tools
Wiz Cloud Security Platform
Wiz Cloud gives security teams visibility, risk prioritization, and remediation across cloud environments.
Wiz Cloud connects to cloud environments through API connectors and maps relationships between resources, identities, data, workloads, code, and applications. It helps teams find misconfigurations, vulnerabilities, exposed data, identity risks, and attack paths.
Security, cloud, DevOps, and compliance teams use it for posture management, vulnerability management, compliance, container and Kubernetes security, IaC scanning, and cloud workload protection. Pricing is modular and quote-based; the Wiz Sensor is an add-on to Wiz Cloud.
Features
- Agentless visibility across cloud and AI environments
- Security Graph maps relationships and attack paths
- Cloud security posture and misconfiguration management
- Vulnerability management for VMs, containers, serverless, and appliances
- Cloud identity entitlement analysis and least-privilege policies
- Sensitive-data discovery, classification, and risk detection
- Infrastructure-as-code scanning for Terraform, CloudFormation, Kubernetes, and Docker
- Runtime workload protection through Wiz Sensor
Use cases
- Detect and remediate cloud misconfigurations
- Prioritize exploitable vulnerabilities across workloads
- Analyze excessive cloud permissions and identity risks
- Find sensitive data exposure and related attack paths
- Scan infrastructure-as-code before deployment
- Monitor and protect cloud workloads at runtime
Pros
Cons
Latest updates
- From Reactive to Proactive: Empowering SOC Teams with the Wiz Red and Blue Agents
Red Agent gives SOC teams validated pre-breach alerts, while Blue Agent investigates active threats at machine speed
- ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context
Reduce triage times and focus on the risks that matter most by combining context across code, infrastructure, and runtime
- Securing the Mission at Machine Speed: Wiz AI Agents Arrive in Wiz for Gov
Wiz AI Agents elevate traditional CNAPP, empowering public sector security teams to accelerate security and innovation.
- Introducing Continuous Vulnerability Assessment: Real-Time Defense for the AI Threat Era
Detect exposure to new vulnerabilities the moment they are published with Wiz CVA
- Wiz Penetration Test Findings is now GA
Transform point-in-time pen-tests into continuous exposure management with unified platform combining pen-test findings and real-time cloud context
Capabilities
- Agent that edits files — “Automatically turns risks into code fixes - opening PRs to fix issues at the source and helps write secure code from the start.” source
- Knows the whole codebase — “It understands your codebase's context to surface what pattern-matching engines miss.” source
- Builds agents and workflows — “Use out-of-the-box workflows or build your own with a visual, no-code canvas.” source
Get it
Security
- SOC 2 Type II — “Our SOC 2 Type II + HIPAA report and our SOC 3 report are available in the Customer Trust Center below.” source
- SOC 2 — “Our SOC 2 Type II + HIPAA report and our SOC 3 report are available in the Customer Trust Center below.” source
- ISO 27001 — “Wiz is proud to announce its ISO 27001, ISO 27017, ISO 27018, and ISO 27701 recertification.” source
- HIPAA — “Our SOC 2 Type II + HIPAA report and our SOC 3 report are available in the Customer Trust Center below.” source
Pricing
- Prices checked
- 2026-10-23