Wiz Launches Automated Subdomain Reconnaissance for Its Attack Surface Management Platform
Summary
Wiz says its ASM platform now automates subdomain discovery and combines external reconnaissance with cloud, code, and runtime context to identify exposed assets and risks. The article also describes its Red Agent for finding logic-based vulnerabilities.
Key points
- Wiz announced automated reconnaissance to discover subdomains associated with an organization’s root domains.
- The company says ASM combines external scanning with cloud and code context to identify shadow assets and validate exposure.
- Other discovery inputs described include API endpoints, runtime sensor telemetry, imported scanner assets, and custom targets.
- Wiz ASM is described as detecting known CVEs, misconfigurations, weak credentials, and exposed secrets or sensitive data.
- Wiz says its Red Agent uses AI to reason through application behavior and look for complex risks such as authorization bypasses and logic flaws.
Article Details
- Event Type
- Wiz announced the launch of automated reconnaissance in Wiz ASM, enabling continuous discovery of an organization’s subdomains and attack-surface exposures.
- Impact
- The capability is intended to improve visibility into known and shadow assets and help organizations identify exposed assets and exploitable risks. The article describes product capabilities and intended benefits, not a reported security incident or confirmed customer impact.
Vendors
Products
Wiz Attack Surface Management (ASM)vulnerabilities faster than humanly possible. To help teams defend against AI threats, our goal with Wiz ASM is simple: Wiz ASM for any environment, any risk, everywhere. Wiz tackles this rapidly expanding modernWiz CodeCode Repositories: Validates code repositories for external exposure from repositories detected by Wiz Code.Wiz Red AgentDiscovering unknown, logic-based risks: Wiz Red Agent