Wiz Adds Code Scanning, Cloud-to-Code Tracing and Supply-Chain Security Features

Summary

Wiz announced cloud-development security features including GitHub repository scanning, cloud-to-code risk tracing, container image signature validation, agentless SBOM visibility, and a browser extension for cloud security insights.

Key points

Wiz's GitHub connector scans repositories for vulnerabilities, misconfigurations, and secrets; scanning is available in preview.
Cloud-to-code tracing links production risks to source repositories and commits; the container capability is available through the Wiz CLI.
Container image controls use signature validation and trusted-source policies to reduce risks from altered images.
Agentless SBOM features provide visibility into application components and support searching for supply-chain risks.
A Wiz browser extension displays cloud security posture insights within cloud platform interfaces.

Article Details

Event Type: Product capability announcement
Impact: Wiz announced Secure Cloud Development capabilities, including repository scanning, cloud-to-code risk tracing, in-code remediation guidance, container image integrity validation, agentless SBOM visibility, and a browser extension that provides security insights in cloud platform interfaces. GitHub scanning is available in preview, cloud-to-code for containers is available through the Wiz CLI, and image integrity and SBOM features are described as available.

People

Andrew McKennaCloud Security Architect at Priceline; quoted describing Priceline's use of Wiz.Yinon CosticaVP Product and Cofounder of Wiz; quoted discussing the company's cloud security capabilities.

Vendors

WizToday, we are excited to announce new capabilities to help organizations secure the cloud software development process and speed up the resolution of issues. Wiz Secure Cloud Development introduces the ability to:

Products

Wiz CLIof the issue and speeding up remediation. Wiz Cloud to code (for containers) is available now using the Wiz CLI.Wiz Guardrailscloud security platform covers all scenarios, from code to production, enabled by capabilities like Wiz Guardrails, SBOM generation, and Image integrity to help secure cloud development. Its unified scanner and Wiz Secure Cloud DevelopmentToday, we are excited to announce new capabilities to help organizations secure the cloud software development process and speed up the resolution of issues. Wiz Secure Cloud Development introduces the ability to: