Wiz Introduces a Unified Platform for Penetration-Test Findings
Summary
Wiz’s public-preview feature centralizes findings from bug bounty programs, external audits, internal tests, and AI assessments, then maps them to cloud resources to support prioritization, ownership, reporting, and remediation tracking.
Key points
- The feature consolidates findings from bug bounty programs, third-party audit reports, internal penetration tests, and AI assessments.
- Wiz says it enriches findings with Security Graph context, including infrastructure, network paths, associated risks, and code-to-cloud mapping.
- The platform can map findings to scanned resources and their owners to help teams prioritize and assign remediation.
- Teams can generate unified reports, track finding status, and set remediation SLAs through posture policies.
- Wiz says Mika AI can triage findings and identify duplicates; its Green Agent offers remediation guidance.
Article Details
- Event Type
- Wiz introduced Penetration Test Findings, a feature in public preview for centralizing penetration-test findings.
- Impact
- The feature brings findings from bug bounty programs, external audits, internal penetration tests, and AI assessments into one place. Wiz says it enriches findings with cloud-resource and ownership context, supports triage and prioritization, and helps teams track remediation.
Vendors
Products
Claude SkillWith the new Claude Skill, you can upload your AI-generated pen-test report directly from Claude and Wiz will create pen-test findings based on the AI-generated report.Green AgentAI-powered remediation agent: Leverage the Green Agent for remediation guidance to identify the most efficient path to remediation, including code-to-cloud mapping and ownership suggestion to quickly address criticalHackerOnethese efforts are scattered across a fragmented landscape: you might be using a bug bounty program like HackerOne, a collection of reports from third-party pen-testers, and internal spreadsheets from manual red-teamMika AIAI-triage: Use Mika AI to triage pen-test findings and identify and remove duplicate findings across external tools and Wiz.Penetration Test FindingsTo solve this, we are excited to introduce Penetration Test Findings in Wiz (now in Public Preview). We are giving offensive security teams a single, unified home for all pen-test results- regardless of their source-Wiz Security Graphunified home for all pen-test results- regardless of their source- enriched with the power of the Wiz Security Graph.