The Pwn Request Reckoning: What Still Works Against GitHub Actions
GitHub's 2026 Actions changes make pull_request_target attacks harder, but not impossible. Here's the residual attack surface and how to audit for it.
#Wiz Code
ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context
Reduce triage times and focus on the risks that matter most by combining context across code, infrastructure, and runtime
ASPM in the AI Era Part 1: Unified Visibility Across Your Stack
Integrate your existing code scanners into Wiz for a unified view of application risk across your environment.
Introducing Wiz AI SAST: Application Security that Understands Your Code and Your Infrastructure
Find, validate, and fix complex business logic flaws with an AI code scanner backed by Wiz Research, operationalized within your existing security program.
How Developers Prevent Production Risk at the Source
Fixing security vulnerabilities in code takes seconds, while patching in production creates high operational costs and risk. Discover how empowering developers as your first line of defense eliminates exposure across every phase of your software pipeline.
Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps
A practitioner’s guide to log visibility, incident readiness, and threat hunting across the major version control services.
How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign
A practical playbook for investigating GitHub token compromise, drawn from Wiz CIRT's response to a coordinated multi-organization campaign.
Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain
Personal repositories are where corporate secrets quietly escape. Wiz correlates them to your developers, validates the real risk, and drives the fix.
Rethinking Scanning for the AI Era: Wiz’s Agentic Code Security System
Enterprise AI AppSec requires more than powerful models. It requires a system that balances speed, depth, and cost across the software lifecycle.
Why IaC Coverage Belongs on Your Security Dashboard
Rethinking IaC coverage as a funnel that shows how much of your infrastructure is governed, traceable, and ready for remediation at speed
AI Threat Readiness Pillar 3: Perform AI Code Analysis Natively in Wiz
Your guide to operationalizing AI-powered code analysis with Wiz to stay ahead of AI driven development and adversaries
State of SDLC Security 2026: How Risk Scales in Modern Development
Insights from real-world environments into how code, developer tooling, automation, and AI are reshaping application security.