AWS KMS or AWS CloudHSM: Choose the right key management solution
Choosing the right cryptographic key management service on Amazon Web Services (AWS) starts with understanding the difference between AWS Key Management Service (AWS KMS) and…
Category: CloudSecurity
Rethinking Scanning for the AI Era: Wiz’s Agentic Code Security System
Executive Summary The recent leap in model capabilities for security has fundamentally changed what is possible in application security. AI is highly capable at uncovering…
Secure your npm and pip package updates in Amazon Linux
If you use and install packages from npm or PyPI, the first hours after a package is published are the riskiest because scanners can’t analyze…
Extend Amazon Inspector SBOM Generator with Plugins
Amazon Inspector is an automated vulnerability management service that continually scans Amazon Web Services (AWS) workloads for software vulnerabilities. The vulnerability management capabilities of Amazon…
Dogfooding at scale: migrating cdnjs to Cloudflare’s Developer Platform
As of June 23, 2026, cdnjs, one of the Internet’s busiest open-source CDNs, is running exclusively on Cloudflare’s Developer Platform. Along the way, cdnjs surfaced…
CosmosEscape: Taking Over Every Azure Cosmos DB
Wiz Research uncovered CosmosEscape, a critical vulnerability in Azure’s flagship database service, Azure Cosmos DB, via its Gremlin API. The vulnerability could have been exploited…
The Cloud Hunting Games CTF: Test Your Cloud IR Skills
What happens when a startup with a promising secret soda formula gets hit with a data extortion threat? That’s the scenario behind our latest cloud…
Deployed on AWS: Wiz and AWS Marketplace
We’re excited to announce that Wiz has been awarded the “Deployed on AWS” badge—signaling that the Wiz Cloud Security Platform is hosted on AWS, helping…
We’re open sourcing our privacy proxy CLI
Debugging privacy-preserving protocols is hard. Oblivious HTTP has several different steps across four different parties, not to mention binary HTTP encoding and details spread across…
The Wiz Red Agent is Now Generally Available
We are excited to announce that Red Agent is now generally available (GA). Customers have rapidly adopted our AI attacker to close the widening gap…
Wiz’s First 6 Months as Part of Google | Assaf Rappaport
When it was first announced that Wiz was joining Google, we began one of the most significant chapters in our history. Nearly 6 months since…
Report Highlights: 2025 Cloud Data Exposure Analysis
As cloud adoption continues to accelerate, so do the questions facing security teams: Where is our sensitive data? Who can access it? And are we…