r/cybersecurity•
ut0mt8

Wiz Alternative

Business Security Questions & Discussion

Hi security communauty,

I guess this have been aldready discusssed but here my context.
We are in the process of renewing our Wiz annual subscription and each time it's a pain.
While we are relatively happy with Wiz (relatively ; their gui is messy; their scanners are slows ; their code module is a joke) the main problem is their pricing model by workload scan.
The main issue for issues is are really elastic and have really a lot of ephemeral workloads.
We can go from 500 instances/containers to 4000 on the same day (we use AWS).

We spin a lot of the time the exact same instance from a template in ASG.
We don't want to scan everything (and we don't want to pay for it)/

With Wiz it's not possible to really exclude a workload from scanning with tagging (this is a request we asked for years but it still not there). And frankly we begin to be bored having the same discussion every year....

So we are now open to alternatives but which?

Our main need is to have a cloud security posture tool : so a CSPM.

- aikiddo security? (at least they are reactive but they seems more focus on development lifecyle)

- upwind ?

- other ?

Obviously we want something cheaper with a way more flexible company.

Any hints?

Posted Nov 1, 2025, 1:21 PM UTC

0121
Loading comments…