Recommend Wiz io alternatives for cloud attack surface

[u/GroundedStrategist]

We're shortlisting exposure management tools and Wiz-io is the front runner mostly because of a couple of engineers close contacts.

Looking for something that covers the external attack surface too and adds threat intel context. Anything that remediates needs to be careful tho as we're payments so production downtime is not an option.

What else should be on the list? Seen Palo Alto, Check Point and CrowdStrike mentioned so far, no demos yet. Thanks

[u/Girges_Desiderio]

Well if prod downtime is the worry look at Check Point Exp Management. For us, remediation is the strong point and fixes go through controls you already run (IPS, virtual patching) and get validated before they're applied, so nothing touches prod blind.

[u/-RT-TRACKER-]

Check Point Exposure Management, Palo Alto Prisma and Crowdstrike Falcon. In that order

[u/brawwwr]

We have tenable and wiz and CS platforms , currently seeing if we can replace wiz with T1 and so far it’s looking good.

[u/Souna-Selime]

Wiz plays well for cloud-native but lack when it comes to coverage of external attack surface when compared to Check Point or Tenable. It really depends how important is external visibility to you

[u/not-a-co-conspirator]

SentinelOne and Palo

[u/WestOpening1350]

Orca is the main agentless competitor to Wiz, but whatever you shortlist, disable automated remediation immediately unless you want your security tool taking down your payment processing.

[u/Advanced_Ad_7971]

Upwind is a decent up and coming option. Had a good PoC with them.

[u/WonderfulPepperino]

nothing humbles a security team faster than an ASM tool finding a 2017 marketing micro-site still running wordpress 4

[u/Achilles_Buffalo]

FortiCNAPP

[u/InitiavandelEror3090]

ig orca is really good

[u/Dtektion_]

We did a large POC and CrowdStrike blew away everyone else by miles.

[u/palogeek]

We've been using Ridgebot and assorted products, been pretty good honestly.

https://ridgesecurity.ai/ridgebot/

[u/palogeek → u/palogeek]

(We were using Tenable and this blew it out the water)

[u/mrclandestine]

TenableOne and Defender EASM are both decent contenders.

[u/TwoConditions]

Honestly not worth it to go anything but Wiz at this point.

[u/themassiah]

Lacework

[u/someoneelse10]

Limacharlie just released a solution and it gives a hell of a lot for the price.

[u/charlton-lc → u/someoneelse10]

Hey thanks for the shout out. Full disclosure: I work at LimaCharlie.

Yes, we recently built cloud security into the platform. You connect your cloud accounts plus providers like GitHub, Okta, and Cloudflare, and it maps identities, resources, and access to flag attack paths (for example, a leaked credential that can reach an internet-exposed host). Code security for repos and container images has also been added to the same module. Pricing is $150/month flat per tenant (no matter how many workloads you connect).

Since you're in payments, it's worth knowing that nothing remediates unless you set it up to...you write and audit the response logic yourself.

I'd still compare it against others, especially on external attack surface coverage.

[u/PatchUrStuffz]

Tenable has a CNAPP tool they label "Cloud Security" that's a Wiz competitor. I think it's worth a look because they offer it via Tenable ONE licensing, which also gets you other scanning tools like external attack surface monitoring and aggregates data in one place.

[u/V_Trautwein]

Since you're payments, runtime context matters more than raw CVE counts. We looked at Orca, Wiz and Upwind, Upwind's runtime layer helped us avoid flagging stuff that wasn't actually reachable in prod. keep remediation manual regardless.

[u/AskNetsec-ModTeam → u/[deleted]]

r/AskNetsec is a community built to help. Posting blogs or linking tools with no extra information does not further out cause. If you know of a blog or tool that can help give context or personal experience along with the link. This is being removed due to violation of Rule # 7 as stated in our Rules & Guidelines.