惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

The GitHub Blog
The GitHub Blog
S
SegmentFault 最新的问题
L
LangChain Blog
Simon Willison's Weblog
Simon Willison's Weblog
N
News and Events Feed by Topic
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
WordPress大学
WordPress大学
M
MIT News - Artificial intelligence
A
About on SuperTechFans
Microsoft Security Blog
Microsoft Security Blog
I
Intezer
Know Your Adversary
Know Your Adversary
H
Heimdal Security Blog
博客园 - 叶小钗
B
Blog RSS Feed
F
Fortinet All Blogs
Hacker News: Ask HN
Hacker News: Ask HN
A
Arctic Wolf
小众软件
小众软件
Help Net Security
Help Net Security
MongoDB | Blog
MongoDB | Blog
aimingoo的专栏
aimingoo的专栏
G
Google Developers Blog
Forbes - Security
Forbes - Security
Latest news
Latest news
AI
AI
I
InfoQ
H
Hackread – Cybersecurity News, Data Breaches, AI and More
C
CXSECURITY Database RSS Feed - CXSecurity.com
W
WeLiveSecurity
C
Cybersecurity and Infrastructure Security Agency CISA
人人都是产品经理
人人都是产品经理
Cyberwarzone
Cyberwarzone
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
J
Java Code Geeks
Engineering at Meta
Engineering at Meta
C
Cyber Attacks, Cyber Crime and Cyber Security
O
OpenAI News
博客园 - 【当耐特】
T
Threat Research - Cisco Blogs
GbyAI
GbyAI
U
Unit 42
D
Darknet – Hacking Tools, Hacker News & Cyber Security
G
GRAHAM CLULEY
Apple Machine Learning Research
Apple Machine Learning Research
宝玉的分享
宝玉的分享
Google DeepMind News
Google DeepMind News
T
Threatpost
T
The Blog of Author Tim Ferriss
罗磊的独立博客

Wiz Blog | RSS feed

Meet Wiz for M365: Bringing SaaS into the Security Graph Bringing Security Visibility to Vercel with Wiz Axios NPM Distribution Compromised in Supply Chain Attack Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild The Wiz Blue Agent, now Generally Available Beyond the Badge: What Achieving Microsoft’s Certified Software Designation Means for Your Cloud Security Introducing the Green Agent: AI-Powered Remediation for the Cloud Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack Introducing the Wiz Red Agent- AI-Powered Attacker Introducing Wiz AI Application Protection Platform (AI-APP) Introducing Wiz Agents & Workflows: Security at the Speed of AI AI Runtime Threat Detection: From Input to Real-World Impact Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack It’s Official: Wiz Joins Google Understanding and Reducing AI Risk in Modern Applications Introducing Wiz Tenant Manager: Multi-Tenant Management for Federated Organizations The Agile FedRAMP Playbook, Part 4: Reactive Risk Management through Enriched Incident Response Wiz Achieves CPSTIC Certification in Spain Seeing AI Clearly: Building Visibility Across Modern AI Applications The Agile FedRAMP Playbook, Part 3: Preventative Risk Management by building Secure by Design Wiz Leads the 2026 Latio Application Security Report with awards in 4 categories Building an Agentic Cloud Security Ecosystem: A Reference Architecture with Wiz MCP and Infosys Cyber Next The Agile FedRAMP Playbook, Part 2: Proactive Risk Management with Continuous Monitoring Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows Would You Click ‘Accept’? Automatically detecting malicious Azure OAuth applications using LLMs Wiz Named a Leader in The Forrester Wave™: Cloud Native Application Protection Solutions, Q1 2026 From Detection to Remediation: It’s Time to Rethink AppSec Around Exploitability and Root Cause Fixes The Agile FedRAMP Playbook, Part 1: Why Risk is Your Best Starting Point Introducing AI Cyber Model Arena: A Real-World Benchmark for AI Agents in Cybersecurity Wiz + Spotify Backstage: Security at the Developer’s Desk Building AI Security Together: New Ways to Partner with Wiz for AI Security in 2026 Hacking Moltbook: The AI Social Network Any Human Can Control The Year in Wiz Research: 2025 Most Read Blogs WizExtend is Here: AI and Cloud Security Insights in Your Daily Workflow From Detection to Remediation: Wiz in Your JetBrains IDE Agentic Browser Security: 2025 Year-End Review CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild A 90-Day Action Plan to Turn Resolutions into Results with Wiz Introducing the Wiz Partner Alliance: A New Chapter for Partner Success Preparing for Post-Quantum Cryptography Wiz Recognized as a 2025 Customers’ Choice in the Gartner® Peer Insights™ Voice of the Customer for CNAPP Expanding the Zero Critical Club to set a new standard for AppSec and SecOps teams Snipping the Long Tail of Shai-Hulud 2.0 Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know The Kenna Transition: Your Strategic Shift to Exposure Management From MCP to Vibe Coding: Full Endpoint Visibility in Wiz AI Security Bringing Oracle Cloud Identity to Wiz Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra Gogs 0-Day Exploited in the Wild Code to Cloud Attacks: From Github PAT to Cloud Control Plane Top AWS re:Invent Announcements for Security Teams in 2025 React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182 React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability Wiz Product Announcements at re:Invent 2025: Expanding Visibility from Code to Cloud Introducing Wiz SAST: Where Code Risk Meets Cloud Context Wiz Becomes Fastest Security ISV to Reach $1 Billion in AWS Marketplace Lifetime Sales It's Here! Wiz Exposure Management is Now GA Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact Service Catalog is Here: Expand Risk Visibility for Your Service and Its Dependencies, Simplify Issue Ownership WizOS: Powering Secured Image Adoption with AI 3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs Mastering Software Governance with Hosted Technologies Inventory Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets Get Certified on Wiz Defend for Threat Detection and Response Blueprint for Security: A Guide to Code, Governance, and Response Frameworks Google Unified Security Recommended Program Names Wiz Among First 3 Strategic Partners Introducing Posture Issues: Transform Security Findings into Actionable Outcomes Empower and Accelerate Your SOC with the Blue Agent Exposure Report: 65% of Leading AI Companies Found with Verified Secret Leaks Wizdom 2025 Product Announcements: Extending the Cloud Operating Model When AI Becomes the Heart of Security: Powering a Future You Can Trust AI-Powered Wiz: From Agents to Everyday Intelligence Defend Agentless Workload Detection: Bringing Visibility to Blind Spots in Threat Detection Securing AI Agents with Wiz AI-SPM Introducing Wiz ASM: Context-Driven Attack Surface Management Securing Critical Infrastructure in the Cloud Era: A Policy and Technology Blueprint How CISOs Should Plan Security Budgets for 2026 Beyond the Checkbox: How Wiz Transforms SOC 2 into a Security Powerhouse Bringing Visibility to Kubernetes: Unified Inventory and Network Insight The Foundation Modern AppSec Is Still Missing: Code to Cloud, Rebuilt the Right Way Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces Introducing HoneyBee: How We Automate Honeypot Deployment for Threat Research RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score Defending against database ransomware attacks AI Security 101: Mapping the AI Attack Surface Introducing zeroday.cloud: First-of-its-kind cloud and AI hacking competition Unifying Cloud Risk and Network Defense: Wiz and Check Point The emerging use of malware invoking AI Wiz achieves FedRAMP High authorization Wiz + HCP Terraform: Close the IaC-to-Cloud Infrastructure Security Gap IMDS Abused: Hunting Rare Behaviors to Uncover Exploits Beyond CVEs: The Exploitation of Everyday Misconfigurations Wiz Research Discovers One in Five Organizations Exposed to Systemic Risks in Vibe-Coded Applications - Here's How to Secure Them Introducing Wiz Incident Response: Your Expert Partner for Cloud Security Incidents Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware DORA Compliance in the Cloud Era: Insights from Deloitte and Wiz How Wiz Customers like Brex and FICO See AI Changing Security Wiz Recognized as a Leader in the 2025 IDC MarketScape for ASPM
Wiz becomes fastest growing security startup ever with new $1.7B valuation
Assaf Rappaport · 2021-03-23 · via Wiz Blog | RSS feed

UPDATE: 4-7-21

I’m thrilled to share the details of the new backers we’re partnering with. Advent International through Advent Tech led the round. Joining Advent International (Bryan Taylor and Alek Ferro) in the round is Greenoaks (Neil Mehta and Patrick Backhouse) along with our existing investors from Index Ventures (Shardul Shah), Sequoia Capital (Doug Leone and Bogomil Balkansky), Insight (Jeff Horing) and Cyberstarts (Gili Ranaan). When asked about the bet they’re placing on Wiz, Bryan Taylor, Managing Partner and head of Advent’s technology investment team in Palo Alto, shared:

With every company now a software company, more and more business is shifting to the cloud – creating a massive market opportunity for Wiz to help CISOs and CIOs effectively identify and eliminate attack vectors across their cloud infrastructure environment. This demand for cloud-focused security solutions has enabled Wiz to deploy its product at-scale with leading global customers in a remarkably short timeframe. Wiz’s efficient growth to-date is a strong indicator of where we think the business is going and we believe the company is well positioned to lead a growing industry.

In my previous blog post, I shared that Wiz’s biggest success to date has been bringing together the most talented and accomplished individuals onto one team. Just like our employees, our investors are part of that team and it’s an honor to work with such an insightful and hard-working set of partners as we help our customers solve their biggest problems and build Wiz into the company we know it can be.

Original post

You may have noticed Wiz’s latest financing in the news today – we’ll confirm more details as the week goes on, but it’s a good opportunity to share some thoughts on the value we’re delivering to our customers and the growth this has enabled.

When my co-founders (Ami Luttwak, Yinon Costica and Roy Reznik) and I started Wiz a year ago, we discussed with our seed investors at Sequoia, Index, and Cyberstarts that we would not be solving a new problem.  In fact, we’d be solving a problem that, while growing, had been around for at least 10 years. The problem is protecting company’s precious data within their public and private clouds, and it’s a problem we know well.

Why the focus on cloud infrastructure security?

The previous startup we all founded together, Adallom, provided a SaaS security solution.  It helped the central security organization reduce risk within the use of the SaaS applications employees across the organization used every day to do their work. After Microsoft acquired us, we spent five years leading Microsoft’s Cloud Security Group and came to acutely understand the single biggest opportunity for security to reduce risk to their organization laid not within protecting their SaaS environment, but rather in protecting their cloud infrastructure environment. That’s where the crown jewels of every company lay.

Cloud infrastructure is the most valuable tool ever invented for engineers, and as every company becomes a software company, it’s become indispensable to nearly every business in the world.  However, the complexity it created has been impossible for central security organizations to keep up with, and security is not just responsible for securing pieces of it, they have to secure the full cloud stack - every VM, every container, and every account across AWS, Azure, GCP, and Kubernetes.

A problem, as yet, unsolved

This isn’t to say that security teams and their vendors haven’t been trying to solve the problem.  Entire categories of solutions (e.g. CSPM, vulnerability management, container security, and CIEM tools) have been created explicitly for this purpose.  After many years in cloud security working with hundreds of customers, we realized the net contribution of these tools were thousands of new alerts for security to investigate, with the occasional critical risk vector surfaced by security teams sophisticated enough to manually correlate their alert data across all of the disparate systems.

In other words, the system was broken. Most the security tools available today were built for the legacy, on-prem, slowly changing world, relied on outdated deployment modes (e.g. agents), and to the extent they covered cloud in some way, they focused mainly on VMs. Cloud infrastructure security needed an entirely new approach - one that embraced the complexity of cloud, one that worked through that complexity to automate the identification of real attack vectors, one that maximized security ROI, and one that any security team could operationalize, regardless of their resources.

That’s the premise we started Wiz with. Over the last year, we’ve built not just a product, but a completely new approach to cloud infrastructure security and governance. The fundamental tenants of this approach are: don’t interfere with the business - enable organizations to embrace cloud securely while managing risk, connect rather than deploy, go full stack or don’t go at all, make all data actionable, and fit into existing workflows so the product can be operationalized immediately.  The adoption has been immediate. We’re replacing large existing solutions in every customer and, in our first 3 months since emerging from stealth, over 10% of the fortune 500 are using Wiz.

ROI-driven security

There are a lot of things you can do to improve security; it’s choosing what to do that’s the tough part. Part of Wiz’s value lies in our ability to direct customers to exactly what they need to do across their full stack, multi-cloud environments to drive the biggest security ROI, both in terms of time-to-value and risk reduction.  The other part is that Wiz can be used by anyone.  By reimagining cloud infrastructure security from the ground up, we built a single solution that connects to a multi-cloud environment in 15 minutes, analyzes all layers of the cloud stack, and understands the cloud interactions across network, identity, configuration and workloads, thus breaking the legacy silos between vulnerability scanners, misconfigurations, identity issues, and network exposures.

In the end, these are all vulnerabilities of one kind or another, so why use different tools to catch them and how can you prioritize without combining and analyzing their exposure and impact? The secret sauce is that, for the first time ever, Wiz correlates all of this information into a single graph to reveal actionable insight into high-risk attack vectors.  With this approach, every security team can build an elite cloud infrastructure security practice that protects their company’s most valuable assets in the cloud.

Wiz customer, Anthony Belfiore, Chief Security Officer at AON, recently shared, “Wiz is not just a security tool - it’s a new way of looking at cloud security. It’s a new approach that covers the full cloud stack, provides immediate value, and actually surfaces actionable insights without the noise. Wiz is what this market has been missing for the last 10 years.”

That’s the crux if it – we’re not looking at a new problem, we’re looking at an old one, but we’re actually solving it.  When you have the best product, a huge existing market opportunity, and a proven ability to replace existing products in both enterprise and commercial sized accounts, your only inhibitor to growth becomes the resources available to grow your team.  With the $100M Series A from December 2020 and the $130M Series B today, we have eliminated that barrier and are poised to be the leader in cloud infrastructure security.

What's next?

Inevitably, any story in the press about funding veers towards adoption stats, valuation metrics, VCs, and unicorn labels, but at the end of the day, funding simply allows a company to invest in its people. Wiz’s biggest success to date has been bringing together the most talented and accomplished individuals onto one team.  There’s great power in that, and our product velocity and company growth are direct reflections of the incredible quality of our people who I feel honored to work alongside every day. With this funding we will continue to invest in bringing the best and brightest minds in cloud security onto our team, and we can’t wait to welcome them all!