Wiz Launches Browser Extension for Cloud and Code Security Insights

Summary
WizExtend adds security context to cloud consoles and code repositories, linking cloud resources to IaC, surfacing findings, generating remediation options, and checking live environments for exposure to CVEs.
Key points
- The browser extension displays security findings and resource-specific context while engineers work in cloud consoles and code repositories.
- It links live cloud resources to the IaC code that created them and can show runtime status while developers edit code.
- MikaAI can answer questions about a resource and generate least-privilege policies based on cloud events.
- In repositories, WizExtend surfaces CVEs, exposed secrets, SAST findings, and IaC misconfigurations, and can generate a pull request with a fix.
- When viewing public CVE information, users can query their live cloud environment to identify potentially vulnerable assets and their severity.
- Wiz says the extension is available for Google Chrome and Microsoft Edge.
Article Details
- Event Type
- Wiz announced WizExtend, a browser-based security extension that integrates cloud security insights and remediation workflows into developer tools.
- Impact
- WizExtend provides contextual risk findings across cloud consoles and code repositories, links cloud resources to their source IaC, and supports remediation actions such as generating fixes and pull requests. The article describes a product announcement and does not report a security incident or realized harm.
Vendors
Products
MikaAIIf they want to investigate further, engineers can also ask MikaAI for additional information directly via WizExtend. Because MikaAI knows the context of the resource in the browser your team member is using, they canWiz Security GraphOne click, and WizExtend becomes your instant CVE checker – with MikaAI and the Wiz Security Graph powering your insights.WizExtendWizExtend bridges that gap. Instead of toggling between tools, WizExtend overlays security insights right on top of your cloud and dev portals. It’s a fully interactive security layer that helps development and security