As an agentless, graph-based CNAPP, Wiz brings immediate visibility to risks, including vulnerabilities across your cloud workloads. Wiz combines vulnerability risk findings with other cloud risks, such as external exposure threats, excessive cloud identity entitlements, or sensitive data findings, to surface the most critical threats to your organization’s most sensitive data and infrastructure.
As a vulnerability scanner, Wiz provides coverage across the SDLC by discovering and analyzing RedHat container images for vulnerabilities in your code repositories, CI/CD pipelines, container registries, and running containers deployed to Openshift or Kubernetes clusters. Wiz also scans official RHEL VM images and the applications deployed on those servers using agentless scanning, allowing Wiz to provide full workload scans to your entire cloud estate in seconds without installing agents or sidecars.
Wiz enriches vulnerabilities found on official RedHat images and AMIs with information directly from RedHat Security Advisories. Users can fix vulnerabilities with remediation recommendations unique to the version and release of the image scanned.
Agentless risk visibility
Using a one-time cloud API connection, gain visibility into risks, including vulnerabilities across your PaaS resources, Virtual Machines, Containers, Serverless Functions, Public buckets, Data Volumes, and Databases in the cloud without installing an agent on each workload.
Vulnerability scanning
Wiz identifies OSS libraries and dependencies, OS packages, installed applications, and more on cloud hosted workloads. The Wiz Vulnerability Scanner then looks for vulnerabilities that may affect those software libraries and components using Wiz’s extensive vulnerability catalog sourced from dozens of proprietary and public sources.
Comprehensive Openshift security
Gain complete visibility across the layers and deployments tied to your containerized applications in Openshift using the Wiz Kubernetes Connector. Additionally, monitor and detect suspicious activity and real-time threats using the Wiz Sensor.
Guardrails across SDLC
Make containers more secure across every stage of the SDLC, from scanning K8s YAML files or Helm charts with Wiz Guardrails, analyzing container images or your Quay.io repositories for vulnerabilities, or blocking resources and container images with the Wiz Admission Controller.
Contextual risk-based prioritization
Reduce alert fatigue by correlating vulnerabilities with multiple risk factors, including external exposure, cloud entitlements, secrets, misconfigurations, malware, and more, to surface the vulnerabilities that security teams should prioritize and fix immediately.
Graph based risk visualization
The Wiz Security Graph shows the interconnections between technologies running in your cloud environment with risks that create pathways to a breach. Wiz’s comprehensive analysis engine performs CSPM, KSPM, CIEM, DSPM, and other scans to find critical risks. Security teams can query complex workloads and risk relationships across their cloud environment on the Security Graph.
