Wiz Runtime Sensor

What do you like best about the product?

Its one of the best tools out there for CSPM, with about the granularity of Findings and issues in the tool

What do you dislike about the product?

Its too vast, and will be difficult for people who use it instantly

What problems is the product solving and how is that benefiting you?

it solves the Cloud misconfigs and issues ,vulnerabilities gab, and vast integrations with all the cloud platforms, which even doesnt impact its performance , with proper license and its AI capabilities are too good, with proper support

What do you like best about the product?

What I like most about Wiz is how it helps you focus on what actually matters instead of drowning in findings. The security graph and attack path analysis, especially the way it highlights risky or “toxic” combinations, make a big difference in day‑to‑day work. Instead of reviewing huge vulnerability spreadsheets, you can quickly see which issues are actually exploitable and worth prioritizing. The agentless approach is also a big plus, since it gives you fast visibility without adding extra overhead.

Another thing I really appreciate is the overall depth of the platform without it feeling too heavy to use. Features like data security insights, contextual vulnerability details, and built‑in remediation guidance are genuinely useful.

The Advanced license adds a lot of value, and the Outpost setup is important for us because it allows sensitive data processing to stay within our environment while Wiz mainly works on metadata. On top of that, the support from our TAM has been excellent, very responsive and hands‑on, especially during onboarding and tuning phases.

What do you dislike about the product?

Wiz is a very powerful platform, but that also means there’s a bit of a learning curve at the beginning. It takes some time to understand how to best use the different features (like projects, dashboards, and integrations) and to set up a structure that fits your organisation. In larger environments, initial scoping and configuration can require coordination across multiple teams.

Since the platform evolves quickly, some features are still maturing and from time to time that can lead to minor instability or changes in behavior that require adjustment. Also, because it provides so much visibility, it can feel a bit overwhelming at first until you fine‑tune filtering and prioritisation. That said, once everything is properly set up, it becomes much easier to manage and the value is very clear.

What problems is the product solving and how is that benefiting you?

We use Wiz to get a clear and prioritized view of cloud risk across our environment, instead of dealing with fragmented findings from different tools. A big problem it solves is reducing noise. By correlating vulnerabilities, misconfigurations, identity risks, and data exposure into a single context, it helps us focus on what is actually exploitable rather than spending time on low‑impact issues.

It’s also very useful for improving collaboration between security and engineering teams. Findings can be scoped, contextualized, and shared in a way that makes remediation more practical and easier to track. In addition, the platform helps with ongoing posture management and compliance by providing continuous visibility, which makes it easier to identify gaps early and avoid reactive work.

What do you like best about the product?

The best thing about Wiz is its "Conciseness." Being able to pinpoint actual risks and threats, and not just "shout" about every vulnerability, combined with the new agents that automatically triage and even attack where needed, is priceless.

What do you dislike about the product?

Since Wiz has grown into a much larger platform, the UI/UX has become somewhat messy and it’s sometimes hard to find the right path. Configuration for some features isn’t very straightforward, and the documentation is inconsistent (SSO, for example). Where possible, I prefer guided wizards to having to dig through docs.

What problems is the product solving and how is that benefiting you?

Wiz helps us stay on top of security across a fairly complex cloud environment without needing a large team to do it. We have a lot of moving parts, and before Wiz it was hard to know what actually needed attention versus what was just noise. Wiz pulls everything into one place, and more usefully it connects the dots - it shows us when something is exposed and vulnerable and sitting near sensitive data or privileged access, which is what really matters. That's saved us a lot of time, because instead of working through a long list of findings we can go straight to the handful that represent real risk and fix those first. It also runs checks earlier in our development process, so we catch a lot of issues before they ever reach production. And since we're a security company ourselves, holding that standard on our own environment matters to us - it's the same level of protection our customers expect.

What do you like best about the product?

What I like best about Wiz is the security graph and the agentless setup. Connecting it across our Azure subscriptions took minutes and there was nothing to install or keep running. We had full visibility on day one with no impact on production.
The graph is the part I'd actually recommend it for. Instead of a flat list of CVEs, it correlates misconfigurations, exposure, secrets and identity permissions into real attack paths, so you can see the toxic combinations that genuinely matter rather than chasing thousands of low-priority findings. That prioritisation has been the single biggest win — it tells us what to fix first and why, and an analyst that might have spent days hunting a toxic combination now gets it surfaced in hours.
It fits how we work too. The Terraform and CI/CD integration catches secrets and misconfigurations before they ship, and being able to write scoped ignore rules for findings we've already accepted keeps the dashboard clean without losing visibility around them. On the AI side, Mika is genuinely handy — it answers security questions in plain language and can write graph queries for you — and the newer agents have noticeably cut time-to-remediation on some issues.
It's become the tool I check when I want to know whether our cloud is actually in good shape, and it answers in a way I can act on.

What do you dislike about the product?

The main downside is that Wiz gives you so much information it can feel overwhelming at first. There's a lot of functionality and it takes time to learn how to navigate it and prioritise findings, especially early on - the lenses and the various capabilities have a real learning curve before you're comfortable using it the way it's demo'd.

What problems is the product solving and how is that benefiting you?

Wiz solves the problem of not having a clear, single view of our cloud estate. Before, risks were scattered across subscriptions and services with no easy way to see them all in one place, so things could go unnoticed. Now we have full visibility across the environment and can spot exposures and misconfigurations wherever they are, which makes it much easier to stay on top of our security posture.

What do you like best about the product?

What I like best about Wiz is the visibility it provides into cloud assets and security risks. It makes it easier to identify critical issues by correlating vulnerabilities and misconfigurations in one place. The platform is intuitive, easy to use, and helps reduce manual effort while improving security prioritization.

What do you dislike about the product?

One challenge with Wiz is that new users may face a learning curve when understanding complex findings in large cloud environments. Improved customization and easier prioritization of alerts would make the platform even more effective.

What problems is the product solving and how is that benefiting you?

Wiz solves the problem of fragmented cloud security visibility by consolidating vulnerabilities, misconfigurations, and asset risks into one platform. This helps us reduce manual effort, prioritize critical risks faster, and improve overall security efficiency.