Wiz Makes Penetration Test Findings Management Generally Available

Summary
Wiz says its platform can consolidate penetration-test findings from audits, bug bounties, red-team exercises, PDFs, and AI scanners, map them to cloud resources, and track ownership and remediation.
Key points
- The GA feature brings penetration-test findings from multiple sources into the Wiz platform.
- Wiz correlates findings with cloud context, including exposure, privileges, sensitive data, and potential attack paths.
- AI can parse uploaded PDF reports and extract findings, severity, evidence, reproduction steps, and affected assets.
- Mika AI supports creating findings from conversation or unstructured text and mapping them to cloud resources.
- An MCP integration can import, normalize, deduplicate, and map findings from external AI scanning tools.
- Wiz says its Green Agent can identify owners, suggest code fixes, and trigger workflows in tools such as Jira, Slack, ServiceNow, and GitHub.
Article Details
- Event Type
- Product availability announcement: Wiz Penetration Test Findings became generally available.
- Impact
- The release enables security teams to consolidate penetration-test findings from sources such as bug bounties, audits, red-team exercises, and AI scanners in the Wiz platform. Findings can be correlated with cloud context, prioritized, assigned, tracked against remediation SLAs, and supported with AI-assisted parsing and remediation workflows.
Vendors
Products
Green AgentCoupled with Mika AI triage (to deduplicate results across tools) and the Green Agent (for automated remediation guidance), teams can enforce remediation SLAs and close the loop on validated exposure faster than ever.Mika AICoupled with Mika AI triage (to deduplicate results across tools) and the Green Agent (for automated remediation guidance), teams can enforce remediation SLAs and close the loop on validated exposure faster than ever.Wiz Penetration Test FindingsWe are excited to share that the Wiz Penetration Test Findings is now Generally Available (GA), giving offensive security teams a single home for all pen-test results- unifying findings from bug bounties, third-partyWiz Security Graphdatabase containing sensitive customer data. By mapping pen-test findings directly onto the Wiz Security Graph, Wiz correlates human-validated exploits with real-world context - external network exposure,