Wiz Makes API Security Posture Management Generally Available
Summary
Wiz announced general availability of API Security Posture Management, which discovers cloud APIs, assesses exposure and exploitability, maps risks to cloud resources and sensitive data, and provides remediation guidance.
Key points
- Wiz says its service continuously discovers APIs through cloud integrations, runtime traffic analysis, and external attack surface scanning, including shadow and zombie APIs.
- The product assesses public exposure and dynamically tests APIs to validate exploitability; its Red Agent can test for risks including Broken Object Level Authorization.
- Wiz maps API endpoints, cloud resources, vulnerabilities, and sensitive data in its Security Graph to identify high-risk attack paths.
- The service provides contextual remediation guidance and supports automated workflows, including triggering a Terraform patch through a coding agent.
Article Details
- Event Type
- Wiz announced the general availability of Wiz API Security Posture Management (API SPM).
- Impact
- The product is intended to help security teams discover APIs, assess exploitability, prioritize API-related attack paths involving cloud resources and sensitive data, and remediate findings. The article reports a product release, not a security incident or confirmed breach.
People
Vendors
Products
Wiz API Security Posture Management (API SPM)We’re excited to announce that Wiz API Security Posture Management (API SPM) is now generally available — helping security teams remove API blind spots, identify exploitable APIs, and effectively mitigate the risk of anWiz ASM for APIsAssess API Exploitability with Wiz ASM for APIsWiz Green AgentWiz Red AgentFor teams that want to go deeper, the Wiz Red Agent takes API risk assessment even further. By actively testing APIs the way a real attacker would, Red Agent dramatically expands coverage — enabling teams to test for aWiz Security GraphBy unifying API and cloud context in the Wiz Security Graph, and layering in additional context including exposure, vulnerabilities, and access to sensitive data, Wiz pinpoints the risks that could realistically lead to