https://cybertoolchain.io/tools/wiz-code New releases and features in Wiz Code, tracked by The Cyber Toolchain. en Thu, 13 Aug 2026 13:48:56 GMT https://www.wiz.io/blog/securing-personal-repositories https://www.wiz.io/blog/securing-personal-repositories Thu, 13 Aug 2026 13:48:56 GMT Wiz Code now inventories developers' personal public GitHub repos, validates secret exploitability via AI Red Agent, and maps full attack paths on the Security Graph. • Adds automated inventory and correlation of developer identities to their personal public GitHub repositories outside org boundaries, closing the visibility gap where unmanaged secret exposure lives. • Enriches secrets found in personal repositories onto the Wiz Security Graph to show the full attack path and blast radius of a compromised credential, including downstream resource access. • Introduces exploitability validation via the Wiz Red Agent — an AI-powered attacker that actively tests whether an exposed credential is live and what it can reach, going beyond traditional validity checks. • Surfaces identity-attached findings with the exact commit, GitHub user, and email that pushed a secret, enabling immediate owner-assigned remediation without manual investigation. • Integrates personal-repo findings into existing remediation workflows including Jira ticket creation, Slack developer notification, and tracked token rotation and revocation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz-code https://www.wiz.io/blog/securing-personal-repositories https://www.wiz.io/blog/securing-personal-repositories Thu, 13 Aug 2026 13:48:56 GMT Wiz Code now inventories developers' personal public GitHub repos, validates secret exploitability via AI Red Agent, and maps full attack paths on the Security Graph. • Adds automated inventory and correlation of developer identities to their personal public GitHub repositories outside org boundaries, closing the visibility gap where unmanaged secret exposure lives. • Enriches secrets found in personal repositories onto the Wiz Security Graph to show the full attack path and blast radius of a compromised credential, including downstream resource access. • Introduces exploitability validation via the Wiz Red Agent — an AI-powered attacker that actively tests whether an exposed credential is live and what it can reach, going beyond traditional validity checks. • Surfaces identity-attached findings with the exact commit, GitHub user, and email that pushed a secret, enabling immediate owner-assigned remediation without manual investigation. • Integrates personal-repo findings into existing remediation workflows including Jira ticket creation, Slack developer notification, and tracked token rotation and revocation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz-code https://www.wiz.io/blog/agentic-code-security https://www.wiz.io/blog/agentic-code-security Thu, 30 Jul 2026 16:47:57 GMT Wiz Code adds AI SAST (Private Preview) and a three-tier agentic scanning system with Atlas deep-analysis and Google CodeMender integration. • New Wiz AI SAST (Private Preview): continuous AI-powered first-party code analysis that models application entry points, trust boundaries, and data flows to surface complex business logic flaws missed by pattern-matching scanners. • New Wiz Rule-Based SAST (GA): deterministic scanning that automatically blocks known vulnerability patterns, insecure code, and hardcoded secrets before code is merged. • Atlas vulnerability research system is being productized as a first-party deep-analysis engine for targeted agentic pentesting of high-value applications and critical code. • New orchestration of Google CodeMender as a third-party agentic engine for complementary code analysis and remediation. • New open, multi-engine orchestration layer routes analysis across first- and third-party agentic scanning engines, with all findings correlated on the Wiz Security Graph and flowing through existing AppSec validation and remediation workflows. • Wiz Security Graph now connects code findings with runtime, identity, deployment, and attack surface context to prioritize which repositories receive deterministic, continuous AI, or deep agentic investigation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz-code https://www.wiz.io/blog/cisa-bod-26-04-alignment-with-wiz https://www.wiz.io/blog/cisa-bod-26-04-alignment-with-wiz Tue, 28 Jul 2026 11:00:01 GMT Wiz introduces Atlas, an autonomous AI SAST system that validates every finding with a working exploit and scans pipelines for Secure by Design compliance. • Introduces Atlas, an autonomous AI vulnerability research system that uses specialized agents to map attack surfaces, hunt in parallel, and adversarially validate findings — each confirmed with a dynamically generated, working exploit. • Adds AI SAST at scale: Atlas performs continuous, cost-efficient deep code scanning across entire enterprise codebases using a code property graph (CPG) for call- and data-flow–grounded analysis. • Adds shift-left tracing that links vulnerabilities discovered in production back to their originating code repository or container image, enabling fixes at the source. • Extends pipeline scanning to AI application configurations and model deployments, in addition to container images, software packages, and IaC, to enforce Secure by Design guardrails. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz-code