Independent pricing analysis. Not affiliated with Wiz, Inc. or Google Cloud. All estimates are based on publicly reported transaction data and may not reflect current rates.
How Wiz Pricing Works: Workloads, Modules, and Licensing Explained
Wiz uses a per-workload subscription model that is entirely quote-based. There is no public pricing page, no self-serve tier, and no transparent calculator on wiz.io. This guide breaks down exactly how Wiz structures its pricing so you can estimate your cost before engaging their sales team.
The Workload-Based Pricing Model
Everything in Wiz pricing starts with workload count. A "workload" is any cloud resource that Wiz scans and monitors. Understanding what counts as a workload is essential because it directly determines your bill. Wiz counts the following as individual workloads:
- Virtual machines: EC2 instances, Azure VMs, Google Compute Engine instances, and VMs on any supported cloud (Oracle Cloud, Alibaba Cloud)
- Containers: EKS pods, AKS containers, GKE workloads. Some contracts count by node instead of individual container, which can significantly reduce your workload count if you run dense containerised environments
- Serverless functions: Lambda functions, Azure Functions, Cloud Functions. Counting methodology varies; some agreements count by unique function rather than invocation
- Managed services: RDS instances, S3 buckets (may be counted by account rather than individual bucket), Azure SQL databases, managed Kubernetes clusters
- AI and ML workloads: SageMaker endpoints, Vertex AI deployments, and Azure ML workspaces. This is a newer category added as Wiz expanded its "Wiz for AI" capabilities
The total workload count is the primary input to your pricing negotiation. If you have 1,000 EC2 instances, 200 Lambda functions, and 50 RDS databases, your base workload count is approximately 1,250. However, Wiz may aggregate certain resource types differently depending on the agreement. Always clarify the counting methodology before signing.
Pricing per workload decreases as volume increases. Organisations with fewer than 500 workloads typically pay $15 to $30 per workload per year. At 2,000 to 10,000 workloads, the rate drops to $8 to $20. Strategic accounts with 10,000+ workloads can negotiate rates as low as $6 to $15 per workload. These are estimates based on reported transaction data and should be used as benchmarks, not guarantees.
Module Breakdown and Pricing Impact
Wiz offers six core modules and several premium add-ons. The base subscription always includes CSPM (Cloud Security Posture Management), which handles misconfiguration detection and compliance monitoring. Additional modules increase the per-workload cost by varying percentages. Here is what each module does and what it adds to your bill:
| Module | Description | Base Included? | Est. Cost Impact |
|---|---|---|---|
| CSPM | Cloud Security Posture Management - misconfigurations, compliance | Yes | Included in base |
| CWPP | Cloud Workload Protection Platform - vulnerability scanning, runtime | No | +15-25% |
| DSPM | Data Security Posture Management - sensitive data discovery | No | +10-20% |
| Vulnerability Mgmt | Agentless vulnerability assessment across all workloads | No | +10-15% |
| CIEM | Cloud Infrastructure Entitlement Management - identity risk | No | +10-15% |
| Code Security | IaC scanning, secrets detection, CI/CD pipeline security | No | +10-15% |
| Wiz Defend (CDR) | Cloud Detection and Response - real-time threat detection | No | +20-30% |
A common pattern is to start with CSPM alone (the foundation tier) and add CWPP and Vulnerability Management as a second phase. This approach gives you visibility into misconfigurations and compliance gaps immediately, then layers on workload protection. Starting small also gives you negotiation leverage for the module expansion: you can lock in favourable per-module rates by committing to a phased rollout in the initial contract.
The full CNAPP stack (CSPM + CWPP + DSPM + Vuln Mgmt + CIEM + Code Security) typically costs 60-90% more than CSPM alone. Adding Wiz Defend on top of the full stack pushes the premium to roughly double the CSPM-only baseline. Budget accordingly if you plan to adopt the complete platform over time.
Buying Wiz Through AWS Marketplace
Wiz is available on AWS Marketplace in two configurations: the standard Wiz platform and the Wiz Go Bundle (a streamlined package for smaller deployments). Purchasing through AWS Marketplace offers several advantages that procurement teams should seriously consider:
- EDP credit eligibility: If your organisation has an Enterprise Discount Program (EDP) commitment with AWS, your Wiz spend can count toward that commitment. This means you are effectively using money already allocated to AWS to pay for Wiz, which can simplify budget approval significantly.
- Simplified procurement: AWS Marketplace purchases run through your existing AWS billing relationship. No new vendor onboarding, no separate invoicing, no new procurement workflow. For organisations with complex vendor approval processes, this can shave weeks off the buying cycle.
- Consolidated billing: Your Wiz cost appears as a line item on your AWS bill, making it easier for finance teams to track and allocate cloud security spend.
- Potential pricing differences: In some cases, AWS Marketplace pricing differs from direct purchase pricing. It is worth comparing both routes before committing.
The availability of Wiz on AWS Marketplace may change following the Google acquisition. As of April 2026, Wiz remains listed and available for purchase through AWS Marketplace, but buyers should confirm availability before relying on this procurement path for future renewals.
Contract Structure and Discounts
Wiz offers one-year, two-year, and three-year contract terms. The discount for multi-year commitments is substantial and represents the single most impactful lever in your pricing negotiation.
| Term | Typical Discount | Payment | Best For |
|---|---|---|---|
| 1 Year | List price | Annual or quarterly | Pilots, evaluation, uncertain growth |
| 2 Years | 20 - 25% off | Annual prepay preferred | Committed buyers, stable workload count |
| 3 Years | 25 - 35% off | Annual or upfront for max discount | Strategic accounts, known growth trajectory |
Prepayment can yield additional savings. Some buyers report an extra 5-10% discount for paying the full multi-year amount upfront rather than annual installments. However, this requires significant capital commitment and should be weighed against the opportunity cost of that capital.
Watch for auto-renewal terms in your contract. Some Wiz agreements include automatic renewal at then-current list pricing unless you provide written notice 60-90 days before the renewal date. This can result in a significant price increase if you are not tracking renewal dates carefully. Always negotiate a price cap on renewals during your initial contract negotiation.
Hidden Costs and Budget Surprises
The Wiz license fee is not your total cost. Budget for these additional expenses that catch many buyers off guard:
- Professional services and onboarding: Wiz offers paid onboarding packages ranging from $10,000 for basic setup to $50,000+ for complex multi-cloud environments with custom integrations. While optional, most enterprises benefit from guided deployment.
- Workload overage charges: If your cloud environment grows beyond the contracted workload count, you will incur overage charges at list pricing (no multi-year discount). Budget for 20-30% growth headroom or negotiate a growth corridor in your contract.
- Wiz Sensor costs: If you opt for Wiz Sensor (the optional runtime agent), there are per-host deployment costs in addition to the agentless license. The sensor is separate from the core agentless platform.
- Integration engineering time: Connecting Wiz to your SIEM (Splunk, Microsoft Sentinel, Chronicle), ticketing system (Jira, ServiceNow), and CI/CD pipeline requires engineering effort. Budget 2-4 weeks of a security engineer's time for initial integrations.
- Annual price escalation: Multi-year contracts may include built-in annual price increases of 5-8%. Read the fine print and negotiate for flat pricing across the contract term.
Frequently Asked Questions
What counts as a workload in Wiz pricing?
A workload in Wiz pricing includes virtual machines (EC2, Azure VMs, GCE instances), containers (EKS pods, AKS containers, GKE workloads), serverless functions (Lambda, Azure Functions, Cloud Functions), managed services (RDS, S3 buckets, Azure SQL), and AI workloads (SageMaker, Vertex AI endpoints). Each billable resource counts as one workload. Container workloads may be counted differently depending on your agreement - some contracts count by node rather than individual container.
Can I buy Wiz through AWS Marketplace?
Yes. Wiz is available on AWS Marketplace in both standard and Wiz Go Bundle configurations. Purchasing through AWS Marketplace lets you apply EDP (Enterprise Discount Program) committed spend credits toward your Wiz subscription, simplify procurement through your existing AWS billing, avoid a separate vendor contracting process, and potentially access different pricing structures than direct purchase. This is a significant procurement hack that can save your organisation time and sometimes cost.
How much do Wiz modules cost individually?
CSPM is included in the base Wiz subscription. Adding CWPP typically increases cost by 15-25%. DSPM adds 10-20%. Vulnerability Management is usually bundled with CWPP. CIEM adds 10-15%. Code Security adds 10-15%. Wiz Defend (CDR) is a premium add-on at 20-30% more. Wiz Sensor (runtime agent) has variable pricing. These are estimates; actual bundling and pricing vary by agreement.
What multi-year discounts does Wiz offer?
Based on reported transaction data, Wiz offers 20-25% discounts for 2-year commitments and 25-35% discounts for 3-year commitments. Some enterprise buyers report discounts above 35% for large, long-term deals with upfront payment. Multi-year discounts are one of the most effective ways to reduce your Wiz costs.
What hidden costs should I expect with Wiz?
Beyond the license fee, budget for professional services and onboarding ($10K-$50K depending on environment complexity), potential overage charges if your workload count grows beyond the contracted amount, Wiz Sensor deployment costs if you opt for the agent-based add-on, integration engineering time for connecting Wiz to your SIEM, ticketing, and CI/CD systems, and annual price increases of 5-8% that may be built into multi-year contracts.