What is a hardened image?
A hardened image is a pre-configured container or VM template stripped of unnecessary components and vulnerabilities to minimize risk.
Allison Jackson
Articles Allison Jackson
How to get started with hardened images
Hardened images give you peace of mind that your workload is following security best practices right out of the box.
Minimal vs. hardened base images: Security and selection tips
Simply put, minimal images focus on a smaller footprint (fewer packages, faster pulls), while hardened images focus on secure defaults (non-root users, signed artifacts, provenance).
What is a golden image in cloud security?
A golden image is an authorized template that you use to launch consistent and secure computing resources in modern cloud environments.
Regarder la démo de 12 minutes
Regardez comment Wiz transforme la visibilité instantanée en une remédiation rapide.
How to patch container base images: Methods and best practices
Container base image patching is the process of updating the OS and runtime libraries in the base layer of a container image to remediate vulnerabilities and keep images secure.
Cloud storage costs and secure optimization
Cloud storage cost refers to the total expense associated with storing, accessing, and managing data across cloud platforms like AWS S3, Azure Blob Storage, and Google Cloud Storage.
GCP pricing: Breaking down costs in 2026
To control Google Cloud spend, you first need to understand how the platform charges for resources. GCP’s billing is usage-based, but the pricing model you choose can drastically change your costs.
11 meilleures pratiques de sécurité API
11 pratiques essentielles de sécurité API avec lesquelles chaque organisation devrait commencer
Cloud Costs: Optimize, Control, and Reduce Spend
Cloud cost is the total spend across compute, storage, networking, observability, licensing, and third-party services in public clouds.
How to mitigate API security risks & vulnerabilities in 2026 (and beyond)
API security risks are the complete spectrum of threats targeting application programming interfaces (APIs), including technical vulnerabilities, misconfigurations, and business logic flaws.
What is API attack surface management?
API attack surface management is focused on discovering, inventorying, analyzing, and continuously monitoring all APIs within an organization’s cloud environment. This enables identification and mitigation of points of exposure that could lead to a breach.
What is a shadow API? Security risks, detection, and prevention explained
Effective shadow API security requires continuous discovery, runtime context, and code-to-cloud visibility to identify unsanctioned APIs before they’re exploited by attackers.
What is API drift and how do you prevent it?
API drift occurs when APIs in production diverge from their documented specifications.
API Abuse: How to Defend & Prevent Risk
API abuse is the intentional misuse of API functionality in order to bypass security controls, extract unauthorized data, or disrupt services.
API discovery: How it works + best practices
API discovery is the process of finding, mapping, and cataloging every single API across your entire digital estate, including your public-facing cloud accounts and your on-premises data centers.
Broken API authentication: Cloud security risks explained
Broken API authentication is an API security risk that occurs when an API doesn’t properly check and confirm who’s making a certain request.
OWASP API Security Top 10 Risks and How to Mitigate Them
The OWASP API Security Project offers software developers and cloud security practitioners guidance on preventing, identifying, and remediating the most critical security risks facing application programming interfaces (APIs).
Server-side request forgery (SSRF) : Qu’est-ce que c’est et comment y remédier ?
La falsification de requête côté serveur (SSRF) est une vulnérabilité à fort impact où un attaquant trompe un serveur pour qu'il effectue des requêtes vers des ressources internes ou restreintes, exposant potentiellement des API, des services de métadonnées cloud et des systèmes sensibles.
ECS cost optimization: How to manage and reduce container spend
This article provides step-by-step guidance on optimizing ECS costs, along with practical methods and tools to help you control your container expenses and eliminate cloud waste.
Cloud cost optimization tools
In this blog post, we'll explore the key features and benefits of these tools and help you choose the right one for your organization.
Zombie APIs: A hidden security risk
Zombie APIs are API endpoints that remain operational despite lacking ongoing maintenance or official support.
API Security Checklist 2026: OWASP-Aligned, Code-to-Cloud Best Practices
An API checklist serves as a framework to help your security team systematically detect and tackle threats and vulnerabilities throughout the API lifecycle. Its end goal? To strengthen your overall security posture by standardizing API security efforts.
EKS cost optimization: How to reduce Amazon Kubernetes spend
In this article we explore what really drives your Amazon EKS spend, learn the most common and costly pitfalls, and find practical, engineering-driven strategies to reduce waste.
What are API attacks?
API attacks are attempts to exploit weaknesses in application programming interfaces – the connectors that let software systems communicate and exchange data.
S3 Cost Optimization: How to reduce & manage Amazon S3 storage spend
In this article, you’ll learn more about these cost drivers and find actionable strategies for addressing each one. Ready to make the most of S3 without sticker shock when your bill arrives? Let’s get started.
Azure Cost Optimization: A Context-Driven Guide to Smart Cloud Spending
Azure cost optimization means continuously aligning cloud spend with business priorities – maximizing value, minimizing waste, and maintaining security and performance.
CloudWatch Costs & Pricing in 2026
Without proper management, organizations can see their CloudWatch bills escalate rapidly, sometimes unexpectedly accounting for a significant portion of their overall AWS spend. Read to learn more.
Top API Vulnerabilities: How to Detect, Prioritize, and Prevent Real-World Risk
Application programming interfaces (APIs) enable communication between services, applications, and data systems—powering everything from mobile apps to large-scale enterprise platforms.
EBS Cost Optimization: How to stop your block storage bill from spiraling
This guide is about smart cloud cost optimization, eliminating cloud waste and ensuring every dollar spent on storage delivers real value. Let's dig into the actionable strategies to get your EBS spend under control for good.
AWS Cost: A Practical Guide to Understanding and Managing AWS Cloud Spend
This guide is your field manual for taming costs. We'll break down what makes up your bill, decode pricing models, and pinpoint the common gotchas that drain your budget, giving you practical advice to navigate the maze.
Best practices for AWS Cost Optimization
Ready to learn everything necessary to transform AWS cost management from a headache into a real business advantage? You’ll find everything you need in this guide.
What is an API Catalog?
An API catalog is the best way to protect your organization from API risks: It surfaces hidden routes, weak auth, and sensitive data, anchoring effective security.
Azure Cost Management: A guide to monitoring and controlling cloud spend
Take a closer look at cost management and cost optimization, along with a breakdown of the core components of Microsoft Cost Management, how to use its tools, and how to integrate it into engineering workflows.
What is Cloud Cost Management?
Cloud cost management, also known as cloud spend management, is the process of monitoring, controlling, and optimizing cloud spend across an organization’s cloud environments.
Cloud Cost Management Software: Choosing the right platform for visibility and control
This article explores why traditional cloud cost approaches miss the mark, compares platform philosophies, and spotlights emerging solutions that enhance development velocity. Let’s get started.
Kubernetes Cost Optimization: Best practices for controlling container spend
This blog post covers the ins and outs of cloud cost optimization in Kubernetes. We'll cover advanced principles, practical strategies, and some emerging, hard-to-find techniques.
Azure vs. AWS Pricing: A Cloud Cost Comparison for 2026
In this guide, we’ll compare the key cost drivers across AWS and Azure—and then go beyond pricing sheets to explore the factors that determine your actual bill.
API Governance: Best Practices & Solutions
API governance refers to the policies, standards, and processes that guide how APIs are built, managed, and secured.
Top API Security Solutions (and how to choose the right one)
In this article, we’ll break down what capabilities a strong API security tool needs to have and look at different categories of API security solutions, plus examples.
REST API security: Best practices, risks, and tools
REST API security is the combination of technologies and practices used to safeguard RESTful endpoints from attacks, such as unauthorized access, exploitation, and abuse.
EC2 Cloud Cost Optimization: Strategies to Reduce Amazon EC2 Spend
Cloud cost optimization is the continuous practice of making sure you’re only paying for the compute resources you actually need. It's about matching the supply of your instances to the real-time demand of your workloads, selecting the right pricing models, and ruthlessly eliminating waste.
Optimisation des coûts cloud : réduire les dépenses en 2026
L'optimisation des coûts du cloud est la pratique systématique consistant à réduire les dépenses cloud tout en améliorant l'efficacité du cloud grâce à une visibilité accrue, au dimensionnement optimal des ressources (rightsizing), à l'automatisation des charges de travail (workloads) et à la responsabilisation des équipes.
Posts Allison Jackson
Start Secure in the AI Era: Accelerating AI Threat Readiness with WizOS
As the time from vulnerability discovery to exploitation shrinks, building with minimal, secured components is more important than ever. Here is how WizOS helps.
Introducing Wiz Cloud Cost: Powering Cost Management and Optimization with Context
Wiz unifies cloud and AI cost visibility to help teams eliminate waste and improve spend efficiency across their AWS, Azure, and GCP environments.
From Cryptographic Blind Spots to Post-Quantum Agility: Introducing Wiz for PQC Readiness
Eliminate cryptographic blind spots and neutralize legacy debt with an integrated cryptographic asset inventory. Identify risks across code, cloud, and runtime, using the Wiz Security Graph to prioritize migration and protect against "Harvest Now, Decrypt Later" attacks.
Wiz Product Announcements at re:Invent 2025: Expanding Visibility from Code to Cloud
Check out new product releases that help security and engineers work together to keep cloud environments secure
WizOS: Powering Secured Image Adoption with AI
WizOS is now GA to help every organization reduce CVEs and build on a trusted foundation.
WizOS Is Here: Transforming Container Security from the Image Up
WizOS is in public preview starting today, enabling Wiz customers to adopt and operationalize secured images at scale.