Cloud security platform that extended convincingly into exposure management, with an outside-in attack surface module and an autonomous penetration testing agent. Cloud-first, now part of Google Cloud.
The Security Graph is the core of the product: agentless scanning builds a graph of workloads, identities, data and network paths, and toxic combinations are surfaced as single prioritised issues rather than thousands of separate findings.
Exposure management is a genuine extension rather than a rebrand. Wiz attack surface management launched in November 2025 adds outside-in discovery, and Red Agent, generally available in July 2026, is an autonomous penetration tester for web applications, interfaces and artificial intelligence applications that returns proofs of execution with reproduction steps; testing is focused on externally reachable applications, not internal networks or security controls.
Mobilisation is strong: workflows, owner assignment, service level tracking on a dedicated exposure dashboard, and an agent that performs root-cause investigation and can open fix pull requests through the code product.
The limitation is the centre of gravity. On-premises, endpoint and operational technology coverage comes through ingestion and external scanning rather than native agents, and there is no security control efficacy testing. Google completed its acquisition of Wiz in March 2026; the company states it will remain multi-cloud.
Check in a demo: how the licensing modules add up across workloads, developers, log ingestion and sensors, since the pricing page publishes no numbers and the unit mix is where quotes diverge.
Weak in one of these stages? The self-assessment tells you which stage to shop for first, and the directory shows who covers it.
Claim or correct this listing
Tell us what is wrong or what you want to confirm, and link a public source we can check. The owner reviews every claim. Nothing changes on the site until it has been reviewed, and a claim never changes a score or placement.
Get vendor updates monthly
One email a month: what changed in exposure management, which vendors moved, and one thing worth doing. No spam, unsubscribe any time.