Wiz
Wiz is a cloud-native application protection platform (CNAPP) vendor founded in 2020. The company shipped what it claims as the first AI-SPM module integrated into a CNAPP in 2024, and expanded materially through 2025. Following Google’s $32B acquisition (closed 2025), Wiz operates as part of Google Cloud Security.
Core platform
Wiz CNAPP combines: CSPM (cloud security posture), CWPP (cloud workload protection), CIEM (cloud entitlements), DSPM (data security posture), code/IaC scanning, and now AI-SPM. The differentiating architectural primitive is the Wiz Security Graph — a unified data model across all CNAPP modules enabling attack-path correlation across cloud, identity, data, and code domains.
AI-relevant offerings
| Product | Role |
|---|---|
| Wiz AI-SPM | AI Security Posture Management — model inventory, configuration risk, attack-path correlation to AI assets, AI-BOM, runtime monitoring of agent behavior |
Red Agent — Opus-powered offensive testing (2026)
Wiz Red Agent is an AI-powered attacker built on Claude Opus that reasons like a human pentester across production web applications and APIs — analyzing application logic, chaining steps, and adapting to live server responses to surface the logic-driven flaws traditional scanners miss. Running continuously across 150,000+ production assets per week, it surfaces thousands of high- and critical-severity findings, each validated with proof of exploitability and business context from the Wiz Security Graph — reported at zero false positives in customer production (see the Opus partner ecosystem). VP AI & Threat Research Alon Schindel: “Security teams are no longer limited by a lack of data, but by the ability to act on it.”
Notable 2025–2026 events
- Wizdom 2025 product launch event introduced runtime AI agent monitoring and the dedicated AI Security Dashboard
- OpenAI Platform connector added to AI-SPM
- NVIDIA Enterprise AI Factory integration
- Google Cloud acquisition ($32B, 2025) — product roadmap integration with Google Cloud Security pending
At Unprompted (March 2026)
Rami McCarthy presented Zeal of the Convert: Taming Shai-Hulud with AI at the Unprompted Conference (March 2026) — a practitioner post-mortem on responding to the 2025 Shai-Hulud supply-chain campaigns by moving from single-purpose scrapers to multi-agent triage engines that parallelize victimology and automate secret-impact analysis.
Wiki references
- Wiz AI-SPM — primary product page
- AI Security Posture Management practice page
- RA Data plane (supply-chain scanning) and Observability plane (AI-SPM)
Position vs peers
Primary competitors in the AI-SPM segment: Palo Alto Prisma AIRS (with separate Prisma Cloud AI-SPM from Dig Security), Orca Security AI-SPM, Reco. Wiz’s strongest differentiation is graph-based attack-path correlation across the broader CNAPP, not point AI capability depth.