Cloud Security Posture

Now pick what to compare Wiz against.

Wiz clear

Open a name for its full profile

Wiz
Capabilities only
Wiz · Commercial · 6 capabilities in this domain
selected
Microsoft Defender for Cloud
Capabilities only
Microsoft · Freemium · 5 capabilities in this domain
Compare →
Orca Cloud Security Platform
Capabilities only
Orca Security · Commercial · 5 capabilities in this domain
Compare →
Cortex Cloud
Capabilities only
Palo Alto Networks · Commercial · 3 capabilities in this domain
Compare →
Tenable Cloud Security
Capabilities only
Tenable · Commercial · 3 capabilities in this domain
Compare →
CrowdStrike Falcon Cloud Security
Capabilities only
CrowdStrike · Commercial · 2 capabilities in this domain
Compare →
Google Security Command Center
Capabilities only
Google · Freemium · 2 capabilities in this domain
Compare →
AWS Security Hub
Capabilities only
Amazon Web Services · Commercial · 1 capabilities in this domain
Compare →
Cloud Custodian
Capabilities only
Cloud Native Computing Foundation (CNCF) · Open Source · 1 capabilities in this domain
Compare →
Cyera
Capabilities only
Cyera · Commercial · 1 capabilities in this domain
Compare →
FortiCNAPP
Capabilities only
Fortinet · Commercial · 1 capabilities in this domain
Compare →
Prowler
Capabilities only
Prowler · Open Source · 1 capabilities in this domain
Compare →
Amazon Web Services
Capabilities only
Amazon Web Services · Commercial · 0 capabilities in this domain
Compare →
Microsoft Azure
Capabilities only
Microsoft · Commercial · 0 capabilities in this domain
Compare →

In Cloud Security Posture

Wiz

Wiz · Cloud Security Posture

Close ×

CommercialCompany

Wiz connects to cloud accounts through APIs and snapshots to find misconfigurations, vulnerabilities, secrets, excessive permissions and sensitive data, then correlates them into toxic-combination attack paths. Wiz Code extends to repositories and pipelines and Wiz Defend adds runtime detection.

What it does10 capabilities · 7 at full coverage

7 of 10 at full coverage, 5 through a named feature.

AI Model & Dataset InventoryPartialAI · via a feature · level 3 · 5 providers
Agentless Workload ScanningFullCLOUD · level 3 · 3 providers
Attack Path AnalysisFullCLOUD · via a feature · level 4 · 5 providers
Cloud Infrastructure Entitlement ManagementFullCLOUD · level 3 · 6 providers
Cloud Security Posture ManagementFullCLOUD · level 2 · 15 providers
Code-to-Cloud TraceabilityFullCLOUD · via a feature · level 4 · 6 providers
Data Security Posture ManagementFullCLOUD · level 4 · 4 providers
IaC Misconfiguration ScanningPartialIAC · via a feature · level 2 · 9 providers
Kubernetes Security Posture ManagementFullK8S · level 3 · 9 providers
Runtime Threat DetectionPartialK8S · via a feature · level 3 · 14 providers

What it proves37 controls across 13 frameworks

Satisfied through its capabilities, not claimed by the vendor.

CSF 2.09 / 106DE.AE-02 DE.CM-09 ID.AM-07 ID.AM-08 ID.RA-01 ID.RA-04 ID.RA-05 PR.AA-05 PR.PS-01
CIS Controls6 / 18CIS 1 CIS 13 CIS 3 CIS 4 CIS 6 CIS 7
CNAS Top 104 / 10CNAS-1 CNAS-10 CNAS-3 CNAS-9
AICM3 / 18IAM MDS STA
CIS Benchmarks3 / 6CIS AWS Foundations Benchmark CIS Kubernetes Benchmark CIS Microsoft Azure Foundations Benchmark
DSOMM3 / 19IG-Monitoring TV-Dynamic-Depth-Infrastructure TV-Static-Depth-Infrastructure
AI RMF2 / 19GOVERN 1 MAP 4
SSDF 1.12 / 42PS.3.2 PW.9.1
ASVS 5.01 / 17V13
CRA1 / 41Annex I Part I (2)(b)
LLM Top 101 / 10LLM03:2025
OWASP Top 101 / 10A02:2025
SAMM 2.01 / 90O-EM-1-A

What it stops12 techniques · 4 risks

12 techniques countered, 12 of them common

Cloud Misconfiguration ExploitationVery Common
Command and Scripting InterpreterT1059Very Common
Exploit Public-Facing ApplicationT1190Very Common
Valid Accounts: Cloud AccountsT1078.004Very Common
Account ManipulationT1098Common
Container Administration CommandT1609Common
Container and Resource DiscoveryT1613Common
Data from Cloud StorageT1530Common
Escape to HostT1611Common
Exposed Kubernetes Control InterfaceCommon
Resource HijackingT1496Common
Unsecured Credentials: Container APIT1552.007Common

4 risks reduced

Compromised modelHigh
Container or Kubernetes workload compromise goes undetectedHigh
Exposed and over-privileged cloud resources go unnoticedHigh
Insecure infrastructure configuration is deployedHigh

Where it runs5 phases · 3 ways to deploy

Capabilities per lifecycle phase

Plan1
Code1
Build2
Operate9
Monitor1

How it is delivered

AgentlessHost agent or sensorSaaS

What it unlocks12 activities · reaches level 5

Program activities its capabilities support, reaching level 5. Supporting an activity is not completing it.

Level 1

AI usage policy and inventoryLow effort
Assess cloud accounts against benchmarksLow effort
Benchmark cluster configurationLow effort
Scan infrastructure codeLow effort

Level 2

Block misconfigurations in pull requestsLow effort
Full workload vulnerability coverageLow effort

Level 3

Right-size entitlements and prioritize attack pathsMedium effort
Runtime detection and network segmentationMedium effort

Level 4

Code-to-cloud ownership and sensitive data postureMedium effort

Level 5

Automated containment and zero-trust workloadsHigh effort
Fix runtime findings in code automaticallyHigh effort
Preventive cloud guardrails make misconfiguration impossibleHigh effort

How it holds up2 strengths · 2 limitations

Strengths

Fast agentless deployment
Graph-based prioritization

Limitations

Premium pricing
Deep runtime protection newer than posture features

What it costsPlatform enterprise agreement

LicensingPlatform enterprise agreement

Priced perannual contract

BillingSubscription

Scales withNegotiated scope (developers, assets, modules)

Total cost

Opaque list pricing; benchmark with peers and require clear overage terms.

What it takes to run

No staffing, rollout time or operational commitment recorded.

What it works with4 features · 1 AI feature

Named features

AI security posture managementAIAI security posture management in Wiz.
Wiz CodeWiz Code in Wiz.
Wiz DefendWiz Defend in Wiz.
Wiz Security GraphWiz Security Graph in Wiz.

AI features

AI security posture management

What else to look at

No alternative, competitor or family sibling is modeled for it.

What backs this up

No measurement, incident or pipeline using it.

Gantry 7.1.0 · OFF.12 · OFF.13