Wiz Launches Lightweight Runtime Sensor for Cloud Detection and Response
Summary
Wiz says its lightweight eBPF Runtime Sensor collects network, process, and memory signals, correlating them with cloud and Kubernetes context to help detect activity across cloud-native workloads.
Key points
- The sensor collects runtime network, process, and memory signals; Wiz says its agentless API scans continue to collect most other security data.
- Wiz describes the sensor as a lightweight eBPF component designed for cloud-native and ephemeral workloads.
- The company says runtime signals are correlated with cloud and Kubernetes events and its Security Graph to help assess attacker movement and incident impact.
- Wiz CDR can also consume signals from existing EDR and runtime solutions.
Article Details
- Event Type
- Product launch
- Impact
- Wiz introduced the Wiz Runtime Sensor, a lightweight eBPF agent that adds runtime network, process, and memory signals to Wiz CDR. Combined with Wiz's cloud and Kubernetes context, these signals are intended to help organizations detect cloud attacks and assess their scope and impact across cloud-native workloads.
Vendors
Products
Wiz Cloud Detection and Response (CDR)Wiz CDR takes a cloud-first approach to detection and response. By starting from a deep analysis of cloud context using the Wiz Security Graph, then analyzing cloud and Kubernetes events, and only then incorporatingWiz Runtime Sensorthem with the Security Graph context for deep prioritization and blast radius analysis. With the Wiz Runtime Sensor signal, we can now complete the additional workload runtime context of network, process, and memoryWiz Security Graphapproach to detection and response. By starting from a deep analysis of cloud context using the Wiz Security Graph, then analyzing cloud and Kubernetes events, and only then incorporating runtime signals, we have