Runecast vs VMware Aria Automation comparison

Cancel
You must select at least 2 products to compare!
Wiz Logo
Read 11 Wiz reviews
15,070 views|11,203 comparisons
100% willing to recommend
Runecast Logo
87 views|54 comparisons
100% willing to recommend
VMware Logo
142 views|113 comparisons
93% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Runecast and VMware Aria Automation based on real PeerSpot user reviews.

Find out what your peers are saying about Palo Alto Networks, Wiz, Microsoft and others in Cloud Security Posture Management (CSPM).
To learn more, read our detailed Cloud Security Posture Management (CSPM) Report (Updated: May 2024).
771,170 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The solution is very user-friendly.""The product supports out-of-the-box reporting with context about the asset and allows us to perform complex custom queries on UI.""The first thing that stood out was the ease of installation and the quick value we got out of the solution.""The automation roles are essential because we ultimately want to do less work and automate more. The dashboards are easy to read and visually pleasing. You can understand things quickly, which makes it easy for our other teams. The network and infrastructure teams don't know as much about security as we do, so it helps to have a tool that's accessible and nice to look at.""I like Wiz's reporting, and it's easy to do queries. For example, it's pretty simple to find out how many servers we have and the applications installed on each. I like Wiz's security graph because you can use it to see the whole organization even if you have multiple accounts.""With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment.""Our most important features are those around entitlement, external exposure, vulnerabilities, and container security.""The security baseline and vulnerability assessments is the valuable feature."

More Wiz Pros →

"Runecast is a good partner for VMware. Once we have installed it, we can see all the problems and issues. It also has VMware knowledge-based articles."

More Runecast Pros →

"The most valuable features are the Catalog View and the access control business group. Access provisioning is probably the main use case for us, so we can separate access to different Catalog items among the different business groups and have that tied back to our AD LDAP systems.""The product saves a lot of time and cost for us. It has valuable features for creating a playbook.""We have it deployed in a highly-available environment and scalability is nice because we just had another ESX host and then we are able to increase the capacity.""The self-service capabilities are by far the best that we've seen in terms of features. If the user is being able to log in and make requests himself, from the onboarding process all the way to the end, that's very helpful.""The extensibility of it and the customization of a lot of the Blueprints, that you can customize, and the community as a whole. There's a ton of community-generated Blueprints that might be (helpful) to set up a design for your automation needs, that you can use as a base and go on from there and make changes to it.""The IT support for developers is nice as well because they are able to manage the environment themselves.""vRA is user-friendly. It has the same layout and walk-through GUI, similar to other VMware products.""One of the most valuable features is lifecycle management. It allows my teams to create, manage, and retire all of our infrastructure objects in the data center."

More VMware Aria Automation Pros →

Cons
"We're looking at some of the data compliance stuff that they've got Jon offer. I know they're looking at container security, which we gonna be looking at next.""Given the level of visibility into all the cloud environments Wiz provides, it would be nice if they could integrate some kind of mechanism to better manage tenants on multiple platforms. For example, let's say that some servers don't have an application they need, such as an antivirus. Wiz could include an API or something to push those applications out to the servers. It would be great if you could remedy these issues directly from the Wiz platform.""One significant issue is that the searches are case-sensitive, so finding a misconfigured resource can become very challenging.""The only thing that needs to be improved is the number of scans per day.""The reporting isn't that great. They have executive summaries, but it's only a compliance report that maps all current issues to specific controls. Whether you look at one subscription or project, regardless of the size, you will get a multipage report on how the issues in that account map to that control. Our CSO isn't going to read through that. He won't filter that out or show that to his leadership and say, "Here's what we're doing." It isn't a helpful report. They're working on it, but it's a poor executive summary.""The solution's container security could be improved.""We wish there were a way, beyond providing visibility and automated remediation, to wait on a given remediation, due to a critical aspect, such as the cost associated with a particular upgrade... We would like to see preventive controls that can be applied through Wiz to protect against vulnerabilities that we're not going to be able to remediate immediately.""Wiz's reporting capabilities could be refined a bit. They are making headway on that, but more executive-style dashboards would be nice. They just implemented a community aspect where you can share documents and feedback. This was something users had been requesting for a while. They are listening to customer feedback and making changes."

More Wiz Cons →

"The product lacks network assessment capabilities. We cannot view our network assets or scan switches, routers, or IPs for vulnerabilities and issues."

More Runecast Cons →

"Multitenancy management is a little bit difficult to do, so it is an area that can be improved.""The initial setup is very complex because we have a bunch of customization workflows. They were built-in features that we had to program as code with Orchestration.""The high price of the tool is an area of concern where improvements are required.""The stability needs a lot of work. The troubleshooting component of vRealize is a pain. The administration and the upgrades are not up to the mark. If they were able to improve on that, that would be the best thing and would make it much easier to run it in the enterprise.""Automation or scripting should be simplified so that administrators who are not experts can have a better grasp of automation.""Most of the time the upgrade experience has been good but sometimes things break after upgrading. For example, some API codes stopped working.""The initial setup was complex from beginning to delivery. The current version is a bit more complex than version 7 to deploy.""The stability is okay, but could be improved. We sometimes receive strange errors, which can only be solved with specialists."

More VMware Aria Automation Cons →

Pricing and Cost Advice
  • "The pricing seems pretty simple. We don't have to do a lot of calculations to figure out what the components are. They do it by enabling specific features, either basics or advanced, which makes it easy to select."
  • "The pricing is fair. Some of the more advanced features and functionalities and how the tiers are split can be somewhat confusing."
  • "The pricing is fair and comparable to their competitors. The cost seems to be going up, which is a concern. There are potential savings from consolidating tools, but we're uncertain how Wiz's pricing will change over time."
  • "I wish the pricing was more transparent."
  • "The cost of the other solutions is comparable to Wiz."
  • "Wiz is a moderately priced solution, where it is neither cheap nor costly."
  • More Wiz Pricing and Cost Advice →

  • "Runecast's pricing is cheaper than that of its competitors."
  • More Runecast Pricing and Cost Advice →

  • "From the customer perspective, the value was worth it."
  • "I'm very interested in the integration with Puppet. However, my organization doesn't have the funding for something like Puppet right now. If VMware would integrate that feature set (Puppet) into vRA. That would be very awesome."
  • "Better pricing is always handy, but I feel it's at the right price point."
  • "We have seen significant ROI. We used to have physical servers, it took 90 days to get a server, order it, buy it, and get it in. We have it down to 10 minutes, building a server with virtualization, and now that's too slow. So, we let the customer do it at their speed. Therefore, it is pretty much up in a couple of minutes and they have a server."
  • "The solution has helped to increase infrastructure, agility, speed, and provisioning in the time to market."
  • "There is confusion between licensing levels. There are three different licensed versions of vRealize Automation, and there are different things which can happen in each of them."
  • "vRealize automation really should be a front door to the whole VMware suite of products."
  • "As far as value is concerned, it has been essential to our environment. We have been able to deploy VMs quickly and the developers have their own sandbox, so they can spin up and destroy VMs at their own will."
  • More VMware Aria Automation Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
    771,170 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Wiz and Lacework sucks... Buy Orca. 
    Top Answer:Whether or not the cost of third-party Cloud Security tools is justified would depend on your specific needs and budget… more »
    Top Answer:With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment.
    Top Answer:Runecast is a good partner for VMware. Once we have installed it, we can see all the problems and issues. It also has… more »
    Top Answer:Runecast's pricing is cheaper than that of its competitors.
    Top Answer:The product lacks network assessment capabilities. We cannot view our network assets or scan switches, routers, or IPs… more »
    Top Answer:vROP is a virtualization management solution from VMWare. It is efficient and easy to manage. You can find anything you… more »
    Top Answer:When it comes to VMware Aria Automation, you have three choices for free runs Hands-on Lab (HOL) Advanced lab A free… more »
    Top Answer:I was looking at VMware Aria Automation case studies recently and I got the impression that three main kinds of… more »
    Comparisons
    Also Known As
    Runecast Analyzer
    VMware vRealize Automation, vRA, VMware DynamicOps Cloud Suite
    Learn More
    Overview

    Wiz is a highly efficient solution for data security posture management (DSPM), with a 100% API-based approach that provides quick connectivity and comprehensive scans of platform configurations and workloads. The solution allows companies to automatically correlate sensitive data with relevant cloud context, such as public exposure, user identities, entitlements, and vulnerabilities.This integration enables them to understand data accessibility, configuration, usage, and movement within their internal environments.

    Wiz's Security Graph delivers automated alerts whenever risks emerge, allowing teams to prioritize and address the most critical issues before they escalate into breaches. Furthermore, Wiz ensures rapid and agentless visibility into critical data across various repositories, enabling organizations to easily determine the location of their data assets.

    Wiz Features

    Wiz provides various features in the following categories:

    • Agentless Scanning: The solution can scan every layer of a cloud environment without requiring agents, managing the entire process and providing comprehensive visibility.

    • Workflow Integration: Users can create customized workflows within Wiz to identify and assign actions based on urgency, integrating them with ticketing systems for quick and efficient remediation.

    • Vulnerability Management: Wiz's vulnerability management modules provide detailed analytics and visibility across cloud systems, streamlining the manual process of vulnerability discovery. The automated attack path analysis helps identify risks and trace potential points of exposure, allowing users to understand and mitigate them effectively and proactively.

    • CSPM (Cloud Security Posture Management): Wiz's CSPM module offers instant visibility into high-level risks to an enterprise’s cloud environment, covering all accounts without the need for agents.

    • Out-of-the-Box Reporting and Custom Queries: The service supports comprehensive reporting with asset context, allowing users to perform complex custom queries on the solution’s user-friendly interface.

    • Automation Roles and Dashboards: The solution facilitates automation by providing essential roles and dedicated dashboards that enable teams to understand security information quickly, even those with limited expertise.

    • Contextual Risk Evaluation: The service contextualizes the various components contributing to an issue, providing a risk evaluation framework that helps prioritize remediation efforts.

    • Security Graph and Visibility: Wiz's security graph offers visibility across the entire organization, even with multiple accounts, enabling users to understand their environment and assets effectively.

    The Benefits of Wiz

    Wiz offers the following benefits:


    • Comprehensive agentless scanning

    • Effective identification and mitigation of vulnerabilities

    • Streamlined vulnerability management

    • Robust reporting capabilities and customizable queries

    • Enhanced automation and role-based access control

    • Prioritized risk evaluation for efficient remediation

    • Security posture across multiple accounts

    Reviews from Real Users

    Kamran Siddique, VP Information Security at boxed.com, remarks his company has seen a ROI while using Wiz, as it simplifies the process by integrating multiple useful tools into one solution.

    According to a Senior Security Architect at Deliveroo, Wiz has given their company a fresh approach to vulnerability management, as Wiz's native integrations are extremely useful and paramount to the operational success of their platform.



    Get a demo | Wiz

    Runecast is an enterprise IT platform that saves your Security and Operations teams time and resources by enabling a proactive approach to ITOM, CSPM, and compliance. Its agentless scanning capability ensures efficient and in-depth assessment of your infrastructure without imposing additional load on your servers.

    It automates vulnerability assessment, configuration drift management, and continuous compliance – for VMware, Cloud, and Containers.

    Runecast helps reduce operational overhead, increase transparency, and easily assess and remediate infrastructure vulnerabilities. It simplifies managing regulatory compliance, making it an ideal solution for your infrastructure security needs.

    It provides continuous audits against vendor best practices, common security standards, and frameworks such as BSI IT-Grundschutz, CIS, Cyber Essentials, DISA STIG, DORA, Essential 8, GDPR, HIPAA, ISO 27001, KVKK, NIST, PCI DSS, TISAX, VMware Security Hardening Guidelines, and the CISA KEVs catalog.

    Your team can do more with less via a single platform that checks all your cloud infrastructure, for increased visibility, security, and time-saving. Security teams benefit from simplified vulnerability management and regulatory compliance, across multiple standards and technologies. Operations teams are able to reduce operational overheads and increase clarity, enabling you to be proactive and return to the valuable work you want to be doing.

    Runecast has been recognized with Frost & Sullivan's 2023 European New Product Innovation Award in the CNAPP industry for its strong overall performance and commitment to user experience.


    Get to know Runecast: www.runecast.com/

    Read Customer Success Stories: www.runecast.com/case-studies


    VMware Aria Automation is a cloud management tool that allows companies to simplify their cloud experience through a modern automation platform. The solution is designed to deliver self-service clouds, multi-cloud automation with governance, and DevOps-based security and infrastructure management. It helps organizations improve IT agility, efficiency, and productivity through its various features. 

    VMware Aria Automation has multiple use cases that include the following:

    • Self-service multi-cloud: VMware Aria Automation can be used to deliver consistent self-service consumption. Another use case in this area is for delivering infrastructure across VMware Clouds as well as public clouds.

    • Multi-cloud governance: The solution can be used to manage cost, performance, networking, configuration, and security at scale for multi-cloud environments. VMware Aria Automation offers all this with an everything-as-code approach.

    • DevOps for infrastructure: Through VMware Aria Automation, companies can enable a powerful infrastructure as code platform with support for iterative development and infrastructure pipelining.

    • Kubernetes automation: Users can utilize VMware Aria Automation to automate the management of Kubernetes clusters and namespaces with support for vSphere with Tanzu.

    • Security operations: VMware Aria Automation facilitates event-driven automation to deliver full-service IT system compliance enforcement and vulnerability remediation.

    VMware Aria Automation Features

    VMware Aria Automation has various features that allow users to easily perform operations. Some of the solution's capacities include:

    • VMware Cloud agnostic template: This feature allows organizations to use a single cloud template to deploy with Infrastructure as a Code. Deployment options include VMware Cloud as well as major public cloud platforms such as Amazon AWS, Microsoft Azure, Google Cloud, and more.

    • Extensibility and customization: This VMware Aria Automation feature allows users to get full extensibility and customization. This can be achieved through Aria Automation Orchestrator, Action-Based Extensibility (ABX), and built-in integrations with common third-party tools.

    • Self-service multi-cloud: This feature enables users to request and provision infrastructure resources. It can be done across clouds using a unified and consistent Infrastructure as a Service (IaaS) consumption layer, idempotent REST API, and self-service catalog.

    • Centralized policies and governance: VMware Aria Automation offers a feature for users to manage multiple clouds with templatized cloud and policy definition, automated remediation, and cloud environment visibility.

    • Configuration management: Through this feature of the product, day 1 and 2 control can be achieved for virtualized and cloud environments. This can be done with intuitive configuration automation, compliance enforcement, and vulnerability remediation.

    • Infrastructure pipelining: Through this feature, organizations can access user-friendly release automation pipelines. They can be specifically tailored for CI/CD in infrastructure use cases.

    VMware Aria Automation Benefits

    VMware Aria Automation offers its users various benefits. Some of the biggest advantages that the solution brings to companies that utilize it include:

    • VMware Aria Automation provides faster time to market for companies through offloading manual tasks with advanced workflows and agile templating.

    • The solution offers high levels of security and control.

    • This product is suitable for beginners, as it offers a self-service consumption experience for users.

    • VMware Aria Automation accelerates innovation through Infrastructure as Code and DevOps principles.

    • The product provides users with flexibility, as it is compatible with the most popular public cloud solutions.

    • The solution offers fast deployment because of all natively integrated functions.

    Reviews from Real Users

    Awais J., CTO/CEO at a tech services company, likes VMware Aria Automation because it saves a lot of time, provides more visibility, and has extensive automation capabilities.

    An IT consultant at a government rates VMware Aria Automation highly because the product gives you flexibility to analyze and consume resources.

    Sample Customers
    Wiz is the fastest growing software company ever - $100M ARR in 18 months: Wiz becomes the fastest-growing software company ever | Wiz Blog  Discover why companies, including Salesforce, Morgan Stanley, Fox, and Bridgewater choose Wiz as their cloud security partner. Read their success stories here: Customers | Wiz
    Our customers tell us regularly how Runecast benefits CIOs, CISOs, and both Security and Operations teams across verticals with a proactive approach that results in major time and cost savings, increased uptime and security standards complianceSuccess Highlight 75-85% troubleshooting time savings – Kiel Municipal Hospital90% time savings on reactive troubleshooting – Near East Bank90% time savings in upgrade planning– FLEXdata80% reduction in monthly incidents and issues – University of St Andrews78,000 EUR/year minimum annual cost savings – Notino100s of hours saved on security compliance with remediation scripts alone – Kiel Municipal Hospital75% time saved on troubleshooting and root cause analysis – de Volksbank
    Rent-a-Center, Amway, Vistra Energy, Liberty Mutual
    Top Industries
    REVIEWERS
    Computer Software Company33%
    Retailer11%
    Outsourcing Company11%
    Manufacturing Company11%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Financial Services Firm14%
    Manufacturing Company9%
    Government6%
    VISITORS READING REVIEWS
    Computer Software Company25%
    Financial Services Firm14%
    Comms Service Provider14%
    Government12%
    REVIEWERS
    Financial Services Firm18%
    Healthcare Company15%
    Comms Service Provider11%
    Government9%
    VISITORS READING REVIEWS
    Financial Services Firm15%
    Computer Software Company14%
    Government9%
    Manufacturing Company8%
    Company Size
    REVIEWERS
    Small Business15%
    Midsize Enterprise23%
    Large Enterprise62%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise15%
    Large Enterprise65%
    No Data Available
    REVIEWERS
    Small Business12%
    Midsize Enterprise9%
    Large Enterprise79%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise14%
    Large Enterprise69%
    Buyer's Guide
    Cloud Security Posture Management (CSPM)
    May 2024
    Find out what your peers are saying about Palo Alto Networks, Wiz, Microsoft and others in Cloud Security Posture Management (CSPM). Updated: May 2024.
    771,170 professionals have used our research since 2012.

    Runecast is ranked 24th in Cloud Security Posture Management (CSPM) with 1 review while VMware Aria Automation is ranked 15th in Cloud Security Posture Management (CSPM) with 133 reviews. Runecast is rated 9.0, while VMware Aria Automation is rated 8.0. The top reviewer of Runecast writes "Helps with risk assessments for containers, assessing security, and ensuring container compliance". On the other hand, the top reviewer of VMware Aria Automation writes "Allows for a lot of orchestration or customization within our environment to suit our customers". Runecast is most compared with VMware Aria Operations, whereas VMware Aria Automation is most compared with Red Hat Ansible Automation Platform, VMware Aria Operations, vCloud Director, Morpheus and vCenter Orchestrator.

    See our list of best Cloud Security Posture Management (CSPM) vendors.

    We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.