Wiz Announces General Availability of Its Runtime Sensor for Windows

Summary
Wiz has launched its Runtime Sensor for Windows, offering runtime threat monitoring, response, and vulnerability validation for Windows workloads across cloud and hybrid environments.
Key points
- The sensor extends Wiz runtime monitoring to Windows virtual machines and Kubernetes nodes, alongside existing Linux coverage.
- Wiz says the sensor correlates Windows runtime events with cloud telemetry to provide context for investigations.
- The product supports custom detection rules, automatic termination of processes matching configured policies, and capture of logs and suspicious files.
- Runtime validation identifies vulnerabilities in libraries and packages loaded into memory, helping teams prioritize remediation.
- Wiz says it uses a minimal kernel module, Rust implementation, and resource limits intended to reduce stability and performance impact.
Article Details
- Event Type
- General availability announcement for the Wiz Runtime Sensor for Windows
- Impact
- The sensor extends Wiz runtime monitoring, threat detection and response, and runtime vulnerability validation to Windows workloads. It correlates Windows runtime events with cloud-native telemetry and supports automated response; the article describes product capabilities, not a reported security incident or observed customer impact.
Vendors
Products
Wiz Defendaccess to cloud instance metadata credentials (IMDS), it does more than just fire an alert. Through Wiz Defend, these workload-layer signals from the sensor are automatically correlated with cloud-native telemetryWiz Runtime Sensor for WindowsToday, we are thrilled to announce the General Availability of the Wiz Runtime Sensor for Windows. This milestone brings the same unified protection Wiz customers rely on for Linux and Container workloads to the Windows
