The Wiz Red Agent is Now Generally Available

We are excited to announce that Red Agent is now generally available (GA). Customers have rapidly adopted our AI attacker to close the widening gap between traditional security scanners and the speed at which adversaries exploit vulnerabilities using AI.

Its impact was clear during preview:

• Over 10,000 validated critical exploitable risks were discovered by the Red Agent- externally facing risks with no authentication- that, if found by attackers, could have led to a significant impact.

• 70% of organizations that enabled Red Agent discovered a High or Critical vulnerability they were completely unaware of.

• 35% of organizations found their first verified Critical vulnerability within 1 hour of activating scans.

• Proven scale: At its peak, Red Agent scanned 350,000 assets and processed 480B tokens in a single day.

Behind these numbers are our customers transforming how they defend with AI:

The Red Agent for attack surface management and automated penetration testing is incredibly valuable. We didn’t have coverage over infrastructure-related automated pen testing prior to Wiz.

Patrick O’Boyle, Founding security engineer and Head of GRC, Rogo

Red Agent finds what humans miss. It caught critical authorization flaws across services where traditional testing and our bug bounty program came up short. We had continuous AI-powered attack surface testing on our roadmap. Wiz got there first, and did it better than we would have.

Emil Vaagland, Head of Product Security, Vend

The New Reality: Why AI Threat Readiness Matters Now

Attackers are using frontier AI models to scan perimeters, discover zero-days, and weaponize complex application vulnerabilities in hours instead of months. Relying purely on human-paced security workflows against AI-speed adversaries creates a compounding coverage deficit. Staying ahead of this pace requires deploying AI for defense.

Organizations are prioritizing AI Threat Readiness to outpace automated adversaries, yet existing security security scanning has limitations:

• Static scanners miss logic flaws: Traditional tools rely on known CVEs and signature matching. They cannot reason about custom application workflows, broken access controls, or multi-step logic flaws in modern web applications and AI-generated code.

• Manual penetration testing does not scale: Identifying complex business logic vulnerabilities historically required manual testing. These engagements are expensive, take weeks to execute, and offer limited scope.

• Point-in-time testing creates security gaps: A manual pentest or annual audit captures a single snapshot in time. The moment new code ships or an API updates, new unmonitored security gaps open up.

AI Defense with the Red Agent

Red Agent helps teams stay ahead by running continuous, autonomous AI pentesting across custom-built software, vibe-coded applications, and APIs. While traditional scanners match signatures, Red Agent reasons through business logic to uncover unknown vulnerabilities such as OWASP API Top 10 Flaws, logic flaws, authorization bypasses, and more.

The Red Agent Modules

1. Web API Crawler: Uncover shadow APIs

An intelligent AI discovery tool that uses client-side code analysis to map API endpoints across your web applications and uncover hidden APIs. It automatically extracts and analyzes API specifications to understand endpoint structures, parameters, and expected behaviors and identifies unlinked or forgotten APIs that expose your organization to risk.

2. API DAST Attacker: Continuously find  logic-driven vulnerabilities

Continuously uncovers and validates logic-driven exploitable risks by analyzing application behavior rather than following fixed scan patterns and static test cases. It treats target applications as dynamic systems, adapting its strategy in real time to reason about application logic and expose logic-driven risks. It then provides proofs of execution so your team receives verified findings, alongside reproduction steps.

3. Secrets Blast Radius: Validate and test secrets impact

The Red Agent validates the impact of secrets exposed in public websites and APIs, and in public code repositories to test that they are active and determine the exact scope of access they hold. It executes safe, non-disruptive validation checks directly against the respective third-party SaaS provider’s APIs to confirm exploitability and determines the precise scope of permissions.

The Red Advantage

What sets Red Agent apart isn’t just AI speed, it is about it’s deep contextual reasoning and how integrates into your security operations:

• Deep context without manual setup: Red Agent automatically ingests context from different Wiz sources: across API schemas, cloud resources, Runtime Sensor, code repositories, and network layers, and its own AI API Crawler. It being enriched by the Wiz context removes the need to manually configure context, and eliminates blind spots and gives the reasoning engine complete visibility.

• Engineered by Wiz Research: The threat intelligence and expertise of the Wiz Research team is built directly into the harness of the Red Agent, bringing top-tier security research into AI testing.

• Truly continuous discovery: Rather than relying on a fixed schedule against pre-selected target lists, Red Agent continuously discovers and tests both known and unknown applications across your entire footprint by leveraging an up-to-date inventory of your environment from Wiz, removing the need to predefine target groups.

• Automated remediation loop: Paired with Green Agent and Wiz Workflows, Red Agent customers can generate precise fix guidance with the Green Agent and scale response with Wiz Workflows.

Caught in the Wild: Real-World Exploits

The types of risks Red Agent uncovers remain in the shadows for organizations across every industry. Our Red Agent POV series documents how Red Agent identified these logic flaws in live environments across airline, financial, and technology companies:

1. Finding a multi-step attack chain allowing SSRF-to-Local-File-Read

A GCP Cloud Run application restricted input to valid GitHub URLs ([https://github.com/](https://github.com/)…). Red Agent bypassed the path restrictions to read the host’s local filesystem (/proc/self/environ), extracting live GCP service-account credentials and full application source code.

2. Exploiting Broken Object-Level Authorization in an Airline GraphQL API

An airline API generated distinct session tokens for authentication, but downstream GraphQL resolvers failed to validate user roles. Red Agent cycled sequential integer IDs across unprotected resolvers, exposing two years of passenger PII and unlocking controls to modify active flight bookings.

3. The One Boolean That Broke a B2B Platform’s Credit System

A B2B directory gated contact data behind a paid credit system. Red Agent identified an unreferenced request parameter accepted by the backend. Appending the flag returned unmasked phone numbers and emails on free-tier requests, bypassing the core monetization model.

Want to see more?

Get started today, review the docs (login required) or book a live demo with our team. To learn more about the Red Agent findings explore the Red Agent POV blog series.