Dazz Unified Remediation Platform

My main use case for Wiz Code  is for vulnerabilities. I receive a specific vulnerability from some assets, and I analyze and try to verify if they are positives or false positives. In general, all of my work regarding Wiz Code  involves vulnerabilities.

Wiz Code's cloud part is good; I am able to see the IDs, the assets, and the information, which in general makes it easier to find where the vulnerability is. The organization of the data helps me find where the vulnerability is; I don't really use the dashboard much.

The AI feature is the other part that I like most with Wiz Code; it helps a lot and makes it easier to search for something. For example, if I need to do some query to look up a specific vulnerability or assets, it is easier.

Wiz Code has positively impacted my organization because it is better on a daily basis. We receive new cases, and it is easy to analyze and take care of them. It made things easier in that we receive a specific vulnerability, and if I select that one, we are able to see everything regarding the vulnerability, the asset, and the owners, for example.

The dashboards can be better; we have dashboards, but they are really complex and have a lot of information.

I have been working in my current field for almost three years.

Wiz Code is stable with no downtime or reliability issues.

Wiz Code's scalability can handle growth or increased workload well.

I have never reached out to Wiz Code's customer support, so I don't have experience with that.

I did not previously use a different solution before Wiz Code.

I don't have much experience with pricing, setup cost, and licensing because my company bought it, so I just use it for free.

I didn't evaluate other options before choosing Wiz Code.

I think Wiz Code is pretty much better right now. I only use it for what is already specified. I don't know what advice I would give to others looking into using Wiz Code because I think we use it more for company work and I don't know how much I would use it privately since this is more a company tool. I would rate my overall experience with Wiz Code as a nine out of ten.

Wiz Code  is used for vulnerability management by scheduling a scan for the entire infrastructure, then exporting the report and sharing it with the remediation team. Sometimes, zero-day vulnerabilities are discovered, and remediation steps are checked to see if they have been released. The scan status for scheduled or on-demand scans is monitored, and once a scan is complete, verification is performed to ensure correct data is being retrieved. The main use case for Wiz Code  is vulnerability management for infrastructure.

Wiz Code offers minimum false positive vulnerabilities, which is the best feature and meets expectations for the tool. Another valuable feature is remediation, where remediation steps are provided and remediation status can be tracked.

The remediation tracking helps the workflow by making it faster to track and making remediation easier. For example, one report is created for everything, and then the steps for remediation are provided.

Scanning in Wiz Code takes a lot of time. When running 50, 100, or 1,000 assets at one time, it takes nine or ten hours, and the reason is unclear. If the scanning time could be improved, it would be helpful.

Slowness is sometimes experienced when accessing Wiz Code, which is on the cloud. Connection timeout errors occur sometimes, and sometimes it is not available, so that needs to be resolved. Feature-wise, compared to zero-day vulnerability remediation steps, remediation steps are received faster on Qualys and Tenable. In Wiz Code, it takes five, six, or seven days, and zero-day vulnerability remediation steps are not provided that quickly.

Wiz Code has been used for the last two years.

Wiz Code is stable now.

Wiz Code's scalability is good now.

Timely responses from customer support for Wiz Code are not being received. Service requests are raised, but proper responses are not provided. It takes 24 to 48 hours to get a response, even after asking for updates multiple times, so customer support needs to be improved.

Tenable was used previously, and the management decided to switch to Wiz Code because it was costly. The decision was made to go with Wiz Code as a more affordable alternative.

A return on investment has been seen with Wiz Code, as it is money-saving. Management provided the update that it is money-saving.

Before choosing Wiz Code, Tenable Security Center  was evaluated, and the decision was made to go with Wiz Code.

Wiz Code's implementation positively impacted the organization, and the decision to go with it was made because of the billing. Feature-wise, it is not much different, but the billing is impacting. Tenable and Qualys are more costly compared to Wiz Code, which is why the organization decided to go with Wiz Code.

Wiz Code has a feature for the dashboard, and dashboards are created to give the status for business metrics. These metrics include what the critical assets are, how many worldwide spread vulnerabilities there are, how many assets per location, what the remediation is, how old the vulnerabilities are, and how many are end of life. The dashboard is very easy to create and creates a business metrics overview for everyone to see what the risk is in the organization. The metrics feature is very good.

Wiz Code's governance and security regarding AI capabilities are pretty good, and there is no issue with that.

The accuracy of Wiz Code is understood to be up to 95% or 96%.

If you are mostly on the cloud, Wiz Code is recommended. If you are mostly on-premises, it is not recommended.

This review receives a rating of 8.

My main use case for Wiz Code  is to detect vulnerabilities, findings, and issues in our cloud environment. It detects our AWS  account, Azure , and GCP  as well, scanning all our cloud accounts and detecting misconfigurations. Based on severity—high, low, medium—we find those issues and solve them accordingly, identifying the root cause of those things.

In our cloud environment, we have detected issues with ECS services, where our main part is to develop code and policies. One thing we noticed in the ECS service was that a role had high permissions, meaning it had more than necessary access. We solved that issue by remediating it and sharing our information with the cloud team.

As part of these past six months, I have concentrated on my contribution to the team, focusing on Wiz Code  policies and concurrently working on the forensics feature in Wiz Code. For the forensics feature, we create a cross-account IAM  role. If we have 100 AWS  accounts, there are many issues found at the snapshot level and in EC2  instances. Wiz Code has a feature called Wiz  forensics, which copies the EC2  volumes from the source account to the forensic account, allowing us to investigate all the findings. To do this, we need to create a cross-account IAM  role and think about following the least privilege policy. Recently, I worked on the Wiz Code forensics feature.

Wiz Code offers many benefits. It is a cloud security tool that is essential nowadays, helping significantly in my day-to-day activities. It detects misconfigurations and shows them in the Wiz Code UI, and it also provides features such as dashboards and widgets, allowing us to create customized dashboards for our requirements and set alerts as needed.

I have customized the dashboards. Recently, I'm doing some research and development on Wiz Code dashboards and reviewing videos on creating them.

Wiz Code has made things easier because whenever we write any cloud configuration rule, it detects issues across all AWS accounts. For example, if an employee creates an S3  bucket in public mode when it should be private, Wiz Code has a feature called Cloud Matcher in a cloud configuration rule that catches this misconfiguration. It provides details such as the account name, the S3  bucket name, when the issue was issued, and the IAM  user involved, all of which are shown in the Wiz Code UI under the issues section.

Using Wiz Code has led to significant measurable improvements for our organization. For example, the graph controls feature allows us to create a security query that detects misconfigurations and indicates the stage at which issues occur. This feature shows everything end-to-end in a security graph, identifying what is affected and the root cause of the issue.

Wiz Code has many features, and I think they could continue to enhance customization according to our requirements.

I have been using Wiz Code for the past six to eight months.

Wiz Code is stable, and we can customize it according to our requirements.

For scalability, we can adapt Wiz Code based on our specific needs.

The customer support is good. Whenever we encounter any blockers or require information or permission issues in Wiz Code, they promptly address our tickets.

I did not use any other solution before Wiz Code. Previously, I was involved in another project that was a DevOps project.

I have used the AWS cloud provider with cloud connectors to connect our cloud with Wiz Code. Specific roles and permissions are needed to deploy the Wiz Code scanner role, and these roles are created in both our environment and the Wiz Code AWS account for integration.

There is a business relationship with the vendor, as there is a bond from our organization according to information I heard from my teammates.

Using Wiz Code has been a worthy investment. Manually checking all 100 AWS accounts for issues would take an immense amount of time, but Wiz Code allows us to scan all accounts within minutes and continuously monitors our cloud environment every 24 hours, displaying any changes in the Wiz Code UI under the issues and threats section.

I don't have any idea about the licensing and pricing specifics as I believe that is handled in the backend, but I suspect that acquiring a Wiz Code tenant subscription involves significant cost.

I did not evaluate other options before choosing Wiz Code, as I was switching to another project that used Wiz Code. I wanted to explore learning new skills in this field.

There is a business relationship with the vendor, as there is a bond from our organization according to information I heard from my teammates.

Wiz Code significantly aids in my day-to-day activities. I would rate this product eight out of ten, and I don't have any further additional thoughts on this session.