cyber.hendryadrian.com
Security News · wiz.io

Wiz Adds Image-Migration Features to Help Teams Harden Containers Against AI-Era Threats

· Original article ↗

Summary

Wiz says WizOS hardened container images reduce CVEs and image size, and announces tools to prioritize migrations and guide fixes through AI coding agents. Secure Architecture Opportunities is in public preview; related features are generally available.

Key points

  • Wiz reports its tests found a 94% median reduction in CVEs, plus average reductions of 48% in image size and package count, compared with equivalent open-source images.
  • WizOS images are built from source in an isolated, hardened pipeline, signed with cryptographic provenance, and rebuilt daily. Wiz says it targets remediation SLAs of 7 days for critical CVEs and 14 days for high- and medium-severity CVEs.
  • Secure Architecture Opportunities groups WizOS migration options by image type and presents related vulnerabilities, security issues, and estimated migration effort; it is in public preview.
  • The WizOS Migration Skill can recommend and apply image swaps through an AI coding agent, using Dockerfile context.
  • Wiz Green Agent can recommend a WizOS image for a container finding and open a repository issue with remediation context for a coding agent.
  • Wiz says teams can use registry caching or mirroring and update manifests or daily CI pipelines to adopt newly patched images.

Article Details

Event Type
Wiz announced updates and new capabilities for WizOS hardened container images, including migration planning, AI coding-agent image swaps, and remediation guidance through Wiz Green Agent.
Impact
The capabilities are intended to reduce container vulnerabilities and attack surface, mitigate software supply-chain risk, and accelerate remediation. Wiz reports that testing found a 94% median reduction in CVEs, a 48% average reduction in image size, and a 48% average reduction in package count compared with equivalent open-source image variants. Secure Architecture Opportunities is in public preview; the WizOS Migration Skill and WizOS recommendations in Wiz Green Agent are generally available.

Vendors

Wizto be fixed. Container base images are a significant and often underestimated factor in both. According to Wiz research, base images account for 39% of critical and high severity CVE findings on production containers.

Products

Wizto be fixed. Container base images are a significant and often underestimated factor in both. According to Wiz research, base images account for 39% of critical and high severity CVE findings on production containers.Wiz Green Agenttime on instances that are unreachable. Wiz further accelerates remediation efforts through the Wiz Green Agent, which leverages the Wiz security graph and code-to-cloud traceability to provide step by stepWizOSthat organizations standardize on hardened components and base images to reduce constant patching. WizOS container images provide this minimal, hardened, continuously patched base. In this post, we go deeper on

Related Articles