PŻ.
    Ask the SI

    Wiz Technical Essentials

    Wiz's technical training on agentless CSPM — graph-based risk analysis and prioritising the toxic combinations that actually create exposure.

    Updated

    • Agentless cloud scanning model: API access plus disk snapshots, no software on the workload
    • Security graph and attack-path analysis across AWS, Azure and GCP
    • Toxic combination prioritisation: how a low-severity misconfiguration, an exposed identity path and a reachable network route combine into a real attack path
    • Cloud risk workflow integration: pushing findings into Jira, ServiceNow and remediation pipelines

    Why agentless CSPM changes the workflow

    Wiz connects through a read-only cross-account role and cloud-provider APIs, then scans disk snapshots rather than running an agent inside the workload — full-environment coverage from day one, no deployment queue and no performance hit on production systems. The training's real value isn't the scanning mechanics, it's the Security Graph: findings are graph nodes, and the point is combining a handful of individually low-severity issues — an internet-facing VM, an over-permissioned role, an exposed secret — into the toxic combination that's actually exploitable. That's the triage model I use on client environments: fix the two-hop attack path before the isolated low-severity finding.

    Related

    Wiz.io

    Wiz for agentless multi-cloud posture management, attack-path graphs and toxic-combination prioritisation, now under Google Cloud.

    Cloud security assessment

    Configuration and architecture assessment for Azure, GCP and Alibaba Cloud: identity, network, data, logging and CSPM findings with a fix roadmap.

    Google Cloud

    Google Cloud IAM hardening: organization policy design, workload identity federation, VPC Service Controls perimeters and agent identity.

    Microsoft Defender for Cloud

    Defender for Cloud for Azure-native CSPM, multicloud extension, container posture and AI workload security posture management.

    Cloud architecture review

    Design-stage review of cloud and hybrid architecture: trust boundaries, identity model, segmentation, key management and detection design.

    Cloud security

    Multi-cloud security practice: landing zones, identity, posture management, MITRE ATT&CK-aligned detection engineering and CIS hardening baselines.