Wiz, Inc.

Oron Noah

Yinon Costica

Ami Luttwak

Ben Grynhaus

Eyal Wiener

Itai Yosephi

Tomer Gil Levi

Roy Reznik

Shai Keren

Lidor Gonshorowitz

Ron David Ben Arzi

A system and method for applying a cybersecurity control on a cloud native routing service is presented. The method includes detecting a cloud native routing component in a cloud computing environment; inspecting network traffic associated with the routing component; detecting routing configuration rules based at least on the inspected network traffic associated with the routing component; storing the detected routing configuration rules as representations on a security database, wherein the security database further includes a representation of the cloud computing environment; and applying a control on the detected routing configuration rules.

System and method for applying cybersecurity controls on cloud native routing services

A system and method for agentless detection of network exposure of a software appliance is presented. The method includes detecting a software appliance in a cloud computing environment, wherein the software appliance includes an immutable preconfigured, self-contained software application; inspecting the software appliance for a proxy-type application; detecting network traffic associated with the software appliance; generating a network path based on the network traffic and a network identifier of a component of the cloud computing environment based on detecting the proxy-type application and an identifier of the component in the detected network traffic; actively inspecting the generated network path through an external network, wherein the external network is external to the cloud computing environment; determining that the network path exposes the component based on a result of actively inspecting the generated network path; and initiating a remediation action based on the result of the active inspection.

Techniques for active inspection detection of effective network exposure through a cloud-native proxy appliance

A system and method for agentless detection of network exposure of a software appliance is presented. The method includes detecting a software appliance in a cloud computing environment, wherein the software appliance includes an immutable preconfigured, self-contained software application; inspecting the software appliance utilizing agentless inspection for a proxy-type application; detecting network traffic associated with the software appliance; determining that the software appliance exposes at least a component of the cloud computing environment based on detecting the proxy-type application and an identifier of the at least a component in the detected network traffic; and initiating a remediation action based on the determined exposure.

Techniques for detecting effective network exposure of a cloud-native proxy appliance utilizing agentless inspection

A system and method for detecting effective exposure of private API endpoints in a cloud computing environment is presented. The method includes inspecting a resource in a cloud computing environment utilizing agentless inspection; detecting a cybersecurity object on the inspected resource, the cybersecurity object indicating that the resource is a proxy-type appliance; detecting a private endpoint in the cloud computing environment, wherein the resource is configured to access the private endpoint, and the resource is further configured to access an external network, and wherein the external network is external to the cloud computing environment; determining that the private endpoint is potentially exposed via a network path which includes at least the resource; actively inspecting the network path to determine that the private endpoint is exposed to the external network; and initiating a remediation action based on a result of the active inspection.

Techniques for effective network exposure detection of private endpoints through a cloud-native router

A technique and method for detection and display of the cybersecurity risk context of a cloud environment initiates an inspection of cybersecurity objects within a cloud environment utilizing an inspection environment and stores information pertaining to discovered cybersecurity objects within the inspected cloud environment in a storage environment. The technique and method further generate a cybersecurity risk context for the inspected cloud environment based on the observations made concerning the cybersecurity objects contained within it. The technique and method further configure a web browser running on a client device to automatically display the generated cybersecurity risk context to a user, either through a web page overlay or through a toolbar plugin which has been installed in the web browser and configured to enable inspections of a cloud environment, once the user has navigated to a web page containing cybersecurity object identifiers.

Technique and method for detection and display of the cybersecurity risk context of a cloud environment

A system and method for providing dynamic network traffic policies is provided. The method includes: inspecting a workload for a cybersecurity object, the cybersecurity object indicating a cybersecurity risk, wherein the workload is deployed in a cloud computing environment having a firewall connected to an external network; detecting the cybersecurity risk on the workload based on the cybersecurity object; generating a policy for the firewall based on the cybersecurity risk; and configuring the firewall to apply the generated policy.

Techniques for cybersecurity risk-based firewall configuration

A system and method for providing dynamic network traffic policies. The method includes: detecting a cybersecurity risk on a workload deployed in a cloud computing environment, the cloud computing environment having a firewall connected to an untrusted network; and configuring the firewall to filter network traffic to the workload based on the detected cybersecurity risk.

Growing community of inventors

Geulim, Israel

Oron Noah