Wiz

Wiz is a cloud security platform (CNAPP — cloud-native application protection platform) that gives organizations full visibility and risk prioritization across their entire cloud environment. Using an agentless approach, Wiz connects to AWS, Azure, Google Cloud, and Kubernetes and scans the whole stack — VMs, containers, serverless, data, and identities — building a graph (the Wiz Security Graph) that correlates vulnerabilities, misconfigurations, exposed secrets, excessive permissions, and network exposure into the "toxic combinations" that represent real, exploitable attack paths.

Its value is cutting through alert noise. Instead of thousands of isolated findings, Wiz surfaces the handful of critical risks where multiple issues combine into an actual path to sensitive data, so security and DevOps teams fix what matters first. The platform spans posture management (CSPM), workload protection (CWPP), vulnerability management, data security (DSPM), identity (CIEM), container/Kubernetes security, and — via add-ons like Wiz Code and Wiz Defend — code-to-cloud and runtime threat detection, unifying cloud security in one tool used across security and engineering.

Wiz serves mid-market and enterprise organizations with significant cloud footprints. Pricing is not published and is quote-based, billed per cloud workload: the base tier commonly runs around $24,000/year for 100 workloads (Essential) and about $38,000/year (Advanced), with most organizations paying $50,000 to $300,000+ per year (median near $150,000) and modules like Sensor, Code, and Defend priced separately. It competes with Palo Alto Prisma Cloud, CrowdStrike, Orca Security, and Microsoft Defender for Cloud, differentiating on its agentless graph-based risk prioritization.