Wiz and Infosys Outline an MCP-Based Agentic Cloud Security Architecture

Summary
Wiz and Infosys describe a reference architecture using MCP and specialized agents to investigate cloud risks and propose remediation, with human approval required for high-impact actions.
Key points
- The proposed architecture connects Wiz Security Graph context to Infosys Cyber Next through the Wiz Remote MCP Server.
- Discovery, Investigation, and Remediation agents handle signal detection, impact analysis, and remediation proposals, respectively.
- The example workflow identifies a publicly exposed S3 bucket containing sensitive data, enriches the finding with ownership context, and proposes restricting access.
- A human security engineer reviews and approves high-impact remediation before an approved cloud function is invoked.
- The article recommends audit logging and scoped permissions, with Discovery and Investigation agents read-only and Remediation limited to pre-approved functions.
- The authors describe this as an emerging operational pattern, not a fully autonomous security model.
Article Details
- Topic
- Reference architecture for agentic cloud security operations using Wiz MCP and Infosys Cyber Next
Vendors
InfosysIn this reference architecture, Infosys Cyber Next, powered by Infosys Topaz Fabric, serves as the central orchestration layer for this architecture. It unifies observability to build a shared security context, enablingWizfor agentic cloud security operations. Specifically, it illustrates how standardized security context from Wiz, AI-driven agents, and orchestration platforms can work together to support faster investigation and
Products
Infosys Cyber NextIn this reference architecture, Infosys Cyber Next, powered by Infosys Topaz Fabric, serves as the central orchestration layer for this architecture. It unifies observability to build a shared security context, enablingInfosys Topaz FabricIn this reference architecture, Infosys Cyber Next, powered by Infosys Topaz Fabric, serves as the central orchestration layer for this architecture. It unifies observability to build a shared security context, enablingWiz Remote MCP Serverarchitecture, the Wiz Security Graph provides deep, contextual insight into cloud risk, while the Wiz Remote MCP Server exposes that context through a standardized, AI‑friendly interface. The Infosys Cyber NextWiz Security GraphIn this reference architecture, the Wiz Security Graph provides deep, contextual insight into cloud risk, while the Wiz Remote MCP Server exposes that context through a standardized, AI‑friendly interface. The Infosys
