Wiz Cloud

No entries match these filters. Clear filters

1. changelog Oct 20, 2026 · issue 116
   • New supported platform Wiz Sensor on GKE (1-click runtime protection)
   • New integration GCP Pub/Sub ingestion for GCP Admin Activity Logs and GKE Control Plane Audit Logs
   • New integration Google Artifact Registry (GAR) image scanning
2. changelog Aug 19, 2026 · issue 050

   Wiz GA's Pen Test Findings with Security Graph correlation, adds Google Threat Intelligence enrichment and hybrid/SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. coverage expansions.

   • Adds Graph Controls that surface attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. tied to pen-test findings, enabling blast-radius visualization correlated against external network exposure, identity privileges, secrets, data, and lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. paths in the Wiz Security Graph.
   • Integrates Google Threat Intelligence — enriching Wiz risk and threat findings with Mandiant frontline intelligence, VirusTotal crowdsourced intelligence, and Google threat insights, available out of the box to all Wiz customers.
   • Extends Google Threat Intelligence enrichment to malware findings, providing rich context beyond a simple verdict to accelerate investigation prioritization.
   • Adds Google Threat Intelligence malicious AI Skill intelligence to identify potentially risky open-source skills that AI agents can import, addressing agentic AI attack surfacesattack surfacesThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..
   • Extends the Security Graph into on-premises and hybrid environments via the Sensor Workload Scanner for unified hybrid security posture.

   +2 more show less

   • Connects third-party inventory and risk findings into the Security Graph, enabling unified vulnerability prioritization across all finding types using Wiz context and attack paths.
   • Extends Security Graph risk assessment coverage to SaaS applications including M365, closing visibility gaps across enterprise SaaS.

   7 details in Everything

3. changelog Aug 6, 2026 · issue 037

   Wiz adds automated DISA STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against. assessment for Amazon Linux 2023 and Windows Server 2025 via agentless Host Configuration Rules.

   └──▷ HOW TO FIND IT
   Enable the DISA STIG Amazon Linux 2023 framework to start continuous agentless assessment across your entire AL2023 fleet.
   📍In the Wiz portal, go to Compliance Posture › Manage Frameworks, search for DISA STIG Amazon Linux 2023, and enable the benchmark — assessment begins automatically for all connected instances.
   Enable the DISA STIG Microsoft Windows Server 2025 framework to continuously assess Windows Server 2025 hosts as they are deployed.
   📍In the Wiz portal, go to Compliance Posture › Manage Frameworks, search for DISA STIG Microsoft Windows Server 2025, and enable the benchmark — new instances are assessed automatically on deployment.
   • Adds DISA STIG Amazon Linux 2023 benchmark support via Host Configuration Rules (HCR), providing continuous agentless assessment across all connected cloud instances without SCAP content or scan credentials.
   • Adds DISA STIG Microsoft Windows Server 2025 benchmark support via Host Configuration Rules (HCR), with an initial automated rule set and expanding coverage in upcoming releases.
   • STIG findings for both frameworks surface in the Compliance Posture dashboard alongside existing frameworks, with per-rule pass/fail status per instance and rollup into category and subcategory scores.
   • Supports filtering findings by STIG severity category (CAT I, CAT II, CAT III) to prioritize high-impact failures.
   • Enables Compliance Posture Trend tracking, auditor report generation, and automation rules to create tickets or trigger remediation workflows for failed STIG checks.

   +1 more show less

   • Available to all Wiz for Government customers under existing Wiz licenses with no additional license required.

   6 details in Everything

4. changelog Jul 30, 2026 · issue 031

   Wiz launches ASMASMAttack Surface Management: the continuous practice of discovering, inventorying, and monitoring an organization's externally exposed assets so that cyber tools can flag unknown or misconfigured entry points before attackers find them. and Red Agent in GA: continuous attack-surface monitoring plus AI-driven autonomous penetration testing.

   • New Wiz ASM (GA): continuously identifies exposed assets, weak credentials, and misconfigurations, linking risks to application and code ownership so teams know where risk is introduced and where it becomes exposed.
   • New Wiz Red Agent (GA): autonomously tests live environments and applications using AI to determine which exposures lead to real, exploitable attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately..

   2 details in Everything

5. changelog Jul 22, 2026 · issue 022

   Wiz adds a Threat Actors page listing historical threat actors that have targeted Fortinet products.

   └──▷ HOW TO FIND IT
   Review which threat actors have historically targeted Fortinet products to prioritize investigation and response.
   📍In the Wiz console, navigate to the Threat Actors page to view the comprehensive list of threat actors that have targeted Fortinet products.
6. changelog Jul 13, 2026 · issue 015

   Wiz IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. Inventory reaches GA, linking every IaC module to its live cloud deployments and managed resources.

   └──▷ HOW TO FIND IT
   Navigate to the IaC Inventory in the Wiz console to trace a live cloud resource back to the IaC module that provisioned it.
   📍In the Wiz console, go to Code › IaC Inventory, select a module to view its linked deployments and the live cloud resources it manages.
   • IaC Inventory is now Generally Available, connecting every IaC module to the deployments it created and the live cloud resources it manages.
   • Reconciles Wiz Code IaC scan results with Wiz Cloud runtime visibility, bridging infrastructure-as-code definitions to what is actually running.

   2 details in Everything

7. changelog Jul 8, 2026 · issue 009

   Wiz ASMASMAttack Surface Management: the continuous practice of discovering, inventorying, and monitoring an organization's externally exposed assets so that cyber tools can flag unknown or misconfigured entry points before attackers find them. adds automated subdomain recon, API endpoint discovery, runtime sensor telemetry, and custom target input to map attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..

   └──▷ HOW TO FIND IT
   Extend ASM coverage to legacy or air-gapped systems not reached by automated discovery by manually specifying their addresses.
   📍In the Wiz console, go to ASM › Custom Targets and add the IP addresses, domains, or IP ranges of legacy or isolated systems you want analyzed.
   • Adds automated subdomain reconnaissance seeded from owned root domains to surface shadow exposures.
   • Discovers REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints via cloud-native API gateways, Wiz Runtime Sensor telemetry, and Attack Surface Scanner-detected API specifications.
   • Leverages Wiz Runtime Sensor inbound network traffic telemetry to identify and assess active endpoint exposure.
   • Supports manual input of IP addresses, domains, and IP ranges as Custom Targets to cover legacy or isolated systems outside automated discovery.
   • Maps cloud network configurations to calculate effective exposure for every cloud object.

   5 details in Everything