A commenter reports having previously used Wiz but replaced it with Aikido due to Wiz's high cost and complexity.

{
  "signal_id": "1bd7d559-7574-5efc-ac3e-8ff59d7b845d",
  "signal_type": "reddit-company",
  "signal_subtype": "customerFeedback",
  "detected_at": "2026-10-30T05:57:05+00:00",
  "company": {
    "name": "Wiz",
    "domain": "wiz.io"
  },
  "data": {
    "nsfw": false,
    "stage": "switched",
    "awards": 0,
    "timing": "completed",
    "topics": [
      "pricing",
      "complexity",
      "cloud security"
    ],
    "post_id": "1xj7fko",
    "summary": "A commenter reports having previously used Wiz but replaced it with Aikido due to Wiz's high cost and complexity.",
    "category": "pricing",
    "comments": [
      {
        "url": "https://www.reddit.com/r/AskNetsec/comments/1xj7fko/comment/19rv7x2w3esh0/",
        "depth": 0,
        "score": 3,
        "author": "Traditional_Bit2045",
        "excerpt": "if you're in payments the automated remediation angle matters more than anything else on that list, so make them walk you through exactly how their \"fix\" workflow handles a rollback when something inevitably coughs",
        "posted_at": "2026-10-30T06:06:45.000Z",
        "author_url": "https://www.reddit.com/user/Traditional_Bit2045/"
      },
      {
        "url": "https://www.reddit.com/r/AskNetsec/comments/1xj7fko/comment/19rvu8su1c7mp/",
        "depth": 0,
        "score": 2,
        "author": "Ready-Astronaut-8999",
        "excerpt": "One thing to prep before the demos: take the 25 worst findings from your last zero-day and ask each vendor to explain how their tool ranked every one. A good tool can tell you why an item is urgent. If all you get is a risk score with no reasoning, you’re buying a black box, and you’ll still end up triaging by hand.",
        "posted_at": "2026-10-30T14:27:18.000Z",
        "author_url": "https://www.reddit.com/user/Ready-Astronaut-8999/"
      },
      {
        "url": "https://www.reddit.com/r/AskNetsec/comments/1xj7fko/comment/19rwbasckrs0x/",
        "depth": 0,
        "score": 2,
        "author": "TrustIsAVuln",
        "excerpt": "Harden is step 1\n\n baseline step 2\n\n utilize the free controls available there are TONS, alerting, encryption, segmentation, the list goes on quite a ways.\n\n Never accept Patching as a control it IS a change, every patch introduces NEW code to your environment can as we have seen can screw up your hardning or baseline or even introduce NEW vulnerabilties.\n\n dont use things (like PHP) that is KNOWN",
        "posted_at": "2026-10-30T20:49:41.000Z",
        "author_url": "https://www.reddit.com/user/TrustIsAVuln/"
      },
      {
        "url": "https://www.reddit.com/r/AskNetsec/comments/1xj7fko/comment/19rvqvjkkmf8g/",
        "depth": 0,
        "score": 1,
        "author": "Alesya7854",
        "excerpt": "I'd look closely at how well these tools handle reachability. Finding a vulnerable dependency is one thing, but knowing whether it's actually reachable in production makes a huge difference when you're dealing with hundreds of repos. Otherwise you'll just end up with another massive list of alerts to chase",
        "posted_at": "2026-10-30T13:11:47.000Z",
        "author_url": "https://www.reddit.com/user/Alesya7854/"
      },
      {
        "url": "https://www.reddit.com/r/AskNetsec/comments/1xj7fko/comment/19rvrrnkgplsy/",
        "depth": 0,
        "score": 1,
        "author": "No_Mycologist1806",
        "excerpt": "Before the demos, I'd give every vendor the PHP2Shell question on your own environment: which running things are affected right now, and who owns each one. Repos tell you what you meant to deploy. When we went through PHP2Shell and this week's Linux TCP bug, the useful answers came from the running side: php -v inside the live containers (a rebuild changes nothing if the base image is pinned or ca",
        "posted_at": "2026-10-30T13:31:47.000Z",
        "author_url": "https://www.reddit.com/user/No_Mycologist1806/"
      },
      {
        "url": "https://www.reddit.com/r/AskNetsec/comments/1xj7fko/comment/19rw0sn6nhmea/",
        "depth": 0,
        "score": 1,
        "author": "Yames-Schlemonat",
        "excerpt": "Are you looking for reachability analysis in the code itself or runtime context in the cloud environment? Those are usually two different types of scanners, and before doing demos you'll want to map out how your build pipelines connect to actual deployed workloads",
        "posted_at": "2026-10-30T16:54:10.000Z",
        "author_url": "https://www.reddit.com/user/Yames-Schlemonat/"
      },
      {
        "url": "https://www.reddit.com/r/AskNetsec/comments/1xj7fko/comment/19rz8npuxpajn/",
        "depth": 0,
        "score": 1,
        "author": "apollodoth",
        "excerpt": "Sounds like your organization has some fundamentals to sort first(most do). We used Wiz for sometime but the cost and complexity pushed us to a new tool, Aikido, that we’ve become fond of. It’s wayyyy cheaper and performs better imho. Happy to make an intro if interested.\n\n No tool will be perfect or be able to identify with certainty exploitability within your environment. You will need to supply",
        "posted_at": "2026-11-01T12:11:51.000Z",
        "author_url": "https://www.reddit.com/user/apollodoth/"
      }
    ],
    "evidence": [
      "[comment u/apollodoth] We used Wiz for sometime but the cost and complexity pushed us to a new tool, Aikido, that we’ve become fond of. It’s wayyyy cheaper and performs better imho."
    ],
    "virality": "low",
    "post_date": "2026-10-30T05:57:05.000Z",
    "post_kind": "text",
    "post_text": "We're shortlisting tools to speed up zero-day response, and Wiz is currently the front runner like partly bc some of our engineers have contacts there.\n\nWe've got few hundred repos + some cloud accounts and probably some of it dont even have clear owner like every time new zero-day drops (ie: Php2Shell last week) no one really knew where we were exposed but luckily our genius eng had to go through all the repos manually and figure out who owns what. were now looking for something that can tell us where a vulnerability actually affects us what is exploitable and get finding to whoever needs to fix it like properly..\n\nOne thing we're careful about is automated remediation. This whole is in payments so production downtime is not even option. I'd rather have something identify the issue and prepare the fix for review than blindly push changes.\n\nWhat else should be on the list? Seen Seemplicity, Rival and Snyk mentioned so far, but haven't done any demos yet. Let me know if i need to prepare something before going into demos like end of Q4 is our target",
    "sentiment": "negative",
    "subreddit": "AskNetsec",
    "post_flair": [
      "Other"
    ],
    "post_title": "Zero-day response recommendations?",
    "prominence": "aside",
    "source_url": "https://www.reddit.com/r/AskNetsec/comments/1xj7fko/zeroday_response_recommendations/",
    "entity_role": "vendor",
    "post_author": "WildFlounder3730",
    "upvote_ratio": 1,
    "mention_count": 3,
    "mention_surge": true,
    "subreddit_url": "https://www.reddit.com/r/AskNetsec/",
    "total_upvotes": 4,
    "comments_total": 8,
    "total_comments": 8,
    "other_companies": [
      {
        "name": "Aikido Security",
        "role": "switching_to",
        "domain": "aikido.dev"
      }
    ],
    "post_author_url": "https://www.reddit.com/user/WildFlounder3730/",
    "signal_category": "feedback",
    "comments_included": 7
  }
}

curl https://signals.autobound.ai/v1/signals/1bd7d559-7574-5efc-ac3e-8ff59d7b845d \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"wiz.io","limit":20}'