Wiz

Wiz is a cloud security platform (CNAPP) that scans AWS, Azure and Google Cloud without agents. Part of Google Cloud, sold by quote to security teams.

Wiz gives security teams one view of risk across their cloud accounts, the code that builds them and the workloads running in them. Google completed its acquisition of Wiz in March 2026, and Wiz carries on under its own name as part of Google Cloud. The platform connects to cloud accounts through API connectors and takes inventory of the whole cloud and AI environment. It then joins what it finds into a single list of toxic combinations, the risks most likely to be exploited, instead of a stream of separate alerts. Wiz Cloud handles posture: continuous misconfiguration detection, attack path analysis and assessment against built-in compliance frameworks with reports for auditors. Every finding sits on the Wiz Security Graph, which links identities, network exposure, data sensitivity and workloads. Wiz Code carries the same checks into development, scanning infrastructure-as-code, open-source dependencies, container images and hardcoded secrets. It can also open a fix as a pull request in the team's version control system. Wiz Defend covers cloud detection and response, with hunting across cloud logs and runtime events. The optional eBPF Wiz Sensor adds real-time threat detection and runtime blocking on virtual machines, containers and serverless functions. Wiz is built for cloud security, platform and application security teams protecting workloads across AWS, Azure and Google Cloud. Its customers run from startups and smaller businesses to large enterprises securing multi-cloud and AI workloads. Entitlement management, data security posture and AI security posture run in the same platform, so one team can own identity, data and AI risk together. Security operations analysts use Wiz Defend for investigation, while developers meet findings in their pull requests and pipelines. The modules can be adopted together or one at a time, so a team can begin with posture and add code or runtime coverage later. Cloud security teams work from the prioritized queue of issues and attack paths, closing the exposures that matter first. Platform teams running Kubernetes on EKS, AKS and GKE check cluster configuration against CIS benchmarks. In CI/CD, policies stop vulnerable container images before they reach production. When Wiz Defend raises a threat, response workflows run in Cortex XSOAR, QRadar SOAR or Torq, beside the rest of the operations queue. Compliance owners use the built-in frameworks, such as PCI, HIPAA and GDPR, to prepare reports for auditors. Developers see each cloud finding traced back to the code, pipeline and person that created the resource, so the fix lands where the problem began.