Wiz Outlines Unified Security Coverage for OpenShift Environments
Summary
Wiz describes how its platform covers OpenShift security across posture and compliance, deployment controls, runtime monitoring, and investigations in cloud, hybrid, on-premises, and air-gapped environments.
Key points
- Wiz maps Kubernetes and OpenShift workloads, identities, cloud relationships, exposures, and potential attack paths across environments.
- Its posture management evaluates configurations against security benchmarks and frameworks, and helps prioritize combined risks such as weak RBAC and paths to cloud credentials.
- The Wiz Admission Controller can block deployments that violate policies, including untrusted images, privileged workloads, and improper NodePort exposure.
- The Runtime Sensor monitors processes, network connections, files, system calls, and container activity, and correlates findings with workload and infrastructure context.
- Wiz says its sensor and workload scanner assess running workloads for vulnerabilities, malware, exposed secrets, sensitive data, and host misconfigurations.
- The article describes OpenShift-specific deployment support, including compatibility with Security Context Constraints and namespace-specific UID ranges.
Article Details
- Event Type
- Wiz describes a unified security approach and product capabilities for Red Hat OpenShift environments.
- Impact
- The described capabilities aim to provide visibility, posture and compliance assessment, deployment policy enforcement, and runtime threat detection across cloud, on-premises, hybrid, and air-gapped OpenShift environments. The article reports no specific breach, victim, or realized impact.
Vendors
Products
KubernetesKubernetes clusters face probing attempts within 18 minutes of deployment.OpenShiftOpenShift was built to handle that - hardened by default, compliance-friendly, and designed to run anywhere from public cloud to air-gapped datacenters.Sensor Workload Scannercoverage to on-prem and hybrid OpenShift environments through our Wiz Runtime Sensor and the Sensor Workload Scanner - continuously evaluating running workloads for vulnerabilities, malware, exposed secrets,Wiz Admission ControllerPrevent risk before deployment with Wiz Admission ControllerWiz ForensicsWiz KSPMWiz KSPM continuously evaluates Kubernetes and OpenShift environments against security frameworks and compliance benchmarks - including the CIS Red Hat OpenShift Container Platform Benchmark, PCI DSS, SOC 2, HIPAA, andWiz Runtime SensorWiz extends security coverage to on-prem and hybrid OpenShift environments through our Wiz Runtime Sensor and the Sensor Workload Scanner - continuously evaluating running workloads for vulnerabilities, malware, exposedWiz Security Graphinterrogate Kubernetes and OpenShift APIs to build that map, feeding metadata directly into the Wiz Security Graph. For self-managed OpenShift environments - whether running on VMware, bare-metal, or disconnected