https://cybertoolchain.io/tools/wiz New releases and features in Wiz, tracked by The Cyber Toolchain. en Wed, 19 Aug 2026 15:36:58 GMT https://www.wiz.io/blog/wiz-pen-test-findings-is-now-ga https://www.wiz.io/blog/wiz-pen-test-findings-is-now-ga Wed, 19 Aug 2026 15:36:58 GMT Wiz Penetration Test Findings reaches GA, unifying bug bounty, red team, third-party audit, and AI pen-test results in a single platform. • Wiz Penetration Test Findings is now Generally Available, providing a single home for pen-test results from bug bounties, third-party audits, internal red team exercises, and AI pen-test scanning — connected to real-time cloud context on the Wiz Security Graph. • Pen-test findings are automatically linked to continuous prioritization, ownership assignment, and remediation tracking, closing the loop between offensive assessment and ongoing exposure management. • Introduces support for Continuous Threat Exposure Management (CTEM) workflows by bridging the Validation stage back to Discovery, Prioritization, and Mobilization within a single platform. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/wiz-brings-automated-disa-stig-assessment-to-amazon-linux-and-windows-server https://www.wiz.io/blog/wiz-brings-automated-disa-stig-assessment-to-amazon-linux-and-windows-server Thu, 06 Aug 2026 12:00:00 GMT Wiz adds automated DISA STIG assessment for Amazon Linux 2023 and Windows Server 2025 in AWS GovCloud. • Adds automated DISA STIG compliance assessment for Amazon Linux 2023 (AL2023 V1R2 and V1R3 benchmarks) and Windows Server 2025, covering gaps where official SCAP content is not yet available. • Delivers continuous hardening validation for federal agencies and defense contractors operating in AWS GovCloud, supporting FedRAMP Rev5, FedRAMP 20x, CMMC, and DoD authorization requirements. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/atlas-ai-vulnerability-researcher https://www.wiz.io/blog/atlas-ai-vulnerability-researcher Mon, 27 Jul 2026 14:00:02 GMT Wiz introduces Atlas, an autonomous AI system for vulnerability research that ranked #1 on CyberGym with 90.9% accuracy and found 200+ validated bugs. • Introduces Atlas, an autonomous multi-agent AI system for AI SAST that maps attack surfaces via a code property graph (CPG), hunts vulnerabilities in parallel with independent agents, validates findings adversarially, and confirms them by dynamically executing a generated exploit in a dedicated execution environment. • Atlas ranked #1 on CyberGym — the public benchmark for AI-driven vulnerability research — with a 90.9% success rate, and uncovered 200+ previously unknown vulnerabilities in heavily audited open-source projects including grpc, dnsmasq, Kubernetes, gVisor, the Linux kernel, and containerd. • Each Atlas finding is autonomously validated end-to-end: an adversarial debate stage (one agent argues exploitability, one argues against, a third adjudicates) filters false positives before a dynamic proof-of-concept trigger confirms real security impact. • Atlas uses a Cyber Model Arena internal benchmark to continuously evaluate newly released models across threat modeling, hunting, validation, and proof-generation tasks, routing each pipeline stage to whichever model currently wins on that task. • Atlas development uses Evaluation-Driven Development (EDD), requiring strict quality metrics for every AI component and stage — including a dedicated validation eval that scores candidate ratings against known false-positive and true-positive ground-truth sets — before any pipeline change is accepted. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/m-red-team-asyncapi-supply-chain-compromise-via-github-actions https://www.wiz.io/blog/m-red-team-asyncapi-supply-chain-compromise-via-github-actions Tue, 14 Jul 2026 10:33:36 GMT Wiz adds detection and IOCs for the @asyncapi npm supply chain compromise (M-RED-TEAM v6.4 malware). • Adds detection for five malicious @asyncapi npm package versions (@asyncapi/generator 3.3.1, @asyncapi/generator-helpers 1.1.1, @asyncapi/generator-components 0.7.1, @asyncapi/specs 6.11.2 and 6.11.2-alpha.1) tied to the July 14, 2026 supply chain attack. • Surfaces IaC coverage as a three-stage funnel metric (IaC-supportable → Tracked by IaC → Mapped to a declaration in code) within the Wiz platform to quantify how much cloud infrastructure is governed, traceable, and remediable via pull request. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/introducing-wiz-mcp https://www.wiz.io/blog/introducing-wiz-mcp Thu, 02 Jul 2026 11:00:00 GMT Wiz MCP is now generally available, connecting AI agents and assistants to the Wiz Security Graph, AI Agents, and reusable AI Skills. • Introduces Wiz MCP (general availability): a secure integration layer that connects AI assistants, custom agents, and AI-powered applications to the Wiz platform. • Enables AI to query and reason over the Wiz Security Graph — including findings, issues, vulnerabilities, attack paths, identities, cloud infrastructure, code, data, and runtime relationships. • Exposes Wiz AI Agents (Red, Blue, and Green) through MCP so external AI can consume agent analyses and recommendations without recreating the same reasoning. • Provides access to Wiz AI Skills — predefined, reusable agentic playbooks for vulnerability triage, remediation, threat investigation, compliance mapping, and more. • Supports an Import Security Reports Skill that extracts findings from external penetration test reports, maps them to cloud resources, and creates Penetration Test Findings in Wiz. • Supports a Custom Compliance Mapping Skill that maps internal security frameworks against existing Wiz policies, identifies gaps, recommends custom rules, and generates auditable coverage summaries. • Enables Green Agent–driven code-to-cloud remediation from the IDE: traces Wiz Issues to responsible repositories, generates fixes, and opens pull requests. • Enables Blue Agent–powered SOC workflows: correlates threats with SIEM data, builds investigation timelines, and creates remediation tickets with documented findings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/ai-threat-readiness-with-wizos https://www.wiz.io/blog/ai-threat-readiness-with-wizos Tue, 30 Jun 2026 17:50:35 GMT Wiz adds Secure Architecture Opportunities, WizOS Migration Skill, and Green Agent WizOS remediation to accelerate container hardening. • New 'Secure Architecture Opportunities' page (public preview) in Wiz Findings groups WizOS migration candidates by image type (e.g., Python, nginx) with associated CVEs, related issues, and estimated migration effort for risk-ordered prioritization. • New WizOS Migration Skill for AI coding agents surfaces the correct WizOS replacement image from Dockerfile context and can apply the base-image swap directly within the development environment. • Wiz Green Agent now includes WizOS image recommendations in remediation guidance for container CVEs, with a 'Send to Coding Agent' action that automatically opens a repo issue and passes full context to the coding agent for hands-off migration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/sensor-wls-for-on-prem https://www.wiz.io/blog/sensor-wls-for-on-prem Mon, 29 Jun 2026 13:39:33 GMT Wiz Sensor Workload Scanner is now GA, extending risk prioritization and attack path analysis to on-premise VMware, bare metal, and self-hosted Kubernetes. • Adds Sensor-based Workload Scanner (WLS) GA for on-premise environments, identifying public exposure, vulnerabilities, misconfigurations, malware, secrets, and sensitive data on VMware vSphere, bare metal, and self-hosted Kubernetes. • Extends the Wiz Security Graph to on-premise assets, correlating infrastructure context with workload findings to surface toxic combinations and cross-environment attack paths. • New Runtime Validation confirms whether a vulnerable package is actually loaded into memory and actively running, separating theoretical CVEs from live exploitable risks. • Native vSphere and Kubernetes Connectors provide agentless infrastructure assessment via native APIs, mapping ESXi vulnerabilities, local identities, and cluster misconfigurations into the Security Graph. • Supports ingestion of findings from existing on-premise scanners via Unified Vulnerability Management (UVM) to centralize hybrid risk strategy. • Integrated Attack Surface Management combines external outside-in scanning with internal context to identify which on-premise servers are exposed to the public internet. • Wiz Red Agent can simulate attacker lateral movement through on-premise environments to validate true exploitability of exposed servers. • Runtime Threat Detection via the Runtime Sensor continuously monitors on-premise workload behavior, delivering high-fidelity alerts with automated forensics collection and AI-powered initial investigation via the Blue Agent. • Wiz Workflows enables automatic triggering of remediation playbooks upon threat detection, turning a detected on-premise threat into a resolved one without manual intervention. • Extends AI workload coverage to on-premise environments, providing visibility into AI technologies and detecting AI-specific threats such as suspicious prompt activity. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/runtime-signals-in-security-graph https://www.wiz.io/blog/runtime-signals-in-security-graph Thu, 25 Jun 2026 11:59:34 GMT Wiz Security Graph now ingests live runtime network signals to surface previously hidden attack paths as critical Issues. • Adds runtime network telemetry from the Wiz Runtime Sensor into the Security Graph, correlating live connections (container-to-database, pod-to-pod, DNS queries) with existing risk findings to expose complete attack paths. • Surfaces correlated runtime + risk findings as a single critical Issue, replacing separate agentless findings with one prioritized, validated attack path view. • Enables visibility into AI workload network behavior, including containers making live connections to remote MCP servers that were never declared in configuration or policy. • Available automatically to all existing Wiz Cloud and Runtime Sensor customers across Graph Controls and Issues — no additional deployment required. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/wiz-runtime-sensor-for-your-windows-environment https://www.wiz.io/blog/wiz-runtime-sensor-for-your-windows-environment Mon, 22 Jun 2026 13:21:47 GMT Wiz Runtime Sensor reaches GA for Windows, adding real-time threat detection, automated response, and runtime vulnerability validation across hybrid cloud. • Adds Wiz Runtime Sensor for Windows (GA), extending agent-based real-time monitoring and threat detection to Windows VMs and Windows Kubernetes nodes alongside existing Linux/container coverage. • Enables cross-layer attack correlation in Wiz Defend, automatically stitching Windows workload events (e.g., LSASS dump, IMDS credential theft) with cloud control-plane logs into a unified attack timeline. • Supports Custom Detection Rules for Windows, letting security teams define fleet-specific threat logic and behavioral detections beyond built-in rules. • Introduces Automated Runtime Response for Windows: policies that automatically terminate malicious processes based on defined rules or threat categories. • Adds Context-Aware Forensics for Windows: automatic capture of logs, suspicious binaries, and scripts at detection time, preserved directly in the Wiz platform. • Enables Runtime Risk Validation for Windows vulnerability management, identifying which vulnerable DLLs and packages are actively loaded in memory to prioritize genuinely exploitable CVEs. • Delivers multi-cloud Windows coverage across Azure, AWS, GCP, and hybrid environments with a memory-safe (Rust-based), low-footprint architecture capped at 0.5 cores and 500 MiB. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/red-agent-pov-series https://www.wiz.io/blog/red-agent-pov-series Wed, 17 Jun 2026 14:33:41 GMT Wiz launches Red Agent POV Series, showcasing its AI-powered pentester finding 5,500+ critical vulns across ~1,000 production environments. • Introduces the Red Agent POV Series: a recurring research blog where Wiz Research details real-world exploitable vulnerabilities discovered autonomously by the Red Agent AI pentester. • Highlights Red Agent's continuous autonomous scanning capability, completing hundreds of thousands of scans across ~1,000 environments in a single month and surfacing 17,000+ unique findings. • Surfaces dominant real-world risk patterns at scale: 54% of findings stem from broken access control, 52%+ of injection findings are Critical/High, and 61%+ of exposed secrets are Critical/High severity. • First POV entry demonstrates multi-step SSRF discovery in a GCP Cloud Run service — the Red Agent chained 96 reasoning iterations across 3 scan runs to bypass GitHub-URL validation and extract credentials and source code without authentication. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/exposure-management-dashboard https://www.wiz.io/blog/exposure-management-dashboard Tue, 16 Jun 2026 10:53:02 GMT Wiz launches Exposure Management Dashboard (Public Preview): a CTEM-aligned single pane of glass for scoping, prioritizing, validating, and remediating attack paths at AI speed. • New Exposure Management Dashboard (Public Preview) provides a unified CTEM lifecycle view — scoping, discovery, prioritization, validation, and remediation — in a single console. • Scoping stage maps all covered assets across cloud environments, code repositories, on-premise servers, AI workloads, workstations, identities, and SaaS in one inventory view. • Discovery stage surfaces infrastructure vulnerabilities, code vulnerabilities (via Wiz Code and ASPM integrations), pen-test findings, cloud misconfigurations, exposed secrets, and sensitive data findings in a unified risk profile. • Prioritization stage leverages the Wiz Security Graph to correlate risks into attack paths with validated business impact, cutting through thousands of alerts to surfaced Wiz Issues. • Validation stage integrates Wiz ASM and the Red Agent (AI-powered pentester) to verify exploitable attack paths from an external attacker perspective and correlate findings with internal cloud context. • Remediation stage includes the Wiz Green Agent — an AI-powered investigation and remediation engine that automates root-cause analysis and ownership mapping — and tracks posture improvements against SLAs. • Wiz Workflows enable automated remediation pipelines, such as triggering a Green Agent investigation on critical Issues and opening an assigned Jira ticket automatically. • Unified Vulnerability Management (Wiz UVM) ingests data from existing third-party scanners alongside native Wiz cloud and code scanner data. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/ai-threat-readiness-pillar-3 https://www.wiz.io/blog/ai-threat-readiness-pillar-3 Thu, 11 Jun 2026 22:17:33 GMT Wiz adds native AI Code Scans, Red Agent adversarial validation, and Green Agent auto-remediation for AI-driven development. • Adds native AI Code Scans (now in private preview) using commercially available AI models to perform semantic reasoning on application code, surfacing intent-dependent vulnerabilities like IDOR, business logic errors, and broken function-level authorization that traditional SAST misses. • Introduces a layered scanning model: continuous rules-based SAST via the Unified Policy Engine, periodic AI Code Scans on major updates, and deep frontier-model 'X-Ray' analysis for mission-critical repositories. • Enables Code-to-Cloud mapping via the Wiz Service Catalog to connect deployed cloud resources to source repositories, letting runtime exposure drive AI scan prioritization rather than scanning all repos uniformly. • Introduces the Wiz Red Agent, which autonomously tests AI Code Scan findings end-to-end against live environments to confirm exploitability and validate attack paths on the Wiz Security Graph. • Introduces the Wiz Green Agent, which triggers automatically after Red Agent validation to generate tailored remediation plans, identify exact code/infrastructure ownership, issue pull requests, and coordinate with AI coding agents such as Claude Code and CodeMender. • Adds Posture Policies to govern lower-severity findings as security debt, with configurable remediation SLAs, team ownership tracking, and board-level progress reporting across the full vulnerability lifecycle. • Operates as an open platform: ingests findings from external scanners and frontier models alongside native scans, enriching all findings on the Wiz Security Graph under a unified workflow. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/ai-threat-readiness-pillar-2 https://www.wiz.io/blog/ai-threat-readiness-pillar-2 Tue, 09 Jun 2026 15:25:20 GMT Wiz adds Green Agent-powered remediation paths, unified ownership automation, CI/CD guardrails, and WizOS hardened images to accelerate patching. • New Green Agent capability automatically traces runtime vulnerabilities back to their source (VM, container image, Dockerfile, or Terraform module) and generates environment-specific, step-by-step remediation plans. • Green Agent integration via MCP enables remediation orchestration through external AI agents and toolchains. • Unified ownership model aggregates signals from CODEOWNERS files, Git Blame, cloud event logs (e.g., CloudTrail), Resource Tag Rules, Backstage, and ServiceNow CMDB to automatically suggest the right Issue assignee. • Wiz Workflows adds a built-in Assign Ownership template that automatically routes Critical Issues to the identified owner without manual triage. • Wiz Workflows can now chain Green Agent investigation, root-cause analysis, ownership assignment, and PR creation into a single automated remediation pipeline triggered on Issue creation. • Wiz CI/CD Policies enforce the same cloud-environment policies at build time, blocking vulnerabilities, misconfigurations, and exposed secrets before deployment. • Wiz Code plugins (Wiz Skills and Wiz Hooks) bring policy enforcement into the developer IDE, scanning at pre-commit and pre-push for secrets, IaC misconfigurations, and vulnerable dependencies — including code written by AI agents. • WizOS provides hardened container images with supply chain integrity guarantees and CVE remediation SLAs; Green Agent can recommend the specific WizOS image to migrate to and send the change to a coding agent. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/introducing-wiz-cloud-cost https://www.wiz.io/blog/introducing-wiz-cloud-cost Mon, 08 Jun 2026 12:00:00 GMT Wiz Cloud Cost launches GA: unified cloud & AI spend visibility, optimization, and anomaly alerting across AWS, Azure, and GCP. • Introduces Wiz Cloud Cost, a new FinOps module delivering unified cost visibility across AWS, Azure, and GCP environments directly within the Wiz platform. • Integrates cost data into the Wiz Graph, enabling teams to visualize application-level spend alongside security findings and resource relationships. • Adds Cost Explorer with actual spend tracking, forecasting, and drill-down filtering by cloud platform, subscription, resource tags, resource type, and AI model. • Adds a Kubernetes cost tab in Cost Explorer showing spend across clusters, top controllers, and allocated cost over time. • Surfaces 140+ context-aware cost optimization rules covering waste, right-sizing, and configuration — including disk right-sizing via agentless disk analysis and shadow data detection via data scanning. • Enables code-to-cloud mapping for optimization opportunities, tracing resources back to their IaC templates and code repositories. • Introduces Cost Monitors with a rules engine supporting fixed thresholds and anomaly detection for alerting on budget overruns and spend spikes, scoped to projects or individual resources. • Adds Pricing Updates feed showing upcoming cloud provider pricing changes and their projected impact on your environment. • Provides commitment governance tracking utilization, coverage, and expiration of reserved capacity across cloud subscriptions. • Includes a dedicated AI Cost dashboard with model-level cost attribution and AI spend visibility across providers. • Supports cost attribution via Projects, RBAC scoped to project level, custom dashboards, and automation rules routing cost findings to Slack, Jira, or other integrations. • Integrates Mika AI for cost spike investigations launched directly from the cost heatmap or monitor findings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/ai-threat-readiness-pillar-1 https://www.wiz.io/blog/ai-threat-readiness-pillar-1 Thu, 04 Jun 2026 14:19:33 GMT Wiz adds Red Agent (autonomous AI attacker) and Green Agent (AI remediation) alongside expanded Attack Surface Management for cloud, SaaS, and AI environments. • New Red Agent: autonomous AI-powered attacker that continuously maps API attack surfaces (from cloud APIs, Swagger/OpenAPI docs, runtime sensor, and web crawler) and performs context-aware exploitation to uncover broken authorization, business logic flaws, injection vulnerabilities, and multi-step attack chains in custom and AI-generated applications. • New Green Agent: AI-powered remediation assistant that identifies root cause of exposure findings and delivers context-aware, actionable fixes to resource owners by synthesizing code-to-cloud relationships, ownership data, Security Graph context, and historical remediation patterns. • Expanded Wiz Attack Surface Management (ASM) with Advanced ASM tier: continuously discovers and validates internet-facing assets across cloud, SaaS, AI, and on-premises environments — including shadow APIs, unmanaged cloud services, and vibe-coded applications — enriched with internal cloud network and runtime context. • Wiz Security Graph correlation now connects validated external findings from ASM and Red Agent to internal cloud infrastructure, identities, sensitive data, and application ownership to enable prioritization by reachability, exploitability, and business impact. • Automated remediation routing via Wiz Workflows: findings can be automatically assigned to the appropriate application owner, infrastructure team, or developer, and combined with Green Agent guidance for repeatable remediation processes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz https://www.wiz.io/blog/introducing-wiz-api-spm https://www.wiz.io/blog/introducing-wiz-api-spm Mon, 01 Jun 2026 15:02:08 GMT Wiz API SPM is now GA, adding automated API discovery, exploitability testing, and toxic-combination prioritization across cloud environments. • New Wiz API Security Posture Management (API SPM) module provides continuous, agentless discovery of APIs — including shadow and zombie APIs — across AWS API Gateway, Azure API Management, Google Cloud API Gateway, and Apigee. • Enriches every discovered API with context: external exposure, authentication configuration, sensitive data access, and associated cloud resources. • Introduces Attack Surface Management (ASM) for APIs, which dynamically tests APIs from the outside in — simulating real attacker techniques to validate whether endpoints are actually exploitable, not just theoretically vulnerable. • Adds Red Agent capability that actively probes APIs using attacker techniques, expanding coverage across the full OWASP API Top 10 including Broken Object Level Authorization and other issues passive scanning cannot reliably detect. • Identifies toxic combinations by mapping exposed API endpoints through the Wiz Security Graph to sensitive data and cloud resources, surfacing the highest-priority attack paths (e.g., internet-accessible endpoint with confirmed SQL injection hosting PII). • Supports automated remediation workflows, including triggering Terraform patches via a coding agent directly from the remediation interface. • Green Agent generates step-by-step remediation plans grounded in full cloud and API context — ownership, linked resources, and data sensitivity — to accelerate mean time to remediation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz