Wiz, Inc.

Gal Kozoshnik

Yaniv Shaked

Ami Luttwak

Roy Reznik

Mattan Shalev

Yinon Costica

Omri Kornblau

Yarin Miran

Daniel Klein

Alon Schindel

Raaz Herzberg

Amir Lande Blau

Yaniv Joseph Oliver

Itay Arbel

Jonathan Dong

A system and method for iterative cybersecurity remediation based on a digital forensic finding is disclosed. In an embodiment, the method includes detecting a forensic finding, the forensic finding based on a forensic artifact detected on a disk of a resource in a computing environment; generating an inspectable disk based on the disk of the resource; inspecting the inspectable disk for a cybersecurity object based on the forensic artifact; and initiating a remediation action on the disk based on the cybersecurity object detected on the inspectable disk.

Techniques for system feedback in remediating cybersecurity risks

A system and method for detecting a cybersecurity issue in a software container layer and mitigating the same is presented. The method includes: detecting a software container including a plurality of layers; associating a first layer of the plurality of layers with a first image of the software container, and associating a second layer of the plurality of layers with a second image of the software container; inspecting each of the plurality of layers for a cybersecurity issue; detecting a cybersecurity object on the first layer, wherein the cybersecurity object indicates the cybersecurity issue; initiating a remediation action on the first image, in response to detecting the cybersecurity object on the first layer.

System and method for identifying cybersecurity risk source in container image layers

An architecture of a multi-cloud inspector for any computing device type is provided. According to an embodiment, a method for implementing multi-cloud inspection includes accessing an object list, determining which objects to inspect, determining which inspectors to use, creating object copies, providing and running inspectors for each object copy, receiving inspection report summaries, generating an enriched dataset, and adding the enriched dataset to a security graph database.

Architecture of a multi-cloud inspector for any compute type

A system and method for agentless generation of a software bill of materials (SBOM) in a cloud computing environment is disclosed. The method includes: accessing a plurality of workloads in a cloud computing environment; detecting in each workload of the plurality of workloads a software component; generating for each workload an SBOM based on the detected software component; and storing each SBOM in a database.

System and method for agentless application inventory detection

A system and method for evaluating definitions from a markup language document for agentless host configuration of an image in a virtualized computing environment generates an instruction to deploy a virtual instance based on a base image, the virtual instance including a disk. The method further includes generating an inspectable disk based on the disk of the virtual instance; receiving a markup language document, the document including a plurality of definitions, each including a data element; inspecting the inspectable disk for a cybersecurity object corresponding to a data element of a first definition of the plurality of definitions; evaluating the first definition based on the cybersecurity object to generate an evaluated first definition result, in response to determining that the definition is evaluable; generating an output based on the evaluated first definition result; and generating the output based on a notification, in response to determining that the definition is unevaluable.

System and method for agentless host configuration detection of an image in a virtualized environment

A system and method for evaluating definitions from a markup language document for agentless host configuration includes generating an inspectable disk based on a disk of a host, the host deployed in a virtualized computing environment. The system is configured to: receive a markup language document, the markup language document including a plurality of definitions, each definition including a data element; inspect the inspectable disk for a cybersecurity object corresponding to a first data element of a first definition of the plurality of definitions; evaluate the first definition further based on the cybersecurity object to generate an evaluated first definition result, in response to determining that the definition is evaluable; generate an output based on the evaluated first definition result; and generate the output based on a predetermined notification, in response to determining that the definition is unevaluable.

System and method for agentless host configuration detection in a computing environment

A method and system for populating multi-layer technology product catalogs are provided. The method includes scanning an environment and executing a software project to collect hints on technology products required for the execution of the software project; mapping the collected hints to identifiers of technology products to identify technology products required for the execution of the software project; analyzing each of the identified technology products to determine a set of descriptors identifying certain attributes of a technology product; classifying each of the identified technology products to at least one technology layer, wherein a technology layer represents the functionality of a technology product; populating a technology product catalog to include a plurality of entries, wherein each entry is associated with a single technology product and maintains the set of descriptors and the at least one technology layer associated with the technology product; and saving the populated technology product catalog in a database.

Growing community of inventors

Petah Tikva, Israel

Gal Kozoshnik