Challenge
Fireblocks faced three intersecting challenges:
Scaling AI adoption safely: As teams integrated AI-driven workflows, Fireblocks sought to implement centralized guardrails and fine-grained permission boundaries to protect access credentials.
Managing multi-cloud complexity: Operating across primary cloud providers and specialized external infrastructure required a single, centralized view of security posture.
Streamlining daily operations: Validating endpoint configurations and coordinating remediation across fast-moving teams required security engineers to spend hours on manual triage.
Solution
Fireblocks addressed these challenges with Wiz AI Agents, Wiz Sensor, and the Wiz Cloudflare Connector:
Continuous external attack surface testing: Wiz Red Agent continuously probes public-facing endpoints to identify missing authentication, misconfigurations, and unnecessary exposure.
Context-rich remediation: Wiz Green Agent adds technical context and remediation guidance to findings, helping developers understand root causes and fix issues faster directly in their workflows.
Automated security operations: Wiz Blue Agent enables custom detection rules and webhook automations, while Wiz Sensor extends visibility to multi-cloud infrastructure.
Unified perimeter context: The Wiz Cloudflare Connector correlates endpoint exposure with Cloudflare’s application security, helping Fireblocks quickly identify potentially exposed assets.
Impact
70% reduction in manual triage
Daily security triage in Wiz dropped from many hours to just a couple of hours through automation.
Same-day risk remediation
Red Agent helped reduce critical findings much faster.
Visibility across multi-cloud infrastructure
Wiz Sensor extended visibility across multi-cloud environments.
Securing the Financial Engine of the Blockchain Economy
Fireblocks provides the security infrastructure behind institutional digital asset operations. Its MPC-based (multi-party computation) technology secures the private keys that control customer funds, making Fireblocks a foundational layer for banks, payment providers, and fintechs entering the space.
With infrastructure spanning multi-cloud environments, Fireblocks manages millions of cloud objects and configurations. For Principal DevSecOps Engineer Roy Weiss, comprehensive visibility was a top priority from day one.
I worked for a large enterprise company before and managed thousands of infrastructure accounts. I came to a conclusion: if I'm moving to a new place, there is no way that I'm missing one of the most crucial systems in the cloud, which is Wiz. Starting with Wiz was a huge shift for us, giving us a single pane of glass over all our cloud environments.
Roy Weiss, Principal DevSecOps, Fireblocks
Keeping Pace with AI While Maintaining Security Guardrails
As AI adoption accelerated across Fireblocks, teams began using AI-driven workflows for application development. Maintaining velocity required establishing clear permission boundaries and centralized control without slowing down innovation.
"Like everyone, what’s top of mind for my team is AI,” said Roy. “More AI, more automation, more building workflows that will serve us for alerting and auto remediation. The focus is putting effective guardrails in place so teams can build fast and stay secure.”
The most challenging areas in AI are boundaries and guardrails, and making sure it's not getting out of control. Humans cannot beat AI in terms of knowledge and accelerated growth. Ensuring that everything is coming across a centralized, approved location like MCP and AI Gateway is one of our most critical tasks."
Roy Weiss, Principal DevSecOps, Fireblocks
Validating Exposed Assets with Red Agent and Cloudflare
Fireblocks wanted to evaluate its external attack surface from an attacker’s perspective. With Wiz Red Agent, the team can continuously test public-facing endpoints for misconfigurations, missing authentication, and potentially exposed assets.
Before, we were missing visibility into which endpoints were actually behind Cloudflare. Now, with the dynamic scanner and Red Agent, it’s doing much better. The correlated findings and tuning are stronger because I get immediate feedback. I know exactly what’s exposed and what isn’t. It gives us the full coverage we were missing. And on top of that, if there's a zero-day or a vulnerability the industry needs to know about, we'll identify it in a second through the Threat Intel Center.
Roy Weiss, Principal DevSecOps Expert, Fireblocks
The Wiz Cloudflare Connector adds context by showing whether an exposed endpoint is protected by Cloudflare, helping the team distinguish protected assets from potentially unshielded attack paths.
What is most amazing about Red Agent is the way that we can track and get alerting or visibility on endpoints that can be attacked or manipulated from the outside. It tells me: 'You have an endpoint here, you are missing authentication,you have an exposure.' All of those insights are really, really helping me to close gaps fast.
Roy Weiss, Principal DevSecOps, Fireblocks
That visibility helped Fireblocks gain better visibility into endpoints that lacked Cloudflare protection and were no longer needed.
We found unneeded test endpoints exposed externally. Tracking all these endpoints manually is tough, with the Red Agent creating automated security alerts, it's flagged as critical right away, allowing us to open and resolve the issue on the same day.
Roy Weiss, Principal DevSecOps, Fireblocks
Turning Findings into Faster Remediation
Finding a risk is only the first step. Fireblocks also needed to give developers enough context to understand what happened, why it mattered, and how to fix it.
Wiz Green Agent helps by adding technical context and remediation guidance to findings. When Red Agent identifies a potential attack path, Green Agent analyzes the underlying environment, including Kubernetes permissions, runtime controls, and software vulnerabilities.
Green Agent explains the full context; it shows us all of our workloads and the exact remediation path for any issue. All the remediation paths are really clear.
Roy Weiss, Principal DevSecOps, Fireblocks
Fireblocks also uses Wiz Blue Agent and Wiz Defend to build custom detection rules, automate webhooks, and ingest CloudTrail event logs for runtime monitoring.
Extending Visibility to Multi-Cloud Infrastructure
Fireblocks also operates specialized infrastructure for blockchain node processing.
By deploying Wiz Sensor on specialized machines, Fireblocks extended its security visibility and uncovered previously unknown DNS exposure risks.
We use specialized cloud providers that are really fast and cheap. In terms of visibility, we had struggles before. We installed the Wiz Sensor there, and we identified exposed endpoints where we found potential risks.
Roy Weiss, Principal DevSecOps, Fireblocks
Automating Security and Reducing Triage Time
By bringing Wiz AI Agents, Wiz Sensor, and the Cloudflare Connector together, Fireblocks reduced the manual effort required to improve its security posture.
Before Red Agent, Green Agent, and the Cloudflare integration, we used to have manual processes for triage. Now, we get clearer findings and faster remediation that reduce the amount of manual hours of operation needed
Roy Weiss, Principal DevSecOps, Fireblocks
As Fireblocks continues to scale its digital asset platform, Wiz helps the security team keep pace with cloud and AI adoption, while reducing manual work and giving teams the visibility and context they need to act quickly.
