Wiz and Infosys Outline an MCP-Based Agentic Cloud Security Architecture

· Original article ↗

Summary

Wiz and Infosys describe a reference architecture using MCP and specialized agents to investigate cloud risks and propose remediation, with human approval required for high-impact actions.

Key points

  • The proposed architecture connects Wiz Security Graph context to Infosys Cyber Next through the Wiz Remote MCP Server.
  • Discovery, Investigation, and Remediation agents handle signal detection, impact analysis, and remediation proposals, respectively.
  • The example workflow identifies a publicly exposed S3 bucket containing sensitive data, enriches the finding with ownership context, and proposes restricting access.
  • A human security engineer reviews and approves high-impact remediation before an approved cloud function is invoked.
  • The article recommends audit logging and scoped permissions, with Discovery and Investigation agents read-only and Remediation limited to pre-approved functions.
  • The authors describe this as an emerging operational pattern, not a fully autonomous security model.

Article Details

Topic
Reference architecture for agentic cloud security operations using Wiz MCP and Infosys Cyber Next

Vendors

Products

Related Articles