Wiz Highlights AI Security Products and Research Six Months After Joining Google
Summary
Six months after joining Google, Wiz says it has expanded its AI security products, integrations, and research, including autonomous security agents and investigations into vulnerabilities and supply-chain threats.
Key points
- Wiz says nearly 90% of its customers use AI-powered security features and Google Cloud has seen a 45% quarter-over-quarter increase in AI workloads scanned and protected.
- The company says its platform remains multi-cloud and now supports agent development platforms including AWS AgentCore, Gemini Enterprise Agent Platform, Azure Copilot Studio, and Salesforce Agentforce.
- Wiz, Mandiant, and Google DeepMind launched AI Threat Defense; Wiz also introduced Red, Green, and Blue AI agents for testing, remediation, and SecOps tasks.
- Project Atlas, an AI code-scanning system, is intended to power Wiz’s AI code scanning and uses specialized agents and models for different tasks.
- Wiz highlighted research into flaws affecting AI coding assistants and Amazon Q Developer, a malicious npm supply-chain campaign, cryptocurrency-targeting threats, and a GitHub RCE vulnerability.
- The company also described research into the Axios npm supply-chain compromise and published cloud, software-development lifecycle, and AI security reports.
Article Details
- Event Type
- Wiz’s six-month milestone after joining Google, highlighting expanded products, integrations, AI security capabilities, and security research.
- Impact
- Wiz reports that nearly 90% of its customers use AI-powered security features and that Google Cloud saw a more than 45% quarter-over-quarter increase in AI workloads scanned and protected by its security platform. The article also describes research discoveries and product launches, but provides no quantified incident impact.
CVE
Malware
Vendors
AnthropicNetwork – which now counts 300 integrations in its open ecosystem, including recent additions like Anthropic, Cloudflare, Databricks, Lovable, OpenAI, and Vercel – and our ongoing co-sell and marketplaceGoogleWhen it was first announced that Wiz was joining Google, we began one of the most significant chapters in our history. Nearly 6 months since the acquisition closed, I’m humbled by all we’ve accomplished … and even moreGoogle DeepMindTogether with Google, we launched AI Threat Defense – which combines the power of Wiz, Mandiant, and Google DeepMind. We have also had the opportunity to work closely with the DeepMind research team behind Gemini Cyber,MandiantTogether with Google, we launched AI Threat Defense – which combines the power of Wiz, Mandiant, and Google DeepMind. We have also had the opportunity to work closely with the DeepMind research team behind Gemini Cyber,OpenAIin its open ecosystem, including recent additions like Anthropic, Cloudflare, Databricks, Lovable, OpenAI, and Vercel – and our ongoing co-sell and marketplace purchasing experiences. Being part of Google CloudRed HatMiasma Supply Chain Attack, a malicious supply chain campaign that compromised over 30 Red Hat Cloud Services npm packages with "Mini Shai-Hulud," a credential-stealing worm targeting developer cloud environments.WizWhen it was first announced that Wiz was joining Google, we began one of the most significant chapters in our history. Nearly 6 months since the acquisition closed, I’m humbled by all we’ve accomplished … and even more
Products
Amazon Q DeveloperAmazon Q Developer Vulnerability, a critical security flaw in the Amazon Q Developer VS Code extension where malicious Git repositories could execute code and steal cloud credentials.AWS AgentCoreCloud Next, we announced support for agent development platforms across the ecosystem, including AWS AgentCore, Gemini Enterprise Agent Platform, Microsoft Azure Copilot Studio, and Salesforce Agentforce. Our goalAxiosAnalysis of Axios NPM Supply Chain Compromise, involving the widely used Axios NPM package library, which threat actors targeted in a social engineering campaign.Gemini CyberDeepMind. We have also had the opportunity to work closely with the DeepMind research team behind Gemini Cyber, and to learn from their expertise as we advance our shared approach to AI security.Gemini Enterprise Agent Platformsupport for agent development platforms across the ecosystem, including AWS AgentCore, Gemini Enterprise Agent Platform, Microsoft Azure Copilot Studio, and Salesforce Agentforce. Our goal is simple: to protectGoogle CloudBeing part of Google Cloud has supercharged us even more than we could have predicted. Today, nearly 90% of Wiz customers are using AI‑powered security features and Google Cloud has seen a more than 45%Microsoft Azure Copilot Studioplatforms across the ecosystem, including AWS AgentCore, Gemini Enterprise Agent Platform, Microsoft Azure Copilot Studio, and Salesforce Agentforce. Our goal is simple: to protect AI development everywhere.Salesforce Agentforceincluding AWS AgentCore, Gemini Enterprise Agent Platform, Microsoft Azure Copilot Studio, and Salesforce Agentforce. Our goal is simple: to protect AI development everywhere.Wiz Integration Networkcore to Wiz, and it is a philosophy that Google shares. Together, we’ve continued to expand the Wiz Integration Network – which now counts 300 integrations in its open ecosystem, including recent additions like
Tools
Blue AgentThe Blue Agent: A SecOps analyst that accelerates threat detection and incident response, running automated containment workflows based on high-fidelity AI triage.Green AgentThe Green Agent: Built to dramatically reduce MTTR by automatically tracing vulnerabilities back to the source code and opening secure pull requests to fix them.Project AtlasProject Atlas is another strong example of how we are turning cutting-edge AI innovation into meaningful products for defenders. Atlas, an AI code scanning system, offers high precision and cost efficiency by relying onRed AgentThe Red Agent: Our AI-powered pentester excels at uncovering complex, exploitable risks in the wild. The Red Agent POV series tells how it exposed an entire airline booking database in fifteen minutes and broke a B2BWiz MCPuse cases in areas like Post-Quantum Cryptography and cloud cost management. Lastly, the introduction of Wiz MCP and enhanced Workflows enables organizations to build custom security agents and assistants.