What problems is Wiz solving and how is that benefiting you?
We use Wiz for the following:
- Detecting vulnerabilities in docker images. This is a prerequisite to establishing vulnerability management of deployments and platform
- Detecting attack vectors on infrastructure. Daily scan allows us to fix possible misconfigurations in infrastructure
- Compliance posture on infrastructure - help us to be compliant with ISO and SOC2
- SBOM - gives us insight on legal issues with licenses of software libraries we use to prevent possible lawsuits
- Scanning our code and finding vulnerabilities in components we use. Software Component Analysis - which is prerequisite for implementing Secure Software Supply Chain - slsa.dev
- Finding hardcoded secrets in our code
- Detecting misconfigurations in virtual machines
- Finding misconfigurations on kubernetes clusters Review collected by and hosted on G2.com.