Wiz Cloud

Wiz Cloud addresses the pervasive challenge of visibility and risk management in complex cloud environments by offering a unified, agentless cloud security platform. This platform connects to your cloud environment via API connectors, allowing for rapid deployment and comprehensive visibility within minutes.

The technical architecture of Wiz Cloud is built around the Wiz Security Graph, which provides context-driven insights into critical exposures and attack paths. It integrates various security functions, including Cloud Security Posture Management (CSPM), Vulnerability Management, Secure Cloud Identities (CIEM), and Container & Kubernetes Security. This unified approach eliminates the need for multiple siloed tools, offering a single pane of glass to manage cloud security across different layers and workloads, such as VMs, serverless containers, and containers.

Operationally, Wiz Cloud prioritizes risk reduction by identifying toxic combinations of risks, including misconfigurations, vulnerabilities, public exposure, and excessive permissions. It enables self-service risk management for developers through high-fidelity alerting, automated remediation workflows, and role-based segmentation of the cloud environment. The platform also supports Infrastructure as Code (IaC) scanning, validating against over 1,000 rules for various IaC tools like Terraform and CloudFormation, and detects drift between code and cloud resources.

Key operational considerations include the platform's ability to scale, with some users noting that while it provides immediate visibility, the integration and data consolidation can be extensive. The Wiz Integration (WIN) platform further enhances this by allowing bi-directional flow of security data and integrating with other security solutions to improve workflow orchestration and ROI.

Technically, Wiz Cloud offers sub-minute granularity in monitoring and real-time threat detection through its Wiz Sensor, which blocks cloud threats in real-time. However, the cost of data retention and the complexity of managing multi-cloud environments can be significant. The platform's focus on proactive risk mitigation and automated remediation steps helps in reducing the effort to find and remediate risks, with some users reporting a 10x higher efficiency in risk management.