The cloud security landscape is undergoing a major transformation. As organizations continue to scale in the cloud, they’re rethinking how to secure sprawling infrastructure, distributed identities, shifting workloads, and complex development pipelines. This shift is driving rapid adoption of a new category: Cloud-Native Application Protection Platforms (CNAPP).
We’re excited to share that Wiz has been named to the Leaders Category in the IDC MarketScape for Worldwide CNAPP 2025 vendor assessment, which assesses capabilities and strategic vision.
A big thank you to IDC and Senior Research Manager Phil Bues for leading the way with this comprehensive assessment. The report offers timely guidance for security leaders evaluating how to replace fragmented point tools with a unified, context-rich approach to cloud security.
IDC MarketScape vendor analysis model is designed to provide an overview of the competitive fitness of technology and suppliers in a given market. The research methodology utilizes a rigorous scoring methodology based on both qualitative and quantitative criteria that results in a single graphical illustration of each supplier’s position within a given market. The Capabilities score measures supplier product, go-to-market and business execution in the short-term. The Strategy score measures alignment of supplier strategies with customer requirements in a 3-5-year timeframe. Supplier market share is represented by the size of the icons.
Why CNAPP matters
According to the IDC Marketscape, "When selecting a cloud-native application protection platform vendor, it is essential to consider several factors beyond just vendor and tool consolidation. While reducing the number of vendors and tools can streamline operations, the primary drivers should include the platform's ability to integrate seamlessly with your existing security infrastructure and enhance your overall security posture."
This convergence is more than a trend. It reflects a deeper need for collaboration across security, DevOps, and engineering—with shared visibility, unified policies, and scalable workflows that keep up with cloud speed.
Look for a solution that offers robust monitoring and reporting on cloud security posture, runtime, and application security. The goal is to select a platform based on its aggregate capabilities rather than merely reducing the vendor footprint.
IDC MarketScape: Worldwide Cloud-Native Application Protection Platforms 2025 Vendor Assessment (Doc #US53549925, June 23, 2025)
CNAPP in practice
Organizations adopting CNAPP are seeing real-world results. At Wiz, we’ve seen this firsthand: over 50% of our customers now maintain zero critical issues in their environments. This isn't just a security win—it’s an operational shift toward agility with confidence.
What the IDC MarketScape highlighted about Wiz
In naming Wiz to the Leaders Category, the IDC MarketScape pointed to several key strengths:
“Customers appreciate proactive monitoring, strong support, and the platform's scalability across multicloud environments. Wiz's strategic partnerships with major cloud providers enhance its capabilities. The platform’s flexibility, responsiveness to customer feedback, and ability to add custom context to the reasoning engine are also significant strengths. In addition, the system health dashboards and extensibility model for custom workflows are highly valued by users.”
“The acquisition by Google Cloud is expected to improve how security is designed, operated, and automated, providing an end-to-end security platform for customers with a focus on AI.”
Wiz’s strengths, as highlighted by customers, include its agentless cloud security, which simplifies deployment and management. The centralized dashboard provides comprehensive visibility, integrating various security capabilities such as auto-discovery, vulnerability prioritization, and remediation workflows.
IDC MarketScape: Worldwide Cloud-Native Application Protection Platforms 2025 Vendor Assessment (Doc #US53549925, June 23, 2025)
A milestone for the market
The 2025 IDC MarketScape is more than just a snapshot of vendor capabilities. We believe it’s a signpost for the future of cloud security—one where prioritizing security outcomes, real-time context, and team collaboration are no longer optional.
We’re honored to be included in this foundational report, and we’re excited to help shape what’s next.
