cyber.hendryadrian.com
Security News · wiz.io

Wiz Launches General Availability of On-Premises Workload Scanner

· Original article ↗

Summary

Wiz says its Sensor Workload Scanner is generally available for on-premises VMware, bare-metal and self-hosted Kubernetes workloads, extending its risk visibility, runtime threat detection and attack-path analysis across hybrid environments.

Key points

  • The scanner adds workload scanning for on-premises VMware, bare-metal and self-hosted Kubernetes environments.
  • Wiz says its infrastructure connectors use native vSphere and Kubernetes APIs to identify assets, vulnerabilities, identities and misconfigurations.
  • The platform correlates workload and infrastructure findings to surface exposure, secrets, sensitive data and attack paths.
  • Runtime validation checks whether vulnerable packages are loaded and running; the sensor also supports real-time threat detection.
  • Wiz says teams can ingest findings from existing on-premises scanners and use external scanning to identify internet-exposed servers.
  • The announcement also describes automated attacker-path simulation, alert investigation and remediation workflows.

Article Details

Event Type
General availability announcement for Wiz Sensor Workload Scanner and an expanded hybrid-cloud security operating model.
Impact
Wiz says the offering provides workload scanning, risk correlation, runtime validation, attack-surface management, and runtime threat detection for on-premise environments alongside cloud environments. The article describes these capabilities but reports no specific customer impact or incident.

Vendors

WizCloud Security teams have been able to leverage the high-context and the graph-based clarity of Wiz to prioritize their work. Meanwhile, on-premise security teams often manage entirely different stacks and

Products

Blue Agenthigh-fidelity alerts - providing forensics collection and an AI-powered initial investigation with the Blue Agent so your team isn't starting from scratch.ESXicomprehensive view of your on-premise assets. This goes deeper than a simple scan by identifying ESXi vulnerabilities, local identities, and cluster misconfigurations. These relationships are then mappedSensor Workload ScannerToday, with the GA of our Sensor Workload Scanner, Wiz is bringing the same risk visibility we provide for teams in the cloud to security teams anywhere. Whether a workload runs in the cloud or on on-premise VMware,Unified Vulnerability Managementcustomers can also ingest findings from their existing on-premise scanners into Wiz using Unified Vulnerability Management (UVM) to centralize their risk strategy.VMwarefor teams in the cloud to security teams anywhere. Whether a workload runs in the cloud or on on-premise VMware, bare metal, or a self-hosted Kubernetes cluster, you now have one source of truth and a unified riskWiz Red AgentTo go even further, the Wiz Red Agent can automatically simulate how an attacker would actually move through your environment - testing whether an exposed server is not just reachable, but truly exploitable, so yourWiz Runtime Sensorsensitive data which hosts a container with a vulnerability that is validated in runtime by the Wiz Runtime Sensor.Integrated Attack Surface Management: Understanding internal risk is only half the battle.Wiz Security GraphThe on-premise environment is no longer a silo. It is part of the Wiz Security Graph. Ready to see how it works? Join us on our upcoming webinar in July to see the Workload Scanner in action and you can learn more aboutWiz WorkflowsFrom there, remediation playbooks can be triggered automatically using Wiz Workflows, turning a detected threat into a resolved one without manual intervention.

Related Articles