Wiz Unveils AI Development Security Controls and CI/CD Risk Visibility
Summary
Wiz recapped new capabilities for securing AI-driven development, including AI and IaC inventories, IDE guardrails for code and agent risks, remediation through coding agents, and CI/CD pipeline risk monitoring.
Key points
- Wiz AI-BOM inventories AI frameworks, models, and IDE extensions to show how AI tools interact with proprietary data.
- IaC Inventory links infrastructure-as-code modules to deployments and live cloud resources, highlighting drift and potential blast radius.
- Wiz Code plugins for Claude Code and Cursor use pre-commit hooks to flag secrets, IaC misconfigurations, vulnerabilities, and weaknesses.
- New SAST rules target risks such as prompt injection, insecure model outputs, and unsafe agent behavior.
- Wiz Skills let coding agents retrieve issues from the Wiz Security Graph and apply fixes in the IDE using the Wiz Green Agent.
- Wiz models CI/CD pipelines as Security Graph assets and surfaces risky configurations, excessive permissions, and AI-agent prompt-injection risks; CI-BOM inventories third-party actions.
Article Details
- Event Type
- Wiz announced new security capabilities for AI-native software development, including AI-BOM and IaC Inventory visibility, AI IDE plugins and remediation workflows, and CI/CD pipeline risk monitoring with CI-BOM inventory.
- Impact
- The capabilities are intended to help teams identify AI-related risks, hardcoded secrets, IaC misconfigurations, vulnerabilities, and insecure CI/CD configurations earlier; trace infrastructure and pipeline dependencies; prioritize potential impact; and remediate findings. The article reports product announcements and intended benefits, not a specific incident or realized customer impact.
Vendors
Products
Claude CodeAt Google Cloud Next, we announced Wiz Code plugins for AI native IDEs like Claude Code and Cursor, embedding security directly into agentic development workflows. Using pre-commit hooks, teams can catch hardcodedCursorinventories AI frameworks, models, and IDE extensions including Gemini Code Assist, GitHub Copilot, and Cursor, giving security teams a living map of how AI tools interact with their data. Gemini Code Assistan AI-BOM which automatically inventories AI frameworks, models, and IDE extensions including Gemini Code Assist, GitHub Copilot, and Cursor, giving security teams a living map of how AI tools interact with theirGitHub Copilotautomatically inventories AI frameworks, models, and IDE extensions including Gemini Code Assist, GitHub Copilot, and Cursor, giving security teams a living map of how AI tools interact with their data. IaC InventoryWiz AI-BOM gives security teams a living, breathing map of how AI frameworks interact with their proprietary data.To support platform and DevOps teams, the IaC Inventory provides a unified view of how code becomes cloud.Wiz AI-BOMWiz AI-BOM gives security teams a living, breathing map of how AI frameworks interact with their proprietary data.To support platform and DevOps teams, the IaC Inventory provides a unified view of how code becomes cloud.Wiz CodeWiz Code Week was the first step in that direction. Alongside limited edition giveaways, our team was busy shipping new capabilities to help secure AI-driven development. In this post we recap what we launched to giveWiz Code pluginsAt Google Cloud Next, we announced Wiz Code plugins for AI native IDEs like Claude Code and Cursor, embedding security directly into agentic development workflows. Using pre-commit hooks, teams can catch hardcodedWiz Green AgentGraph and apply fixes natively in the IDE as a simple command. Remediations are powered by the Wiz Green Agent, which uses full code-to-cloud context to generate precise fixes grounded in actual code, soWiz Security Graphremediate security findings faster. They allow coding agents to pull active issues from the Wiz Security Graph and apply fixes natively in the IDE as a simple command. Remediations are powered by the Wiz GreenWiz SkillsFinally, Wiz Skills help developers remediate security findings faster. They allow coding agents to pull active issues from the Wiz Security Graph and apply fixes natively in the IDE as a simple command. Remediations