Wiz Makes Blue Agent Cloud Incident Response Tool Generally Available
Summary
Wiz says its Blue Agent is generally available to Wiz Defend customers, with cloud-context investigations, forensic and code analysis, and workflow automation for incident response.
Key points
- The Blue Agent is now generally available to Wiz Defend customers.
- It uses cloud context, runtime signals, and the Security Graph to investigate security findings.
- Forensics capabilities analyze evidence collected by the Wiz Sensor, including scripts, binaries, and other artifacts.
- Code analysis connects runtime behavior to source code, related pull requests, and code owners.
- Wiz Workflows can automate escalation, notifications, or containment playbooks based on investigation verdicts and confidence levels.
Article Details
- Event Type
- Wiz announced the general availability of the Wiz Blue Agent for all Wiz Defend customers.
- Impact
- The agent uses cloud context, forensic evidence, and source-code correlation to investigate suspicious activity and support incident response. With Wiz Workflows, teams can automate actions such as escalating incidents, notifying response teams, or triggering containment playbooks. Wiz says customers are using it to reduce investigation times and improve threat handoffs; no quantified results are provided.
Vendors
Products
Security GraphWiz already brings that context together through the Security Graph, code-to-cloud visibility, and runtime signals. To turn that into action, today we’re announcing the Wiz Blue Agent is now generally available for allWiz Blue Agentcode-to-cloud visibility, and runtime signals. To turn that into action, today we’re announcing the Wiz Blue Agent is now generally available for all Wiz Defend customers. Building on the foundation we introduced atWiz DefendTo turn that into action, today we’re announcing the Wiz Blue Agent is now generally available for all Wiz Defend customers. Building on the foundation we introduced at Wizdom NYC, the Blue Agent now features deeperWiz SensorForensics: When the Wiz Sensor automatically collects a forensics package at the time of detection—capturing scripts, binaries, and artifacts— the Blue Agent instantly analyzes that evidence to uncover the root cause ofWiz WorkflowsWith Wiz Workflows, teams can turn those verdicts into action. Based on verdict and confidence level, they can automatically escalate incidents, notify response teams, or trigger containment playbooks.