Wiz Adds Google Workspace Identity Modeling and Threat Detection

· Original article ↗

Summary

Wiz says its Google Workspace support adds identity and permission visibility, misconfiguration alerts, lateral-movement path analysis, and more than 50 near-real-time threat detection rules for Google Cloud customers.

Key points

  • Wiz’s new Google Workspace modeling provides visibility into identities, groups, and their Google Cloud permissions.
  • The service identifies Google Workspace Super Admins and flags high-privilege, admin, and excessive Google Cloud permissions.
  • Built-in controls flag issues including users without MFA, inactive users, identity exposures, and publicly exposed admin compute resources.
  • The modeling highlights identity-related lateral-movement paths that could lead to Google Cloud admin access or account takeover.
  • Wiz says it released more than 50 Google Workspace detection rules, covering suspicious logins and configuration changes such as domain-wide 2FA disabling.
  • Google Workspace events are correlated with Google Cloud context to help assess potential impact and review remediation guidance.

Article Details

Event Type
Product launch: Wiz introduced Google Workspace identity modeling and more than 50 Google Workspace threat detection rules as part of its cloud identity security capabilities.
Impact
The capabilities give Google Cloud customers visibility into identities and effective permissions, flag privileged users and IAM misconfigurations, identify lateral-movement paths, and detect suspicious Workspace events in near real time. The article describes product capabilities and potential risks; it does not report a specific breach or confirmed impact.

Vendors

Products

Related Articles