tools
Wiz Code
Wiz Code secures source code, CI/CD pipelines, and cloud deployments with scanning, prioritization, and code-based remediation.
Wiz Code is a cloud security product for application security, development, DevOps, and platform teams. It connects code, repositories, CI/CD systems, and cloud environments to identify vulnerabilities and prioritize issues using runtime and reachability context.
It scans dependencies, infrastructure as code, secrets, sensitive data, malware, and CI/CD configurations. Developers can receive findings in IDEs, pull requests, CI/CD workflows, Slack, and GitHub. Pricing is quote-based, and the product is not presented as a general-purpose code editor or coding assistant.
Features
- Scans direct and transitive dependencies and provides SCA and SBOM visibility
- Scans Terraform, CloudFormation, Azure Resource Manager, Kubernetes, and Docker IaC
- Finds hardcoded secrets in code, IaC templates, and container images
- Identifies and classifies sensitive data such as PHI and PII in code
- Detects malware before it reaches CI runners and cloud environments
- Hardens VCS and CI/CD systems against misconfigurations and insecure defaults
- Correlates code risks with cloud impact and suggests one-click fixes in source code
- Supports GitHub scanning, Slack integration, MCP Server, and IDE scanning
Use cases
- Scan repositories and pull requests for vulnerabilities, secrets, and IaC misconfigurations
- Prioritize code issues using reachability and runtime context
- Trace cloud risks back to the source code that created them
- Enforce security policies in CI/CD pipelines before deployment
- Give developers security findings and remediation guidance in their IDE
- Inventory and secure AI-driven development workflows
Pros
Cons
Latest updates
- ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context
Reduce triage times and focus on the risks that matter most by combining context across code, infrastructure, and runtime
- ASPM in the AI Era Part 1: Unified Visibility Across Your Stack
Integrate your existing code scanners into Wiz for a unified view of application risk across your environment.
- Introducing Wiz AI SAST: Application Security that Understands Your Code and Your Infrastructure
Find, validate, and fix complex business logic flaws with an AI code scanner backed by Wiz Research.
- Wiz at Google Next: Machine-Speed Defense for Any Cloud, Any Platform, Any AI
Announcing new capabilities at Google Cloud Next that extend and deepen Wiz AI-APP coverage.
Capabilities
- Knows the whole codebase — “It understands your codebase's context to surface what pattern-matching engines miss.” source
- Reviews pull requests — “Apply consistent security policies across coding assistants, IDEs, version control, pull requests, and CI/CD pipelines, so developers catch issues early without changing how they work.” source
Get it
Security
- SOC 2 Type II — “Our SOC 2 Type II + HIPAA report and our SOC 3 report are available in the Customer Trust Center below.” source
- SOC 2 — “Our SOC 2 Type II + HIPAA report and our SOC 3 report are available in the Customer Trust Center below.” source
- ISO 27001 — “Wiz is proud to announce its ISO 27001, ISO 27017, ISO 27018, and ISO 27701 recertification.” source
- HIPAA — “Our SOC 2 Type II + HIPAA report and our SOC 3 report are available in the Customer Trust Center below.” source
Pricing
- Prices checked
- 2026-10-24