tools
Wiz Defend
Wiz Defend detects, investigates, and responds to threats across cloud workloads, identities, data, and AI applications.
Wiz Defend provides runtime threat detection and response using cloud and SaaS logs, runtime signals, and Wiz Security Graph context. It helps security operations teams identify attack paths, investigate incidents, and assess potential blast radius.
The product includes Blue Agent for automated threat investigation, cloud-native containment playbooks, identity and data detection, and AI runtime protection. The Wiz Sensor is an add-on for runtime workload protection, and pricing is provided through a custom quote.
Features
- Correlates cloud logs, runtime signals, and risk context
- Maps telemetry coverage to MITRE ATT&CK
- Detects threats across AI workloads, models, and agentic applications
- Uses Blue Agent to investigate threats and produce a verdict
- Provides cloud-native containment playbooks and root-cause analysis
- Automates response actions with Wiz Workflows
- Detects identity anomalies and unusual access to sensitive data
- Wiz Sensor adds eBPF runtime workload protection
Use cases
- Investigate cloud threats with correlated workload, identity, and cloud evidence
- Detect prompt injection, model exfiltration, and MCP server attacks
- Map telemetry gaps before an incident occurs
- Contain compromised workloads using automated response playbooks
- Identify anomalous identity activity and sensitive-data access
- Coordinate investigations with Google Security Operations
Pros
Cons
Latest updates
- Supply Chain Zero Days: Closing the Gap Between Publication and Detection
Wiz’s supply chain pipeline identifies compromised packages at publication, helping teams detect zero-day supply chain compromises.
- The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub
The Blue Agent investigated a multi-platform attack in minutes, following evidence across AWS and GitHub.
- Building an AI Detection Engine That Understands Agent Intent
Analyzing model input and output logs in an AI-native detection pipeline to understand and uncover malicious AI agent behavior
- Investing Together: Wiz Defend and Google Security Operations
Continuing to deepen the integration between Wiz Defend and Google Security Operations, helping teams work faster wherever they choose to investigate
- Bridging the Visibility Gap: A Unified Security Operating Model for Hybrid Cloud Teams
The Sensor Workload Scanner is now GA and extends our risk prioritization engine to on-premise environments.
Capabilities
- Real-time data — “Stay ahead of cloud threats and protect AI applications with real-time threat detection, investigation and response across every layer of your cloud environment.” source
Get it
Security
- SOC 2 Type II — “Our SOC 2 Type II + HIPAA report and our SOC 3 report are available in the Customer Trust Center below.” source
- SOC 2 — “Our SOC 2 Type II + HIPAA report and our SOC 3 report are available in the Customer Trust Center below.” source
- ISO 27001 — “Wiz is proud to announce its ISO 27001, ISO 27017, ISO 27018, and ISO 27701 recertification.” source
- HIPAA — “Our SOC 2 Type II + HIPAA report and our SOC 3 report are available in the Customer Trust Center below.” source
Pricing
- Prices checked
- 2026-10-24