Wiz Makes Unified Vulnerability and Attack Surface Management Generally Available
Summary
Wiz announced general availability of Exposure Management, combining tools to ingest and contextualize security findings, validate external exposure and exploitability, and prioritize remediation across cloud, on-prem, code, AI and SaaS environments.
Key points
- Wiz Exposure Management is now generally available, with Unified Vulnerability Management (UVM) and Attack Surface Management (ASM).
- UVM can ingest findings from external security tools, including vulnerability and code scanners, and correlate them with context in Wiz’s Security Graph.
- ASM is described as continuously testing external reachability and validating exploitability, including vulnerabilities, misconfigurations, default credentials, exposed data and secrets.
- In an illustrative attack path, Wiz says its tools validated an internet-exposed Hadoop endpoint and an unauthenticated remote code execution risk.
- The platform can add runtime and asset-ownership context and map vulnerable components to source code and responsible developers.
- Wiz says teams can assign remediation in its platform or through integrations such as Jira, with AI-generated remediation guidance.
- Wiz also describes Posture Issues, which group findings into higher-impact fixes and can support remediation SLAs.
Article Details
- Event Type
- Product launch: Wiz Exposure Management, including Wiz Unified Vulnerability Management (UVM) and Wiz Attack Surface Management (ASM), reached general availability.
- Impact
- The platform combines findings from security tools and environments, validates external exposure and exploitability, and prioritizes remediation using contextual risk data. The article demonstrates detection of an internet-exposed VM with access to sensitive PII and validation of unauthenticated remote code execution against a Hadoop cluster, which could enable arbitrary code execution, sensitive-data access, and potential full control. These are product demonstration scenarios, not reported real-world incidents.
People
Vendors
Qualyshelps us prioritize finding from different tools on the Security Graph. An external scanner finding from Qualys is ingested into Wiz and pulled into this exact same Wiz Risk Issue. This provides correlation, allowingRapid7In this scenario, we begin by using Wiz UVM to ingest data from an existing on-prem vulnerability scanner, Rapid7. Wiz UVM adds the on-prem machine to the Imported Asset page with all the metadata available from theWizWe're excited to announce the General Availability (GA) of Wiz Exposure Management, featuring our powerful new capabilities: Wiz Unified Vulnerability Management (UVM) and Wiz Attack Surface Management (ASM) both now in
Products
Apache HadoopExposure Validation: The endpoint is validated to be externally facing, providing the actual screenshot of the exposed Hadoop webpage as proof.Jirathe issue directly in Wiz or trigger integrations with existing workflows (e.g., automatically opening a Jira ticket). Wiz provides AI remediation guidance that tells the owner exactly what needs to be done. You canServiceNowIntegration with CMDB (e.g., ServiceNow) adds ownership metadata and preserves the original UVM external tool tagging, ensuring the service owner is accurately identified.Wiz Attack Surface Management (ASM)featuring our powerful new capabilities: Wiz Unified Vulnerability Management (UVM) and Wiz Attack Surface Management (ASM) both now in GA!Wiz CodeCloud-to-code visibility with Wiz Code , adding the final layer and mapping the vulnerable component back to the specific repository and the responsible developer.Wiz Exposure ManagementWe're excited to announce the General Availability (GA) of Wiz Exposure Management, featuring our powerful new capabilities: Wiz Unified Vulnerability Management (UVM) and Wiz Attack Surface Management (ASM) both now inWiz Security Graphunified remediation workflows from code to cloud and beyond. This delivers critical context on the Wiz Security Graph needed to prioritize exposures and scale security effectively.Wiz SensorWe then add a layer of runtime validation from the Wiz Sensor. The Sensor confirms that this vulnerability is actively present at runtime, adding crucial, high-confidence data.Wiz Unified Vulnerability Management (UVM)Availability (GA) of Wiz Exposure Management, featuring our powerful new capabilities: Wiz Unified Vulnerability Management (UVM) and Wiz Attack Surface Management (ASM) both now in GA!