cyber.hendryadrian.com
Security News · wiz.io

Wiz Brings Code Scanning and Remediation Into AI Coding Workflows

· Original article ↗

Summary

Wiz announced Code plugins and skills that bring security scanning and Green Agent remediation guidance into AI-native IDEs and coding agents, including automated checks at file-save, pre-commit, and pre-push stages.

Key points

  • Wiz Code plugins connect AI coding tools to Wiz security context through the Wiz MCP server and WizCLI.
  • Security teams can send Green Agent remediation plans to coding agents, which can apply fixes and submit pull requests for review.
  • Developers can access active Wiz issues and remediation guidance directly in their IDEs.
  • Scans at file-save, pre-commit, and pre-push stages can flag hardcoded credentials, infrastructure misconfigurations, vulnerable dependencies, and malware in container layers.
  • Findings are warnings by default; teams can configure block mode to stop commits or pushes for critical or high-severity issues.
  • Wiz says the plugins enforce these checks at Git lifecycle boundaries, including when coding agents run autonomously.

Article Details

Event Type
Product launch and integration announcement
Impact
Wiz announced Wiz Code plugins and skills for AI-native IDEs and coding agents, powered by the Wiz MCP server and WizCLI. The integrations provide real-time scanning and remediation guidance for AI-generated code, can surface existing Wiz issues for remediation, and can run scans at development workflow boundaries such as file save, pre-commit, and pre-push. Findings are warnings by default, with an optional block mode for critical or high-severity issues. The announcement describes the capability as intended to help teams identify and fix vulnerabilities before code is committed or deployed.

Vendors

AnthropicThat gap becomes even more urgent when frontier models like Anthropic's Claude Mythos Preview can autonomously discover and exploit zero-day vulnerabilities, collapsing the window between discovery and exploitation fromWizToday, we're bringing Wiz's knowledge directly into AI-native IDEs and coding agents through Wiz Code plugins and skills, powered by the Wiz MCP server and WizCLI. This enables real-time scanning and fixing of

Products

Claude CodeImagine a developer using Claude Code to build a new microservice. As the AI agent generates infrastructure files and application code, the Wiz plugin is already watching. At the natural boundaries of the developmentClaude Mythos PreviewThat gap becomes even more urgent when frontier models like Anthropic's Claude Mythos Preview can autonomously discover and exploit zero-day vulnerabilities, collapsing the window between discovery and exploitation fromGreen AgentWe built the Green Agent so its analysis is available where teams work, so there are two direct ways to take advantage of it.Wiz Attack Surface Management (ASM)IDEs: Using Wiz Code plugins, developers can pull active Wiz issues, including validated issues from Wiz ASM, directly into their IDE.Wiz CodeToday, we're bringing Wiz's knowledge directly into AI-native IDEs and coding agents through Wiz Code plugins and skills, powered by the Wiz MCP server and WizCLI. This enables real-time scanning and fixing ofWiz MCP serverdirectly into AI-native IDEs and coding agents through Wiz Code plugins and skills, powered by the Wiz MCP server and WizCLI. This enables real-time scanning and fixing of AI-generated code inside AI-native IDEs andWizCLIAI-native IDEs and coding agents through Wiz Code plugins and skills, powered by the Wiz MCP server and WizCLI. This enables real-time scanning and fixing of AI-generated code inside AI-native IDEs and copilots.

Related Articles