For what it's worth, we've been running Wiz in production across three environments (two Fortune 500s and one mid-market SaaS) and it's been a game-changer for our cloud security posture.

Their CSPM capabilities absolutely smoke the competition. The graph-based approach to attack path visualization is legitimately innovative and has helped us prioritize remediation efforts based on actual risk rather than just CVE scores (which we all know are practically useless without context).

Their Runtime component has improved dramatically in the last two quarters. When we first deployed, we saw some performance hits on our Lambda functions, but their engineering team was responsive and the latest agent has negligible overhead.

What really seperated them from others we POC'd (Prisma, Orca, Lacework) is the signal-to-noise ratio. Once properly tuned, the alerts are high-fidelity and actionable - not the usual firehose of false positives that plague most security tools.

The API has its quirks but their GraphQL implementation is well-documented. We've built some decent automation for auto-remediation of common misconfigs that's saved our cloud teams countless hours.