Cloud-Native Application Protection Platforms (CNAPP)

Upwind vs Wiz

Compare Upwind and Wiz side-by-side. See feature differences and pricing in the Cloud-Native Application Protection Platforms (CNAPP) category.

Upwind

by Upwind

No reviews yet

Pricing: Sold by quote after a demo. On AWS Marketplace the platform is $30,000 per 12-month contract and the 24/7 MDR service $6,000 per 12 months.

Upwind is a cloud-native application protection platform (CNAPP) pairing cloud posture management with an eBPF runtime sensor, sold by quote to security teams.

11 /17 features Full profile

Wiz

by Google

No reviews yet

Pricing: Quote only. Wiz is sold as Wiz One, as Wiz Go (Cloud, Code, Defend and Sensor in one bundle for startups and SMBs) or a la carte by capability, each priced on request.

Wiz is a cloud security platform (CNAPP) that scans AWS, Azure and Google Cloud without agents. Part of Google Cloud, sold by quote to security teams.

17 /17 features Full profile

Feature Comparison

Cloud-Native Application Protection Platforms (CNAPP) features side-by-side

Feature	Upwind 11/17 features	Wiz 17/17 features
Posture, workload and entitlement modules in one platform CSPM, workload protection and CIEM ship as modules of one product under one console and one data model.	Yes	Yes
Agentless workload vulnerability scanning Scans VM disks, container images and serverless functions for known CVEs without installing an agent.	Yes	Yes
Runtime threat detection with a workload sensor An optional agent or eBPF sensor detects malicious behavior on hosts and containers as it happens.	Yes	Yes
Container and Kubernetes runtime protection Detects and can block suspicious processes, network activity and privilege changes inside running pods.	Yes	Yes
Container image scanning in CI pipelines and registries Scans images at build time and in registries, with policy gates that fail a build on critical findings.	No	Yes
Code-to-cloud tracing of findings Links a runtime or cloud finding back to the repository, file and commit that introduced it.	No	Yes
Secrets detection in code and workloads Finds hardcoded credentials and keys in repositories, container images and deployed cloud resources.	No	Yes
Unified security graph across cloud resources Models relationships between identities, network, data and workloads so findings can be queried across modules.	Yes	Yes
Toxic combination detection Correlates findings from several modules into one prioritized issue, such as an exposed host with a critical CVE and admin rights.	No	Yes
Cloud detection and response (CDR) Ingests cloud audit and network logs to detect and investigate active attacks against the cloud control plane.	Yes	Yes
Data security posture management (DSPM) module Discovers and classifies sensitive data across cloud data stores as part of the same platform.	Yes	Yes
Software composition analysis for open-source dependencies Identifies vulnerable third-party packages in application code and container images.	Yes	Yes
Serverless function protection Scans and monitors AWS Lambda, Azure Functions and Google Cloud Functions for vulnerabilities and risky permissions.	Yes	Yes
API security discovery Inventories APIs exposed by cloud workloads and flags unauthenticated or sensitive endpoints.	Yes	Yes
AI workload and model posture checks Discovers AI services, models and pipelines in the cloud estate and checks their configuration for risk.	Yes	Yes
Developer-facing fixes in pull requests Surfaces findings and suggested fixes inside the developer's IDE or pull request rather than only in the console.	No	Yes
Modular licensing by capability Modules can be bought separately rather than only as a full-platform bundle.	No	Yes
Overall Rating	No reviews yet	No reviews yet

Upwind 11/17 features

Posture, workload and entitlement modules in one platform: Yes
Agentless workload vulnerability scanning: Yes
Runtime threat detection with a workload sensor: Yes
Container and Kubernetes runtime protection: Yes
Container image scanning in CI pipelines and registries: No
Code-to-cloud tracing of findings: No
Secrets detection in code and workloads: No
Unified security graph across cloud resources: Yes
Toxic combination detection: No
Cloud detection and response (CDR): Yes
Data security posture management (DSPM) module: Yes
Software composition analysis for open-source dependencies: Yes
Serverless function protection: Yes
API security discovery: Yes
AI workload and model posture checks: Yes
Developer-facing fixes in pull requests: No
Modular licensing by capability: No

No reviews yet

Wiz 17/17 features

Posture, workload and entitlement modules in one platform: Yes
Agentless workload vulnerability scanning: Yes
Runtime threat detection with a workload sensor: Yes
Container and Kubernetes runtime protection: Yes
Container image scanning in CI pipelines and registries: Yes
Code-to-cloud tracing of findings: Yes
Secrets detection in code and workloads: Yes
Unified security graph across cloud resources: Yes
Toxic combination detection: Yes
Cloud detection and response (CDR): Yes
Data security posture management (DSPM) module: Yes
Software composition analysis for open-source dependencies: Yes
Serverless function protection: Yes
API security discovery: Yes
AI workload and model posture checks: Yes
Developer-facing fixes in pull requests: Yes
Modular licensing by capability: Yes

No reviews yet

Pricing

Upwind

Sold by quote after a demo. On AWS Marketplace the platform is $30,000 per 12-month contract and the 24/7 MDR service $6,000 per 12 months.

See all plans

Wiz

Quote only. Wiz is sold as Wiz One, as Wiz Go (Cloud, Code, Defend and Sensor in one bundle for startups and SMBs) or a la carte by capability, each priced on request.

See all plans

Explore Each Product

Upwind Read reviews, features & pricing

Wiz Read reviews, features & pricing

Looking for more options?

Browse all Cloud-Native Application Protection Platforms (CNAPP)