Wiz grew faster than almost any security company in recent memory and it did it partly on the back of content marketing that was better than the category norm. CloudSec Academy is the artefact of that strategy and, whatever the motive behind it, the result is a public good. It is a large library of explainers covering cloud security concepts, from shared responsibility models and identity boundaries through to specific attack patterns and configuration mistakes, and crucially it is not behind an email wall. You click, you read.
In a category where most vendor education demands a work email address and then produces a follow-up sequence, the absence of a gate is worth naming. The writing is better than it needs to be. Explanations start with the concept rather than the product, which means you can send a CloudSec Academy page to a backend engineer who needs to understand what a lateral movement path is without feeling like you have sent them an advert. I have done this.
It works. The material has become a reasonable shared vocabulary for conversations between security teams and engineering teams, which is a genuine problem in most organisations and one that better terminology actually helps with. The confusion is structural. There are three things here.
CloudSec Academy at wiz.io/academy is the free public library. Product training lives on a separate platform at academy.training.wiz.io with its own access model. Wiz Certified at wiz.io/wiz-certified is the exam programme, currently offering Cloud User, Cloud Fundamentals and Defend Fundamentals, with the Cloud Fundamentals exam at $150 through a proctored session and a two year validity. Three things, one word, and a learner arriving from a search result will not know which one they have landed on.
That is an avoidable own goal for a company that otherwise communicates clearly. On the certification itself, $150 is a fair price by the standards of this category, and a two and a half hour, sixty question proctored exam with a 70 percent pass mark is a real assessment rather than a completion badge. My hesitation is about durability. Wiz Certified launched in early 2025 and is new.
The credential's market value depends on how many employers run Wiz and how many hiring managers have heard of it, and while the first number is growing quickly the second lags badly. If you work somewhere that runs Wiz, the certification is worth having and your employer will probably pay. If you do not, spend the $150 elsewhere and read the free library instead. The content limitation worth flagging is conceptual rather than editorial.
Cloud native application protection platforms are a category that the vendors selling them largely defined, and the material inherits that framing. You will come away understanding cloud security as a problem shaped like the thing Wiz sells: continuous posture scanning, graph-based attack path analysis, agentless visibility. That is a genuinely useful lens and it is also not the only one, and the academy will not tell you where the lens is narrow. Four point zero.
The free library is excellent, clearly written, properly ungated and useful well beyond Wiz customers. The certification is competent and fairly priced but still young, and the naming across three platforms needs fixing.