Wiz

* Brings together 2-3 cloud environments into a single pane of glass

* Supports (although we would like to see better support) segmentation of cloud resources based on tags or resource tag enrichment. This allows our product teams in the organization to focus on the resources they are responsible for.

* It will help our ISO focus on what matters through Wiz's issue generation through toxic combinations. Right now, it is hard for our ISO to focus on what matters. They squirrel away whenever there is an audit or some perceived security threat. I am hoping Wiz will help our office reach a maturity level that takes a more pragmatic approach to security, one that allows us to make steady gains and push the security forward in the organization.

• We haven't completed a full rollout yet, but the goal is to shift left security to all of our product teams so that security is a shared effort across the organization.
• We want to be able to demonstrate fast remediations, corrective action plans with tangibles from Wiz in response to audits or red team findings.
• We would like to also use information from Wiz to substantiate answers to security questionnaires that customers requires us to fill out in order to do business with them.

Palo Alto Networks Cortex XDR

Palo Alto Networks Cortex XDR, Palo Alto Networks Prisma Access, Qualis

We use Wiz to monitor our AWS environment for misconfiguration, threats, irregular activity, changes in posture and user activity. In addition we rely on Wiz findings to optimize our compliance posture and make sure that we continue to maintain a strong and manageable security operation. Wiz is our go-to tool and every day starts with a review of the Wiz dashboards.

• Improved security
• Cost Savings
• Better communication inside te organization

Tenable Cloud Security, IBM Guardium and Orca Cloud Security Platform

Scytale, CrowdStrike Falcon

We use Wiz to get a visibility over our cloud assets and define the gaps, risks, vulnerabilities, configuration drifts, Kubernetes security, secrets, Data Security, and a lot more. Wiz is an overall CSPM product that helps us define and point out the risk that we have as well as gain an overall visibility over all our cloud assets.

• Helped us increase our CSPM by giving us full visibility over cloud configuration issue
• helped get visblity over runtime container with vulnerabilities and crate a plan to address them
• helped us define root level gaps in networking and address them

CrowdStrike Falcon

BigID, Teleport, Torq

Wiz is used for our cloud security. Whenever resources are deployed within QA or production, Wiz will scan and identify vulnerabilities for us to report and respond to. It's great because it provides us with metrics on what issues have been and what has been fixed over time. This is mainly for cloud environments.

• It has engaged the cloud and InfoSec teams more closely.
• Improved cloud security when resources are spun up and deployed to production.
• Enhances the security posture of the entire organization, as products and services are hosted in the cloud.

We use Wiz for Cloud Security Posture Management of our multi-cloud environments. We rely on Wiz for not only getting insights into misconfigured security issues in our environments, but also for understanding the latest vulnerabilities from Wiz's threat intel. This helps us identify threats and services affected by them in our organization, and allows us to quickly export reports and send communications out to teams swiftly to perform remediation accordingly to Wiz's vulnerability report.

• Improved operationalized cloud security: Wiz offers a single pane of glass of visibility into our multi-cloud applications, reducing the operational need to consistently enter different environments to perform security audits and vulnerability assessments. This allows security engineers to spend more time on other objectives while excelling in services offered through Wiz.
• Auditing/Reporting: Wiz makes it easy to export reports, reducing the need for us to consolidate information ourselves to push to necessary contacts for communication, expediting the process in which we remediate vulnerabilities or perform governance.

AWS Security Hub and Amazon GuardDuty

HashiCorp Vault, Tenable Nessus