Wiz and HackerOne Integration Adds Cloud Context to Security Findings

· Original article ↗

Summary

Wiz and HackerOne announced an integration that brings penetration-test and bug-bounty findings into Wiz, linking exploitability to cloud infrastructure, identities, data flows, and remediation workflows.

Key points

  • HackerOne findings appear in Wiz as Attack Surface findings, with severity, proof of concept, and remediation guidance.
  • Hosts associated with HackerOne programs are imported into Wiz Attack Surface Management and scanned automatically.
  • Wiz’s Security Graph maps related infrastructure, identities, and data flows to help teams assess a finding’s broader impact.
  • Finding triage, researcher communication, and lifecycle management remain in HackerOne; teams can use Wiz to understand impact and coordinate remediation.
  • Wiz Workflows can route findings to owners, while Wiz Boards can track remediation progress.

Article Details

Event Type
Integration announcement connecting HackerOne findings with Wiz cloud security context.
Impact
HackerOne penetration-test and bug-bounty findings appear in Wiz as Attack Surface findings with severity, proof of concept, and remediation guidance. Associated hosts can be imported into Wiz Attack Surface Management and scanned, helping teams map infrastructure, identities, and data flows to assess potential impact and prioritize remediation. Finding triage and lifecycle management remain in HackerOne.

People

Vendors

Products

Related Articles