Wiz
Agentless cloud security that connects code, cloud, and runtime into one graph
Gallery
5 items
About Wiz
Wiz is a Cloud-Native Application Protection Platform (CNAPP) that gives security teams unified visibility across code, cloud infrastructure, identities, and runtime. Its core innovation is the Security Graph, which agentlessly scans AWS, Azure, GCP, OCI, Alibaba Cloud, and Kubernetes to map relationships between resources, vulnerabilities, misconfigurations, and identity permissions, then surfaces "toxic combinations" of risk instead of flat vulnerability lists. Customers report seeing a full risk profile within 24 hours of connecting cloud accounts, without deploying agents on every workload.
The platform is organized into three modules: Wiz Code (CI/CD and infrastructure-as-code scanning with one-click fix pull requests), Wiz Cloud (agentless CSPM, CWPP, CIEM, and DSPM), and Wiz Defend (eBPF-based runtime threat detection and response). Wiz has also added AI-specific capabilities, including AI-SPM to discover shadow AI models, training datasets, and exposed inference endpoints across a cloud estate, plus a set of AI agents — Wiz Code (automated remediation), Wiz Red (attack path simulation and penetration testing), and Wiz Blue (automated SecOps threat hunting). Wiz was named a Leader with the highest Current Offering score in The Forrester Wave for CNAPP (Q1 2026) and holds a 4.7/5 rating across 700+ reviews.
Google completed its $32 billion acquisition of Wiz in March 2026, the largest cybersecurity deal on record, with Wiz continuing to operate as a multi-cloud platform rather than becoming GCP-exclusive. Wiz is enterprise-only with no free tier or self-serve signup; pricing is workload-based and requires a sales conversation, with typical contracts ranging from roughly $24,000 to $350,000+ per year depending on cloud footprint and modules.
Key Features
- Agentless Security Graph connecting code, cloud, identity, and runtime context
- Wiz Cloud: agentless CSPM, CWPP, CIEM, and DSPM in one platform
- Wiz Code: CI/CD and infrastructure-as-code scanning with auto-fix pull requests
- Wiz Defend: eBPF runtime sensor for real-time threat detection
- AI-SPM for discovering shadow AI models, datasets, and exposed inference endpoints
- Wiz Red for automated attack path simulation and penetration testing
- Wiz Blue for AI-driven SecOps threat hunting and investigation
- Multi-cloud coverage across AWS, Azure, GCP, OCI, Alibaba Cloud, and Kubernetes
- Toxic combination risk prioritization instead of flat vulnerability lists
- Full risk visibility typically available within 24 hours of onboarding
Pros
- Agentless architecture enables fast onboarding without deploying agents everywhere
- Unified Security Graph correlates risk across code, cloud, identity, and runtime
- Strong analyst recognition: Forrester Wave CNAPP Leader, IDC MarketScape, high review ratings
- AI-SPM addresses emerging shadow-AI and model exposure risks
- Backed by Google Cloud following the March 2026 acquisition, ensuring continued investment
Cons
- Enterprise-only pricing with no free tier, self-serve option, or published list price
- Per-workload pricing scales linearly and can grow expensive for large cloud estates
- Full value (runtime protection, AI agents) requires significant configuration effort
- Limited built-in runtime protection compared to dedicated CWPP/EDR-only tools
- Recent Google acquisition introduces some uncertainty around long-term roadmap and pricing
Pricing
Wiz uses enterprise-only, workload-based pricing and does not publish list prices; all plans require a sales conversation. Published AWS Marketplace reference pricing lists Wiz Essential at $24,000/year and Wiz Advanced at $38,000/year for 100 cloud workloads, with add-ons such as Wiz Sensor ($28,000/year for 100 sensors), Wiz Code ($58,500/year for 100 code licenses), and Wiz Defend ($18,000/year for 300GB of monthly log ingestion). Third-party spend data (Vendr) puts overall contract values between roughly $24,000 and $354,000/year, with a median around $111,500/year. Most contracts run 12 months, and pricing scales with the number of cloud workloads protected.
Claim Verified Creator Badge
Are you the founder of Wiz? Display this listing's verified badge on your website to show your customers that your product has been vetted and listed on AI Central Resources.
<a href="https://www.aicentralresources.com/tool/wiz" target="_blank" rel="noopener"> <img src="https://www.aicentralresources.com/badges/featured-badge-dark.svg" alt="Featured on AICentralResources" width="200" height="54" style="border: none;" /> </a>
* Place this HTML snippet in your website's footer, landing page, or press section. This creates a search-friendly backlink directly to your verification page.
Connect with Wiz
Frequently Asked Questions
Yes. Google has publicly committed to keeping Wiz multi-cloud, continuing full support for AWS, Azure, OCI, and Alibaba Cloud alongside GCP.
No. Wiz uses an agentless-first architecture for cloud scanning, though an optional eBPF runtime sensor (Wiz Defend) can be added for real-time runtime protection.
Wiz does not publish list pricing. Reference figures range from about $24,000/year for a base 100-workload plan up to $350,000+/year for larger enterprise deployments.
It's a unified data model connecting cloud resources, identities, vulnerabilities, and network configurations so Wiz can surface combined 'toxic' risk paths rather than isolated findings.
Yes, via AI-SPM, which discovers unmanaged AI models, training data exposure, and publicly accessible inference endpoints across a cloud environment.