cyber.hendryadrian.com
Security News · wiz.io

Wiz Puts AI Code Scans at the Center of Its Application Security Approach

· Original article ↗

Summary

Wiz outlines a layered application-security strategy combining traditional SAST, AI code analysis, and deeper scans, with runtime context and agents for validating vulnerabilities and guiding remediation. Its AI Code Scans are in private preview.

Key points

  • Wiz recommends prioritizing AI analysis using runtime context to focus on repositories supporting exposed, customer-facing, or sensitive services.
  • Its proposed layered approach combines continuous rules-based SAST, AI scans for semantic flaws, and periodic deep analysis for critical applications.
  • Wiz says its Security Graph correlates code, cloud, identity, runtime, and exposure context, while Red Agent tests findings against live environments.
  • Green Agent is designed to produce remediation plans, identify code owners, and support fixes, including work with AI coding agents.
  • Wiz AI Code Scans are in private preview and will be included with Wiz Code Advanced.

Article Details

Event Type
Wiz announced AI Code Scans, an agentic code-analysis capability for identifying complex vulnerabilities, now in private preview.
Impact
The capability is intended to help security teams identify and prioritize vulnerabilities in code, validate exploitability, and accelerate remediation. The article describes product capabilities and intended benefits; it reports no specific breach, victim, or realized security impact.

Vendors

Wizexplore why traditional scanning must evolve, how to prioritize your most critical repositories, and how Wiz leverages native AI Code Scans, frontier models, and agentic workflows to ensure that fixing

Products

Claude CodeIt can also work alongside AI coding agents such as Claude Code and CodeMender to help automate the path from validated finding to implemented fix in a truly agentic workflow.CodeMenderIt can also work alongside AI coding agents such as Claude Code and CodeMender to help automate the path from validated finding to implemented fix in a truly agentic workflow.Wiz CodeEstablish the Baseline Radar: Deploy continuous deterministic scanning across all repositories via Wiz Code and the unified policy engine to catch pattern-based vulnerabilities at scale.Wiz Code Advancedinto the classic AppSec workflows your team already relies on. AI Code Scans will be included with Wiz Code Advanced, extending the value of the existing subscription with contextual code analysis for defenders.Wiz Green AgentWhen the Red Agent validates a critical attack path, the Wiz Green Agent immediately takes over to automate the remediation lifecycle. Using the full context of your code, pipeline, cloud, and runtime environment, theWiz Red AgentThe Wiz Red Agent uses the context of AI Code Scans and autonomously tests them end-to-end against your live environment, so teams can not only identify vulnerabilities in code but also confirm their exploitability.    Wiz Security Graphexternal scanners your teams already use. Every finding, regardless of source, is enriched on the Wiz Security Graph so teams can operationalize AI Threat Readiness under a consistent workflow. Wiz Service Catalogin a vacuum, organizations must understand their real-world runtime architecture. Using the Wiz Service Catalog and Code-to-Cloud mapping, teams can connect deployed resources directly to their source code.Wiz Unified Policy Engine

Related Articles