Agentless CNAPP and CSPM solution that uses an AI-powered unified risk graph to correlate vulnerabilities, misconfigurations, exposed secrets, and identity risks across AWS, Azure, GCP, Kubernetes, and Snowflake. Prioritizes risks based on actual exploitability and blast-radius analysis rather than theoretical severity, enabling teams to remediate the 1% of issues that matter.
Wiz is an agentless cloud native application protection platform. SideScanning reads cloud configuration and workload disk state through provider APIs and snapshot mechanisms — no agents required — across AWS, Azure, GCP, Kubernetes, and Snowflake. From this data, Wiz builds a unified risk graph correlating vulnerabilities, misconfigurations, exposed secrets, and identity risks.
The differentiator is blast-radius prioritization: the risk graph identifies which findings are reachable via viable multi-step attack paths through the cloud estate, reducing large finding volumes to the small set with actual exploitability. The graph models relationships between cloud resources, network exposure, IAM permissions, and running workloads.
GenAI-powered investigation explains attack paths and remediation steps in natural language. Sales-only; no free tier.
Key Features
Agentless CNAPP: reads cloud configuration and workload disk state via provider APIs and snapshot mechanisms with no agents deployed and no impact on running workloads
Unified risk graph: correlates vulnerabilities, misconfigurations, exposed secrets, and identity risks into a single model mapping relationships between cloud resources, network exposure, and IAM permissions
Attack path analysis: identifies which findings are reachable via viable multi-step attack paths from the internet, reducing large finding volumes to the small set with actual exploitability
GenAI investigation: explains specific attack paths, contributing factors, and remediation steps in natural language; supports natural-language queries about the cloud estate
Cloud entitlement analysis (CIEM): maps IAM and cloud identity permissions to actual resource access to identify over-permissioned identities and potential lateral movement paths
Multi-cloud and Kubernetes coverage: AWS, Azure, GCP, Kubernetes clusters, and Snowflake in a unified risk model with cross-environment attack path correlation
Integrations
10 total
scm
GitHubGitLab
orchestration
Kubernetes
monitoring
Datadog
incident
PagerDuty
messaging
Slack
ci / cd
Terraform
cloud
AWSGCPAzure
Pricing
1 tier
Enterprise
Contact sales
Workload-based pricing; full CNAPP stack (CSPM + CWPP + CIEM + DSPM), agentless scanning, AI risk graph
