Wiz

* Brings together 2-3 cloud environments into a single pane of glass

* Supports (although we would like to see better support) segmentation of cloud resources based on tags or resource tag enrichment. This allows our product teams in the organization to focus on the resources they are responsible for.

* It will help our ISO focus on what matters through Wiz's issue generation through toxic combinations. Right now, it is hard for our ISO to focus on what matters. They squirrel away whenever there is an audit or some perceived security threat. I am hoping Wiz will help our office reach a maturity level that takes a more pragmatic approach to security, one that allows us to make steady gains and push the security forward in the organization.

• We haven't completed a full rollout yet, but the goal is to shift left security to all of our product teams so that security is a shared effort across the organization.
• We want to be able to demonstrate fast remediations, corrective action plans with tangibles from Wiz in response to audits or red team findings.
• We would like to also use information from Wiz to substantiate answers to security questionnaires that customers requires us to fill out in order to do business with them.

Palo Alto Networks Cortex XDR

Palo Alto Networks Cortex XDR, Palo Alto Networks Prisma Access, Qualis

We use Wiz to monitor our AWS environment for misconfiguration, threats, irregular activity, changes in posture and user activity. In addition we rely on Wiz findings to optimize our compliance posture and make sure that we continue to maintain a strong and manageable security operation. Wiz is our go-to tool and every day starts with a review of the Wiz dashboards.

• Improved security
• Cost Savings
• Better communication inside te organization

Tenable Cloud Security, IBM Guardium and Orca Cloud Security Platform

Scytale, CrowdStrike Falcon

We use Wiz to get a visibility over our cloud assets and define the gaps, risks, vulnerabilities, configuration drifts, Kubernetes security, secrets, Data Security, and a lot more. Wiz is an overall CSPM product that helps us define and point out the risk that we have as well as gain an overall visibility over all our cloud assets.

• Helped us increase our CSPM by giving us full visibility over cloud configuration issue
• helped get visblity over runtime container with vulnerabilities and crate a plan to address them
• helped us define root level gaps in networking and address them

CrowdStrike Falcon

BigID, Teleport, Torq

We utilize Wiz for Cloud vulnerability management, its used to detect high fidelity security issues, and configuration changes/drift that can happen over time. Its great because it can be implemented in a way that allows us to see these changes as they happen without fear that something could be changed without centralized visibility. We utilize it in a self service in mind so development teams can utilize the tool to help them remediate their areas issues, while giving security and architecture teams global views.

• Wiz has helped enable us to achieve lower SLAs when it comes to vulnerability management because it can put the engineers in the tool to see the issue even for beyond CVE's but configuration issues.
• The issues Wiz raises are considered more valuable as it helps address the real risk of different configurations depending on the exposure of an asset.

Lacework, CrowdStrike Falcon and Orca Cloud Security Platform

Zscaler Private Access, Zscaler Internet Access, CrowdStrike Falcon, Axonius, Splunk Enterprise Security (ES), Microsoft Defender for Endpoint

Initially it gives great visibility of every technology across our digital estate, then highlights vulnerabilities and risks including how they could be exploited and guidance on how these can be fixed/addressed. The thing I like most is the integrations with other systems so that this is not a stand alone tool but an integral part of our businesses security suite.

• Overall visibility of all Technical assets
• Visibility not previously seen

Appcheck NG, SentinelOne Vigilance, Abnormal Security