Wiz CNAPP

The features we like most are the IAC code scanning that enabled us to check Terraform, CF and K8s manifests files and the ability to identify open-source libraries that are vulnerable and another feature we like most is its secret detection in the code repos and container images which helps us to prevent accidental exposure of API keys and tokens.

Wiz gives you a single pane of glass view of your cloud environments, plus code repos. It's a great capability to bring all your alerting and intelligence into one place. Bonus features like cloud cost visibility add to the value.

1. Faster time to visibility: We gained near-instant insight into our cloud posture without deploying agents in Wiz. 2. Risk prioritization: Instead of chasing thousands of low-priority issues, Wiz highlights the small number of truly exploitable attack paths, saving us time and energy. 3. Compliance Support: Wiz maps findings to standards like SOC 2, ISO 27001, HIPAA, and CIS Benchmarks, which help streamline evidence for gathering in audits.

One of the main dislikes is its price. Also, the interface, while clean, is so dense with telemetry and features that it takes a few months to understand and master.

There's a long learning curve to mastering alerting - until then you can easily be bombarded with thousands of alarms. It's easy to get lost in all the alerts, and as a smaller company you will need to be very pragmatic about your strategy and invest time in tuning things to get the right signal to noise ratio.

1. Alert Noises at scale: Sometimes, the number of alerts can be overwhelming. 2. Cost and Licensing: The pricing model can feel expensive at times, especially for the CSPM solution. 3. Learning curve and role-based access: Fine-tuning access and custom dashboards to match responsibilities can take a lot of time.