite speedy. The dashboard is great to work with, and most elements open quickly. It also seems to handle complex graphs and toxic combinations with ease

The ROI justifies the price for this product. An analyst might take days to find a toxic combination, while Wiz can surface it within hours of being rolled out. That has given us more time to focus on the things that matter right now

We haven’t needed to contact support much yet, which I take as a good sign. Most of the documentation is up to date, and onboarding was smooth. We were able to get full cloud visibility within hours.

With the rollout of new AI capabilities, it’s clear that Wiz is using AI extensively in the product. I’ve especially enjoyed Mika AI. This chatbot can help identify and diagnose issues, and it can even write complex security graph searches to get visibility quickly. With the new Wiz green, blue, and red agent, we have also seen a much faster TTR for some issues. Review collected by and hosted on G2.com.

What do you dislike about Wiz?

One area that could be improved is the SAST scanner. In our experience, it can generate a fair number of false positives, which means findings need manual validation before action is taken.

Another consequence of the agentless approach is that remediation feedback is not always instant. While agentless scanning has many advantages from an operational perspective, after fixing an issue it can sometimes take until the next scan cycle before it becomes clear whether the remediation was correct. In our case, this cycle is daily. This can slow down validation during active remediation work.

I would also like to see improvements to the Wiz IDE extension. It has required authentication more often than I expected, which can interrupt developer workflows when regularly using it during development. I’ve noticed our developers often rely on the Wiz PR comments instead. Review collected by and hosted on G2.com.

What problems is Wiz solving and how is that benefiting you?

Wiz helps us solve the problem of maintaining visibility and control across an ever-growing cloud environment. Without a platform like Wiz, it would be much harder to understand where we have exposed resources, risky permissions, secrets, misconfigurations or toxic combinations that increase risk.

The biggest benefit is prioritization. Instead of treating every finding as urgent, Wiz helps us understand which issues contain the most exposure and should be handled first. This saves time for our employees and helps us focus on remediation work, which has the highest impact.

Wiz’s shift-left mindset is also especially useful. Developers and infrastructure specialists can now see when they create a risky resource, instead of only discovering it after the fact. By incorporating security by design into our SDLC, we have noticed that fewer new issues are being created in Wiz. As a result, our overall list of issues is actually decreasing. Review collected by and hosted on G2.com.