About Wiz
Wiz is a commercial cloud security platform that connects code, cloud and runtime into one security graph. By linking assets, identities, vulnerabilities and exposures, it gives security teams the context to decide which issues are actually exploitable and to respond quickly. It is used by organizations running workloads in the public cloud.
The platform is organized into three areas: Code, for securing development from the IDE through CI/CD and deployment; Cloud, for preventing cloud and AI risks across infrastructure, applications and data; and Defend, for runtime protection and threat detection. The vendor describes its approach as agentless scanning with an emphasis on context to fix problems at the source and to automate response.
Wiz is proprietary and delivered as a hosted service, with a public pricing page and a demo request form on the homepage. Its messaging highlights security for AI workloads alongside traditional cloud posture and vulnerability management.
Key features
- Agentless cloud risk scanning
- Security graph linking code, cloud and runtime
- Secure development checks from IDE to CI/CD
- Cloud and AI risk prevention
- Runtime protection and threat detection
- Context-based prioritization of exposures
Good fit for
- →Gaining visibility across multi-cloud environments
- →Prioritizing exploitable cloud vulnerabilities
- Tags
- security
- cloud-security
- cspm
- agentless
- vulnerability-management
- cnapp
- devsecops
Wiz: questions and answers
- What is Wiz used for?
- Wiz is an agentless cloud security platform that maps risk across code, cloud infrastructure and runtime into a single security graph. It is a good fit for gaining visibility across multi-cloud environments and prioritizing exploitable cloud vulnerabilities.
- How much does Wiz cost?
- Wiz doesn't publish fixed prices; pricing is quoted on request.
- Is Wiz open source?
- No. Wiz is proprietary (closed-source) software and can't be self-hosted. Open-source alternatives to Wiz include Grype, Kubescape and tfsec.
- What are some alternatives to Wiz?
- Wiz competes with Palo Alto Networks, CrowdStrike and Aikido Security. For open-source options, see Enlisted's ranked list of open-source Wiz alternatives.
Open-source alternatives to Wiz
See all
Grype
Security
A vulnerability scanner for container images and filesystems
Apache-2.0vs Snyk★ 13k
Kubescape
Security
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, an
Apache-2.0vs Wiz★ 12k
tfsec
Security
Tfsec is now part of Trivy
MITvs Aikido Security★ 7k
Trivy
Security
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code rep
Apache-2.0vs Snyk★ 38k
Falco
Security
Cloud Native Runtime Security
Apache-2.0vs Wiz★ 9.4k
DefectDojo
Security
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
BSD-3-Clausevs Tenable★ 5k
SaaS alternatives to Wiz
See all
Palo Alto Networks
Security
Network, cloud and endpoint security vendor selling firewalls, SASE and SOC tools
SaaS
CrowdStrike
Security
Cloud-native endpoint protection, threat detection and response platform
SaaS
Aikido Security
Security
All-in-one application security platform for code, cloud and runtime scanning
SaaS
Snyk
Security
Developer security platform that scans code, dependencies, containers and IaC
SaaS
Check Point
Security
Network firewalls, cloud and endpoint security from an Israeli security vendor
SaaS
Prisma Cloud
Security
Cloud-native application protection platform from Palo Alto Networks
SaaS
