Comparison

Checkov vs Wiz

On the evidence we track, Wiz leads this comparison with a composite score of 83/100. Scores are only directly comparable because these tools share a category; the full breakdown and every source is below.

Machine formatsJSONMarkdownGraphQLor send Accept: application/json
Checkov64
Wiz83
Score
Vioscale score
Checkov64 / 100low · 47%updating
Wiz83 / 100medium · 50%updating
Pricing
Free tier
Checkov
Wiz
Model
Price level
Checkovfree
Wiz
Integrations
Count
Checkov13
Wiz310
Security
Disclosure policy
Checkov
Wiz
Gdpr
Checkov
Wiz
Hipaa
Checkov
Wiz
Iso27001
Checkov
Wiz
Pci
Checkov
Wiz
Scorecard
Checkov7
Wiz
Soc2
Checkov
Wiz
Reliability
Status page
Checkov
Wiz
Adoption
Dependent repos
Checkov138
Wiz
Github stars
Checkov8,973
Wiz
Package downloads weekly
Checkov4,830,339
Wiz
Activity
Commits last 30d
Checkov17
Wiz
Release
Cadence days
Checkov4
Wiz
History
Checkov20 items
Wiz
License
Spdx
CheckovApache-2.0
Wiz
Language
Primary
CheckovPython
Wiz

Capabilities

Feature-by-feature on the axes that matter for cloud security software. “-” means undocumented, not absent.

Posture
CSPM (posture / misconfig)
Checkov
Wiz
KSPM (Kubernetes posture)
Checkov
Wiz-
Workload
CWPP (workload protection)
Checkov-
Wiz
Entitlements
CIEM (entitlements)
Checkov-
Wiz
Data
DSPM (data posture)
Checkov-
Wiz
Pipeline
IaC / pipeline scanning
Checkov
Wiz
Architecture
Agentless scanning
Checkov
Wiz
Runtime
Runtime protection
Checkov-
Wiz
Coverage
Cloud coverage
CheckovAWS, Google Cloud, Azure
WizAWS, Azure, GCP
Compliance
Compliance frameworks assessed
Checkov-
WizSBOM generation, SCA scanning, license compliance gates
Licensing
Open-core scanner available
Checkov
Wiz-

What each one is

The product in its own terms, so the numbers below have context.

Checkov

Checkov scans infrastructure-as-code configurations across Terraform, Kubernetes, CloudFormation, Dockerfile, and other IaC formats to detect security vulnerabilities and compliance violations before deployment.

Independently observed

Wiz

Leader

Wiz is a cloud security platform that integrates code scanning, cloud infrastructure assessment, and runtime protection into a single context graph. It enables security teams to identify exploitable risks across the entire application lifecycle—from development to production—and automatically generate fixes for the highest-impact issues.

Independently observed

Pricing

List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.

Checkov

Open sourceFree tier
as of verify ↗

Wiz

Leader

Pricing not documented yet.

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Platforms
CLI
Checkov
Wiz
Deployment
Cloud / SaaS
Checkov
Wiz
Self-hosted
Checkov
Wiz

Integrations

What each product connects to. Counts come from the vendor's own integration directory where one exists.

Checkov

13 total
  • AWS
  • Google Cloud
  • Azure
  • Docker
  • Terraform
  • Kubernetes
  • CloudFormation
  • Dockerfile
  • Git
  • GitHub
  • Helm
  • Kustomize
  • Serverless
Independently observed

Wiz

Leader
50 total
  • Jira
  • ServiceNow
  • Slack
  • Azure DevOps
  • Cisco Webex
  • ClickUp
  • Freshservice
  • GitHub Issues
  • Google Chat
  • Linear
  • Microsoft Teams
  • monday.com
  • Opsgenie
  • PagerDuty
  • Rootly
  • Zendesk
  • Backline
  • Blinkops
  • Botprise
  • Cortex XSOAR
  • Cyware
  • D3 Security
  • DevOcean
  • Dropzone AI
  • +26 more
Independently observed

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.