An honest view of Wiz and how it helps Cloud focused organizations

We utilize Wiz for Cloud vulnerability management, its used to detect high fidelity security issues, and configuration changes/drift that can happen over time. Its great because it can be implemented in a way that allows us to see these changes as they happen without fear that something could be changed without centralized visibility. We utilize it in a self service in mind so development teams can utilize the tool to help them remediate their areas issues, while giving security and architecture teams global views.

We have deployed Wiz in is this manner. Adding Wiz through our central account management means we provision it just enough access to make use of the features we want to use are enabled. We can have any new accounts automatically added across our multi cloud environment improving visibility significantly and it can be done with out much assistance from any internal support teams.

We utilize the support graph to help prioritize security issues with in our environment. This helps us to have engineering attack the highest risk issues, and provides some insights into why it thinks this. It uses a combination of different configurations that increase or decrease the risk such as broad account access, external expose etc. These are all very helpful in moving toward remediation.