Wiz Extends Runtime Sensor Coverage to Serverless Containers

Summary

Wiz says its runtime sensor now supports AWS Fargate and Azure Container Apps, using ptrace to monitor container processes without host access and offering threat detection, response, and runtime hunting.

Key points

The sensor is available for serverless containers on AWS Fargate and Azure Container Apps, according to Wiz.
Wiz says it uses ptrace to monitor container processes without direct access to the host.
The sensor can be deployed as a sidecar or embedded in the workload.
Capabilities include runtime threat detection and response, custom rules, event monitoring, and vulnerability validation.
Wiz says it can correlate runtime events with control-plane, identity, network, and other events.

Article Details

Event Type: Product capability announcement: Wiz expanded its runtime sensor coverage to serverless containers, including AWS Fargate and Azure Container Apps.
Impact: The sensor is described as providing runtime visibility, threat detection and response, rule-based blocking, event hunting, cloud detection and response, and vulnerability validation for serverless container workloads. The article reports no specific breach, victim impact, or confirmed threat activity.

People

Avik SarkarStaff Security Engineer, InfraSec, at 6Sense; quoted on Wiz's visibility across container environments.Cody JohnsonDirector of Vulnerability Management at Compass; quoted on using Wiz for container security.

Vendors

WizToday, we’re excited to announce that Wiz is extending the coverage of our runtime sensor to serverless containers, offering a defense-in-depth strategy that provides visibility, blocking, and hunting across the entire

Products

AWS Fargateapplications. By removing the need to manage the underlying infrastructure, serverless containers like AWS Fargate and Azure Container Apps (ACA) allow developers to focus on what they do best—writing code—while the Azure Container Appsthe need to manage the underlying infrastructure, serverless containers like AWS Fargate and Azure Container Apps (ACA) allow developers to focus on what they do best—writing code—while the cloud service provider KubernetesAzure Container Apps (ACA) can achieve the same level of security that they’ve come to expect from our Kubernetes and Linux workload coverage. LinuxApps (ACA) can achieve the same level of security that they’ve come to expect from our Kubernetes and Linux workload coverage. Wiz Runtime SensorWiz Runtime Sensor to the Rescue