Cortex Cloud vs Wiz: cloud security facts side by side
How do their category maps compare?
Palo Alto Networks Cortex Cloud
- Described on the vendor's pages we read
- Not in our sources (it may exist; we did not find it on the pages we read)
What are the facts, side by side?
| Fact | Cortex Cloud | Wiz |
|---|---|---|
| Positioning | Palo Alto Networks' cloud security platform, formed by merging Prisma Cloud with Cortex CDR (announced 13 February 2025). | An agentless cloud security platform (Wiz Cloud, Wiz Code, Wiz Defend) built around the Security Graph, part of Google since 11 March 2026. |
| Agent approachDiffers | Agentless parts, agent for depth Cortex Cloud documents agentless VM image scanning of cloud workloads; runtime protection uses its agent. Source: VM images assets, Cortex Cloud documentation, read . | Agentless core Connects by cloud API and, Wiz states, reaches VMs, containers, serverless, PaaS and AI resources without agents. Source: Wiz platform overview, read . |
| Runtime sensor | A performance-optimized agent that stops attacks as they execute, plus CDR from the Cortex CDR merger. Source: Cortex Cloud overview, read . | The optional Wiz Sensor is eBPF-based and blocks threats on VMs, containers and serverless containers (Wiz Defend). Source: Wiz Defend and Wiz Sensor, read . |
| Clouds named | AWS, Azure, GCP, OCI, Alibaba Cortex Cloud names AWS, Azure, Google Cloud, OCI and Alibaba Cloud for agentless, full-coverage visibility. Source: Cortex Cloud posture management, read . | AWS, Azure, GCP, OCI, Alibaba Wiz names AWS, Azure, Google Cloud, OCI and Alibaba Cloud among its supported environments; Tencent Cloud is not named. Source: Wiz environments: Alibaba Cloud, read . |
| CNAPP | Described Palo Alto Networks includes CNAPP at no additional cost for Cortex Cloud Runtime Security customers. Source: Palo Alto Networks press release: Cortex Cloud introduced, read . | Described Wiz Cloud, Wiz Code and Wiz Defend on one Security Graph. Source: Wiz platform overview, read . |
| CSPM | Described Cloud posture security lists CSPM with attack path analysis. Source: Cortex Cloud posture security, read . | Described Agentless, API-connected scanning of cloud resources, including Alibaba Cloud, as the vendor states. Source: Wiz extends CNAPP leadership with protection for Alibaba Cloud, read . |
| CWPP | Described Runtime security with a performance-optimized agent. Source: Cortex Cloud overview, read . | Described Agentless workload scanning plus the Wiz Sensor for runtime blocking, Kubernetes file integrity monitoring and drift detection. Source: Wiz Defend and Wiz Sensor, read . |
| CIEM | Described CIEM is listed under cloud posture security. Source: Cortex Cloud posture security, read . | Described Wiz has a named CIEM solution (Wiz for CIEM). Source: Wiz for CIEM, read . |
| DSPM | Described DSPM is listed under cloud posture security. Source: Cortex Cloud posture security, read . | Described Wiz DSPM discovers and classifies sensitive data and detects data risks. Source: Wiz DSPM, read . |
| Vulnerability management | Described Vulnerability management is listed under cloud posture security, with SmartScore ranking. Source: Cortex Cloud posture security, read . | Described Named Unified Vulnerability Management solution, described as agentless cloud vulnerability management. Source: Wiz Unified Vulnerability Management, read . |
| Code security | Application security is one of the platform's pillars, aimed at stopping risk before it reaches production. Source: Cortex Cloud overview, read . | Wiz Code: SCA and SBOM, IaC, secrets and malware scanning, IDE scanning, GitHub, an MCP server, ASPM and code-to-cloud tracing. Source: Wiz Code, read . |
| AI security | AI-SPM maps models, datasets and agents, flags model poisoning and supply chain risk, and classifies data used for RAG. Source: Cortex Cloud AI-SPM, read . | Agentless AI-BOM across SageMaker, OpenAI, Bedrock and Vertex AI, AI attack paths, and runtime detection of prompt injection and rogue agents. Source: Wiz AI-SPM, read . |
| Kubernetes runtimeDiffers | Runtime agent and CDR are described; Kubernetes-specific controls are not detailed on the pages we read. Source: Cortex Cloud overview, read . | Kubernetes file integrity monitoring and drift detection in Wiz Defend. Source: Wiz Defend and Wiz Sensor, read . |
| Private cloud or on-premises | Not in our sources | Not in our sources |
| Disconnected environments | Not in our sources | Not in our sources |
| Compliance reporting | Maps posture against 18+ frameworks, such as PCI, HIPAA and GDPR. Source: Cortex Cloud posture management, read . | Its compliance solution names benchmarks including NIST, HIPAA, CIS, HITRUST and SOC 2. Source: Wiz compliance, read . |
| Public-sector authorizationDiffers | Not in our sources | Wiz for Government is described as a FedRAMP High authorized platform; Wiz for Gov also achieved GovRAMP High authorization (10 September 2026). Source: Wiz for Government, read . |
| PriceDiffers | Not published Not published. The Cortex Cloud page offers only a demo request. CNAPP is included at no additional cost for Cortex Cloud Runtime Security customers. Source: Cortex Cloud posture management, read . | Not published Wiz's own pages we read publish no price. AWS Marketplace, 12-month contract: Wiz Essential (protect 100 cloud workloads) $24,000.00; Wiz Advanced (protect 100 cloud workloads) $38,000.00; add-ons: Wiz Sensor (100 sensors, for Wiz Advanced) $28,000.00, Wiz Code (100 licenses) $58,500.00, Wiz Defend (ingest 300 GB of logs per month, for Wiz Advanced) $18,000.00. The listing also offers 24-month and 36-month contracts, and a free trial on terms set by the vendor. Source: AWS Marketplace: Wiz Cloud Infrastructure Security Platform, read . |
| Open source | None named | None named |
| Ownership | Palo Alto Networks. Prisma Cloud merged with Cortex CDR to form Cortex Cloud, announced 13 February 2025. Source: Palo Alto Networks press release: Cortex Cloud introduced, read . | Part of Google since 11 March 2026; the $32 billion all-cash deal was announced on 18 March 2025. Source: Wiz blog: Google closes deal to acquire Wiz, read . |
Where do they differ?
- Agent approach: Cortex Cloud has agentless parts and an agent for depth; Wiz has an agentless core.
- Kubernetes runtime: Cortex Cloud partly matches; Wiz matches.
- Public-sector authorization: Cortex Cloud is not in our sources; Wiz matches.
- Price: Cortex Cloud is not in our sources; Wiz partly matches.
Choose Cortex Cloud if
- You already run Palo Alto Networks products or Prisma Cloud.
- You want agentless VM image scanning and are comfortable deploying an agent for runtime protection and CDR.
Choose Wiz if
- You want an agentless start across AWS, Azure, Google Cloud, OCI and Alibaba Cloud with attack paths across identities and data.
- You sell to US government and need FedRAMP High or GovRAMP High.
Which limits should you check?
Cortex Cloud
- No public price; the Cortex Cloud page offers only a demo request.
Wiz
- Its own pages publish no price; on AWS Marketplace a 12-month contract for Wiz Essential (100 cloud workloads) is $24,000.
- Tencent Cloud is not named, and runtime blocking needs the optional Wiz Sensor.
Frequently asked questions
How do Cortex Cloud and Wiz differ?
Neither is scored on this site. Cortex Cloud describes 6 of six categories and Wiz 6 on the pages we read, and they differ on 4 recorded facts. Which fits depends on your clouds, agent tolerance and existing tools; the finder checks those.
Which of the two needs an agent?
Cortex Cloud: Agentless parts, agent for depth. Wiz: Agentless core.
Do Cortex Cloud or Wiz publish prices?
Cortex Cloud: Not published. The Cortex Cloud page offers only a demo request. CNAPP is included at no additional cost for Cortex Cloud Runtime Security customers. Wiz: Wiz's own pages we read publish no price. AWS Marketplace, 12-month contract: Wiz Essential (protect 100 cloud workloads) $24,000.00; Wiz Advanced (protect 100 cloud workloads) $38,000.00; add-ons: Wiz Sensor (100 sensors, for Wiz Advanced) $28,000.00, Wiz Code (100 licenses) $58,500.00, Wiz Defend (ingest 300 GB of logs per month, for Wiz Advanced) $18,000.00. The listing also offers 24-month and 36-month contracts, and a free trial on terms set by the vendor.