Wiz Adds Kubernetes Deployment-Time Security Controls and Event Alerts
Summary
Wiz announced Admission Controller capabilities for Kubernetes, including fine-grained deployment-time policy enforcement, centralized views of admission events and failures, and custom alerts for suspicious cluster activity.
Key points
- The controller can scan Kubernetes resources and enforce security policies before resources are created or modified.
- New fine-grained controls can identify and block deployments involving unrestricted, highly privileged system calls or read-write access to sensitive directories and volumes.
- A centralized page shows admission attempts, policy failures, affected resources, and related event details.
- Customers can create cloud-event rules and configure alerts for suspicious activity, including behavior that could indicate brute-force attacks on the Kubernetes API.
- The capabilities extend Wiz Guardrails’ policy framework across the CI/CD pipeline and Kubernetes deployment time.
Article Details
- Event Type
- Product capability announcement
- Impact
- Wiz announced new Wiz Admission Controller capabilities for Kubernetes deployment-time policy enforcement, centralized admission-event visibility, event reporting, and custom alerts for suspicious cluster activity. The capabilities are intended to help organizations identify or block policy violations before resources are deployed and improve security visibility without adding development bottlenecks.
Vendors
Products
KubernetesRecently, we announced the availability of the Wiz Admission Controller to prevent risks from entering Kubernetes environments. Today, we are announcing a set of additional capabilities to Wiz's Admission Controller toWiz Admission ControllerRecently, we announced the availability of the Wiz Admission Controller to prevent risks from entering Kubernetes environments. Today, we are announcing a set of additional capabilities to Wiz's Admission Controller toWiz CLIenables organizations to shift their security strategy left with Wiz Guardrails - which consists of the Wiz CLI and Wiz Admission Controller. Wiz Guardrails enables a single policy framework for both development andWiz Cloud Detection and Response (CDR)Leverage Wiz CDR to define custom alerts for suspicious events in your cluster.Wiz GuardrailsWiz enables organizations to shift their security strategy left with Wiz Guardrails - which consists of the Wiz CLI and Wiz Admission Controller. Wiz Guardrails enables a single policy framework for both development and