1. Known vulnerability risk: Container images introduce vulnerabilities that kick off an endless workload of triage and patching for security and engineering teams. According to Wiz research, container base images account for nearly 40% of critical and high severity CVE findings on containers.

2. Unknown supply chain risk: As attackers continue to target the open source supply chain and compromise popular package repositories, the risk of introducing compromised packages through publicly sourced container images and packages is on the rise. 

Start Secure: Reimagining How We Reduce Risk in the Cloud

From the beginning, Wiz has helped organizations cut through the complexity of cloud risk. Our approach centers on context and prioritization. We combine risk signals and environment context into clear attack paths that matter, enabling customers to achieve milestones like the Zero Critical Club. 

Unified code-to-cloud scanning and context-driven prioritization have changed the game for addressing critical risks efficiently, but as vulnerabilities continue to multiply and supply chain compromises become more prevalent, the next step is rethinking how this risk gets introduced in the first place.

This is where WizOS comes in. To address supply chain risk and inherited vulnerabilities, we must make the leap from a pure vulnerability management approach to truly starting from a secured foundation. WizOS shifts the security equation by proactively eliminating a major source of inherited risk and supply chain uncertainty before it ever reaches the pipeline. Building on a trusted foundation is the next evolution in securing cloud applications.

The Platform Powering Secured Image Adoption

Adopting secured images requires both migrating existing container images and using secured images in new builds. WizOS is backed by the Wiz platform to support organizations in their adoption journey through a full platform approach to secured image adoption:

1. Gain Visibility: Use the Container Image Inventory in Wiz to gain visibility into every image in your environment. Understand the risk profile of each image - every vulnerability and issue finding associated with it. 

2. Mitigate Critical Risk: Filter the image inventory to identify which images can be swapped for a WizOS image. Identify images that have associated critical issues and prioritize them for migration. 

3. Start Secure: Empower development teams to build with images from the WizOS Secured Image Catalog. Images are ready to use off the shelf, with a package manager and shell included, and easily customizable using the Wiz package repository. 

4. Enforce Guardrails: Leverage Image Trust Policies and the Wiz Admissions Controller to prevent vulnerable new images from reaching production. 

Streamlining Secured Image Migration with AI Assistance

You can now use AI capabilities inside the Wiz platform and via Wiz MCP to empower developers in their migration to WizOS images.

Migration Planning and Prioritization with Mika AI

Leverage Mika AI to plan and prioritize your WizOS migration. Mika AI is fully integrated with your container image inventory and the WizOS Secured Image Catalog. Ask Mika to:

• Show me the highest risk images that can be swapped for a WizOS image

• Create a WizOS image migration plan prioritized based on risk

• Calculate the vulnerability reduction I could achieve by migrating to WizOS

Image Swap Assistance with Wiz MCP + WizOS

Leverage the Wiz MCP and your AI coding assistant of choice to implement image swaps directly in the IDE. Wiz MCP can surface the appropriate WizOS images based on context in your dockerfile. Your AI coding assistant can then leverage context from Wiz MCP to suggest and apply edits to your dockerfile to make migration to the WizOS image easy, whether your original images are alpine, docker, ubuntu, or others. 

What’s Next

Get Started Today