What is endpoint detection and response (EDR)?
Endpoint detection and response (EDR) continuously monitors endpoints to detect, investigate, and stop threats that get past antivirus.
Tal Moriah
Articles Tal Moriah
Identity Threat Detection and Response Tools: Enterprise Evaluation Guide
Identity threat detection and response tools vary widely in how they collect signals and how they act on them. Before comparing vendors, it helps to agree on the technical requirements that separate a capable platform from a log-forwarding dashboard.
What is Extended Detection and Response (XDR)? Architecture, mechanics, and enterprise strategy
Extended detection and response (XDR) correlates endpoint, network, identity, and cloud signals. See how XDR works, native vs. open XDR, and its cloud gaps.
Top Application Detection and Response (ADR) Tools for 2026
Application detection and response tools catch attacks inside running apps. Compare the top ADR tools for 2026, how they work, and how to pick the right one.
Regarder la démo de 12 minutes
Regardez comment Wiz transforme la visibilité instantanée en une remédiation rapide.
Top Endpoint Detection and Response (EDR) Tools
Endpoint detection and response tools compared: see the top EDR platforms, how to evaluate them, and where cloud detection and response fills the gaps.
The Runtime Security Tool Landscape: Which tools are worth a PoC?
Runtime security tools compared: how Wiz, Sysdig, Falco, CrowdStrike, Datadog and more protect live cloud workloads, and which are worth a proof of concept.
What is AI Detection and Response (AIDR)?
AI detection and response (AIDR) is a security capability that monitors your AI systems, prompts, agents, models, and the data pipelines feeding them, then acts when something goes wrong.
Threat Detection and Response : renforcez la sécurité de votre cloud
Découvrez les fondamentaux du Threat Detection and Response, les bonnes pratiques associées et les outils essentiels pour renforcer la sécurité de votre cloud face aux menaces émergentes.
Top threat intelligence platforms in 2026
Threat intelligence platforms (TIPs) aggregate attacker data from OSINT, dark web sources, commercial feeds, and adversary infrastructure to highlight the threats most likely to be exploited.
Cloud Investigation and Response Automation (CIRA)
Cloud investigation and response automation (CIRA) harnesses the power of advanced analytics, artificial intelligence (AI), and automation to provide organizations with real-time insights into potential security incidents within their cloud environments
Incident Response Template: A Cloud-Focused Example
An incident response plan template is a pre-structured document that gives organizations a standardized framework for how to detect, investigate, contain, and recover from cybersecurity incidents.
Les meilleurs outils de threat intelligence pour 2026 et au-delà
Découvrez les 10 meilleurs outils de veille sur les menaces pour 2026 : fonctionnalités clés et limitations. Cette liste exhaustive recense les flux et outils de veille sur les menaces les plus adaptés à votre environnement.
Les 13 threat intelligence feeds incontournables
Un flux de renseignements sur les menaces, ou flux de données sur les cybermenaces, fournit un flux continu de données relatives aux cybermenaces et aux cyberrisques.
Cloud Threat Hunting Explained
Cloud threat hunting is the proactive search for malicious activity across cloud infrastructure, workloads, and identities before automated tools detect it.
Attack Path Analysis (APA) Explained
Attack path analysis (APA) is a cybersecurity technique that identifies and maps how potential attackers could infiltrate your network and systems
SOC Automation Guide: AI Agents, Tools, and Use Cases
Learn how SOC automation reduces manual workloads, improves threat detection, and accelerates response with AI-driven tools and real-time security workflows.
Processus de gestion des incidents : les 6 étapes du cycle de vie de la gestion des incidents
Apprenez les 6 étapes essentielles de la réponse aux incidents pour détecter, contenir et éliminer les menaces. Comparez NIST et SANS et optimisez votre processus de réponse aux incidents pour le cloud.
MITRE ATTACK Framework: Tactics, Techniques and More
Learn use cases, tactics, and the foundations of the MITRE ATTACK (also known as MITRE ATT&CK) framework and how to leverage it for improved cloud security.
Threat Detection Tools for Cloud-Native Security
Learn how threat detection tools work in cloud environments, what capabilities matter most, and how modern platforms use context and automation to improve response.
Identity Threat Detection and Response
ITDR is a security discipline that detects and responds to attacks that target or abuse user and machine identities, stopping credential misuse in real time.
How to Create an Incident Response Policy: An Actionable Checklist and Template
Build a strong incident response policy to manage cybersecurity crises with clear roles, compliance steps, and hands-on training.
Alert Fatigue: How Layered Context Turns Thousands of Alerts into Dozens
Alert fatigue, sometimes known as alarm fatigue, happens when security team members are desensitized by too many notifications, leading them to miss critical signals and legitimate warnings.
Posts Tal Moriah
Supply Chain Zero Days: Closing the Gap Between Publication and Detection
When trusted packages are compromised, malicious code can quickly spread throughout and beyond developer environments. See how Wiz’s supply chain pipeline identifies compromised packages at publication, helping teams detect zero-day supply chain compromises in Wiz Defend before a CVE is published
Building an AI Detection Engine That Understands Agent Intent
Analyzing model input and output logs in an AI-native detection pipeline to understand and uncover malicious AI agent behavior
Investing Together: Wiz Defend and Google Security Operations
Continuing to deepen the integration between Wiz Defend and Google Security Operations, helping teams work faster wherever they choose to investigate
Wiz at Black Hat 2026: Driving AI Threat Readiness
Announcing new capabilities that help organizations prepare for the AI era by expanding visibility and accelerating response, so security teams can defend at machine speed.
AI Threat Readiness Pillar 4: Detect and contain threats in real-time
Your guide to operationalizing AI-powered threat detection and response with Wiz to stay ahead of AI-driven attackers.
The Wiz Blue Agent, now Generally Available
Accelerate your SecOps team with the Blue Agent for threat investigation, now Generally Available
AI-Powered Forensics, at Cloud Speed
Reviewing Wiz’s approach to forensics in the cloud era, and announcing the public preview of AI-powered, context-aware forensics capabilities
Empower and Accelerate Your SOC with the Blue Agent
Meet the Blue Agent: AI-powered threat triage built on the Wiz platform. Investigate every threat with speed and transparency
AI-Powered Wiz: From Agents to Everyday Intelligence
How Wiz AI Agents and Integrations Meet You Where You Work
Defend Agentless Workload Detection: Bringing Visibility to Blind Spots in Threat Detection
Providing unconditional visibility into your environment
Introducing Wiz Incident Response: Your Expert Partner for Cloud Security Incidents
Announcing the public preview of Wiz’s in-house Incident Response service—empowering customers to investigate, contain, and resolve cyber incidents with confidence