Wiz Adds Automated DISA STIG Assessments for Amazon Linux 2023 and Windows Server 2025
Summary
Wiz says its agentless Host Configuration Rules now assess DISA STIGs for Amazon Linux 2023 and Windows Server 2025, automating many checks while flagging rules that still require manual validation.
Key points
- Wiz says the frameworks are available to Wiz for Government customers in its Compliance Posture page.
- The assessment checks host configuration against individual STIG rules and reports pass/fail results per instance.
- Amazon Linux 2023 coverage automates most STIG rules; some runtime or process-level checks remain manual.
- Windows Server 2025 support is rolling out with an initial set of automated rules, and coverage is planned to expand.
- Assessments run continuously across matching instances in connected cloud accounts, according to Wiz.
- Teams can filter findings by severity and generate reports or trigger ticketing and remediation workflows.
Article Details
- Event Type
- Wiz introduced automated assessment for DISA STIG benchmarks covering Amazon Linux 2023 and Microsoft Windows Server 2025.
- Impact
- Wiz customers can continuously assess host configurations against these benchmarks through agentless Host Configuration Rules. The article says most Amazon Linux 2023 rules are automated, while some runtime or process-level checks still require manual validation. Windows Server 2025 support is rolling out with an initial set of automated rules, and coverage is expected to expand. The frameworks are available to Wiz for Government customers.
Vendors
AmazonFor federal agencies and defense contractors operating in AWS GovCloud, Amazon Linux 2023 and Windows Server 2025 are rapidly becoming the standard operating systems for cloud workloads. But there's a gap: while DISAMicrosoftWiz now supports automated assessment for the DISA STIG Amazon Linux 2023 and DISA STIG Microsoft Windows Server 2025 benchmarks through Host Configuration Rules (HCR) — Wiz's agentless capability for evaluatingWizWhat Wiz delivers: automated STIG assessment, ahead of official SCAP content
Products
Amazon Linux 2023For federal agencies and defense contractors operating in AWS GovCloud, Amazon Linux 2023 and Windows Server 2025 are rapidly becoming the standard operating systems for cloud workloads. But there's a gap: while DISAWindows Server 2025For federal agencies and defense contractors operating in AWS GovCloud, Amazon Linux 2023 and Windows Server 2025 are rapidly becoming the standard operating systems for cloud workloads. But there's a gap: while DISAWiz CloudRequest a demoWiz for Government is FedRAMP High authorized, delivering unified cloud security across Wiz Cloud, Wiz Code, and Wiz Defend for federal agencies and defense organizations.Wiz CodeRequest a demoWiz for Government is FedRAMP High authorized, delivering unified cloud security across Wiz Cloud, Wiz Code, and Wiz Defend for federal agencies and defense organizations.Wiz DefendRequest a demoWiz for Government is FedRAMP High authorized, delivering unified cloud security across Wiz Cloud, Wiz Code, and Wiz Defend for federal agencies and defense organizations.