Wiz Runtime Sensor

What do you like best about the product?

In-depth cloud asset configuration visibility, code-to-cloud capabilities, vulnerability management, ITSM tool integration, trends and reporting dashboards.

What do you dislike about the product?

Menus are sometimes cluttered, findings can get overwhelming and you would need good prioritization procedures, naming conventions are a bit difficult to explain to security auditors looking for overall vulnerabilities in a system (between findings and issues)

What problems is the product solving and how is that benefiting you?

Cloud vulnerability management

What do you like best about the product?

A clear map of all interconnected resources, illustrating how an attack could propagate. This capability is missing in AWS Security Hub and is a key strength of Wiz

What do you dislike about the product?

One drawback is that the platform has a learning curve. It takes some time to fully understand the interface and make the most of all the features

What problems is the product solving and how is that benefiting you?

Wiz centralizes our AWS configuration data, enabling rapid identification of misconfigurations such as overly permissive security groups and outdated Lambda runtimes. Its dashboards save significant time by providing a clear view of priorities and risk levels.

What do you like best about the product?

The results are clear, accurate, and prioritized. The remediation guidance is clear, concise, and can be tailored to the specific resource. And the configuration/setup as well as integration points, was simple and broad without being overly permissive. The company vision is ambitious and they deliver. The support team is extremely available and has not seen the usual turnover.

What do you dislike about the product?

The interface is not always intuitive, and updates are pushed very frequently often breaking documentation links and changing processes with little to no notice.

What problems is the product solving and how is that benefiting you?

Wiz is giving us a clear picture of what we have in our environments and how secure our applications are. When we need to assure compliance, either for clients or for certification, its findings are reliable and present without additional effort. And when cloud/app events and incidents inevitably happen, we can swarm and resolve the underlying risks much quicker than before.

What do you like best about the product?

It is a really great SAAS paltform giving complete visibility of your cloud environment

What do you dislike about the product?

can be a bit complex to understand in the beginning

What problems is the product solving and how is that benefiting you?

It provides us with comprehensive visibility into our cloud environment.

What do you like best about the product?

The attack path visualization feature allows engineers to grasp and prioritize genuine risks, rather than relying solely on abstract CVSS scores. The platform provides clear explanations of risks, which helps secure engineer buy-in and encourages independent remediation. This has led to real security democratization, easing the burden on security leadership and reducing bottlenecks.

What do you dislike about the product?

The input validation for connector credentials is weak, which creates unnecessary friction when first integrating with the cloud. Additionally, the user experience is clearly designed with enterprises in mind, resulting in a steep learning curve that can be challenging for smaller teams.

What problems is the product solving and how is that benefiting you?

Benefits of Implementing Wiz

Background
In our company, I was the sole person with specialized security expertise. As the business expanded and our product offerings grew, the attack surface increased, and security audits began to take up a significant portion of my time. This made it difficult for me to concentrate on my primary responsibilities as CTO.

Previous Challenges
To tackle this, I aimed to make security a shared responsibility throughout the organization. However, with tools from other vendors, although we could track security issues as inventory items, we were unable to give our engineers the autonomy to proactively resolve these issues themselves.

Results from Wiz Implementation
Wiz stands out by offering thorough attack path visualization with Wiz Security Graph, clear explanations of the risks associated with each issue, and practical remediation guidance.
Thanks to these features, our engineering teams are now able to independently resolve most security issues. Consequently, we have improved our overall security posture and greatly reduced the amount of time I personally need to dedicate to security operations.