Rethinking Scanning for the AI Era: Wiz’s Agentic Code Security System
Enterprise AI AppSec requires more than powerful models. It requires a system that balances speed, depth, and cost across the software lifecycle.
#Product
The Wiz Red Agent is Now Generally Available
Continuously uncover complex, exploitable risks to stay ahead in the AI Threat Era with the Red Agent
Accelerating CISA BOD 26-04 Vulnerability and Triage Activities through Wiz
Wiz enables organizations to continuously assess environments against the CISA KEV catalog, automating risk prioritization, rapid remediation, and forensic triage workflows.
The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System
Part 3: How the Red Agent bypassed a credit and paywall system by changing a single client-side value from false to true.
FAQs from the Field: Is Wiz a Runtime Security Tool?
It's a common question we hear from prospects: "Does Wiz actually do runtime, or is it just risk prevention?" The short answer is yes, Wiz does runtime.
Build AI Security Agents with Wiz MCP
Power AI-driven security with trusted security context, Wiz AI Agents, and Wiz AI Skills.
Start Secure in the AI Era: Accelerating AI Threat Readiness with WizOS
As the time from vulnerability discovery to exploitation shrinks, building with minimal, secured components is more important than ever. Here is how WizOS helps.
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes
Uncovering Hidden Attack Paths in Cloud Environments Using Runtime Signals
Wiz now layers runtime signals into the Security Graph, exposing hidden attack paths to give security teams a complete picture of risk.
Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows
Secure your Windows fleet without sacrificing performance. Wiz pairs real-time threat detection with a memory-safe architecture that scales efficiently to protect your essential cloud infrastructure.
The Red Agent POV: How it Reasoned its Way to SSRF
Part 1: How the Red Agent uncovered a multi-step attack chain allowing SSRF-to-Local-File-Read on a GCP Cloud Run API
Introducing the Red Agent POV Series
An inside look at how the Red Agent, our AI-Powered Attacker, uncovers complex, exploitable risks in the wild