Hi everyone, I'm pretty new to the whole cloud security world and have been tasked with helping evaluate tools like Wiz for our container workloads.
Everyone says runtime protection needs to be "lightweight" to not hurt performance, but I'm struggling to find real, concrete numbers on what that actually means. Our dev teams are really worried about adding any latency or eating up CPU on our production pods.
For those of you using Wiz's runtime protection specifically for containers (Kubernetes, ECS, etc.), could you share what you've seen in terms of overhead?
* What's the typical CPU impact per pod? Is it a percentage range you've observed?
* Does it spike during certain activities, like a container startup or a vulnerability scan?
* Have you had to scale up your nodes because of it, or is it truly negligible?
I'd be super grateful for any data points or even anecdotes. We're just trying to avoid a "set it and forget it" situation that later causes a performance fire drill 😅. Thanks in advance for helping a newbie out.
Great question, I'm looking for the same kind of real-world numbers! We're doing a small POC with Wiz on a test cluster and the initial data seems promising, but it's early.
I can share that on our nginx pods, the sidecar agent seems to add about 2-5 millicores of steady-state CPU usage. I haven't seen a noticeable spike during container start yet. But we haven't pushed it with a big vulnerability scan during peak traffic, so I'm curious about that part too.
Has anyone run it on more complex, high-throughput apps like Java services and seen different results?