Wiz, Inc.

Arnon Trabelsi

Amir Lande Blau

Assaf Segal

Ami Luttwak

Shir Tamari

Tal Gilady

Daniel Hershko Shemesh

A method and system for detecting an exposed software service in a cloud computing environment is presented. The method includes detecting a plurality of resources in the cloud computing environment, wherein each resource is deployed in the cloud computing environment; associating each resource of the plurality of resources with a software service; detecting a plurality of Application Programming Interface (API) endpoints, each API endpoint associated with at least a resource of the plurality of resources; detecting an exposed API endpoint from the plurality of API endpoints based on executing a network access instruction on an API endpoint; determining that the software service is exposed in response to determining that a resource associated with the exposed API endpoint is associated with the software service; and initiating a mitigation action in response to determining that the software service is exposed.

System and method for exposed software service detection

A system and method for improving inspection of software containers is presented. The method includes detecting a plurality of configuration files, each corresponding to a software container image corresponding to a software container deployed in the cloud computing environment; parsing a first configuration file to detect a first plurality of commands; generating a first fingerprint based on the detected first plurality of commands; parsing a second configuration file to detect a second plurality of commands; generating a second fingerprint based on the detected second plurality of commands; determining that the first configuration file matches the second configuration file in response to detecting a match based on the fingerprints; determining that the first configuration file mismatches the second configuration file in response to detecting a mismatch; and inspecting the first configuration file for a cybersecurity object in response to determining that the first configuration file matches the second configuration file.

System and method for tracing cloud computing environment deployments to code objects utilizing unique fingerprints

A system and method for inspecting private code repositories for cybersecurity issues is presented. The method includes accessing a private code repository, the private code repository including a plurality of code objects; generating a pull request including code for an inspector, the inspector configured to detect a cybersecurity object in a code object of the plurality of code objects; initiating the pull request in the private code repository; and receiving a result from the inspector, wherein the result includes an identifier of the code object and an identifier of a detected cybersecurity object, wherein the cybersecurity object indicates a cybersecurity issue.

System and method for scanning private code and CI/CD registries

A system and method for detecting a cybersecurity object in an operating system-level virtualization is presented. The method includes detecting an identifier of a code object in a software artifact, wherein the software artifact represents a software container deployed in a cloud computing environment; determining a location of the code object based on the software artifact; inspecting the code object for a cybersecurity object, wherein the cybersecurity object indicates a cybersecurity threat; detecting a cybersecurity object in the code object; and initiating a remediation action based on the cybersecurity object in response to detecting the cybersecurity object in the code object.

System and method for tracing cloud computing environment deployments to code objects

A system and method for performing inspection of a reachable code object of a cloud computing environment is presented. The method includes detecting a network path for each resource of a plurality of resources deployed in a cloud computing environment, wherein the network path includes at least a portion between an external network and the cloud computing environment; determining reachability parameters of each resource of the plurality of resources for which a network path is detected; accessing a code repository including a plurality of code objects; actively inspecting the network path of a resource to determine if the network path is a viable network path; mapping each resource having a viable network path to a code object of the plurality of code objects; inspecting a mapped code object for a cybersecurity object; and initiating a remediation action based on the cybersecurity object.

Growing community of inventors

Tel Aviv, Israel

Arnon Trabelsi