Wiz and HackerOne Integration Adds Cloud Context to Security Findings

Summary
Wiz and HackerOne announced an integration that brings penetration-test and bug-bounty findings into Wiz, linking exploitability to cloud infrastructure, identities, data flows, and remediation workflows.
Key points
- HackerOne findings appear in Wiz as Attack Surface findings, with severity, proof of concept, and remediation guidance.
- Hosts associated with HackerOne programs are imported into Wiz Attack Surface Management and scanned automatically.
- Wiz’s Security Graph maps related infrastructure, identities, and data flows to help teams assess a finding’s broader impact.
- Finding triage, researcher communication, and lifecycle management remain in HackerOne; teams can use Wiz to understand impact and coordinate remediation.
- Wiz Workflows can route findings to owners, while Wiz Boards can track remediation progress.
Article Details
- Event Type
- Integration announcement connecting HackerOne findings with Wiz cloud security context.
- Impact
- HackerOne penetration-test and bug-bounty findings appear in Wiz as Attack Surface findings with severity, proof of concept, and remediation guidance. Associated hosts can be imported into Wiz Attack Surface Management and scanned, helping teams map infrastructure, identities, and data flows to assess potential impact and prioritize remediation. Finding triage and lifecycle management remain in HackerOne.
People
Vendors
HackerOneToday, we're excited to announce our integration between HackerOne and Wiz. HackerOne findings now appear directly in Wiz, bringing together proven exploitability and cloud context on the Wiz Security Graph.WizToday, we're excited to announce our integration between HackerOne and Wiz. HackerOne findings now appear directly in Wiz, bringing together proven exploitability and cloud context on the Wiz Security Graph.
Products
Wiz Attack Surface Management (ASM)visibility: From there, hosts associated with your HackerOne programs are imported into Wiz Attack Surface Management (ASM) and scanned automatically, connecting them to the Security Graph and mapping theWiz BoardsSecurity leaders: Get confidence that validated findings are driving real remediation, not sitting in a backlog, by tracking their burn down with Wiz Boards.Wiz Security GraphToday, we're excited to announce our integration between HackerOne and Wiz. HackerOne findings now appear directly in Wiz, bringing together proven exploitability and cloud context on the Wiz Security Graph.Wiz WorkflowsSecurity teams: Gain visibility into the full blast radius of exploitable risk, making it easy to prioritize and route findings to the right owners for remediation through Wiz Workflows.
