Post

2026-04

2026-04

This release tracker is LLM-curated from Wiz updates and announcements I follow. Always verify critical details against the linked source announcements. Source files for this radar are published at https://github.com/pisinger/pisinger.github.io/tree/main/_wiz_release_radar

Wiz Release Radar - April 2026

This is an LLM-curated list of Wiz updates and announcements I follow.

Status: 🟒 GA🟑 Public Preview🟠 Private Preview⚫ DeprecationπŸ”΅ UpdateπŸ”΄ Security
IndicatorFeatureTypeProduct AreaDescription
🟒AI-BOMGACodeAutomatically inventories AI frameworks, models, and IDE extensions (Gemini Code Assist, GitHub Copilot, Cursor) on the Security Graph, eliminating Shadow AI blind spots for security teams.
🟒SAST Rules for OWASP LLM/Agentic Top 10GACodeNew SAST detection rules mapped to OWASP Top 10 for LLM Applications and Agentic Applications, catching prompt injection, insecure model outputs, and unsafe agent behavior at code inception.
🟒Wiz Skills in IDEGACodeCoding agents can pull active Wiz issues and apply Green Agent remediation plans natively in the IDE as a simple command, enabling machine-speed remediation of security debt.
🟒Technology Intel CenterGAPlatformCentralized feed of cloud and AI provider feature releases, migration updates, and EOL notices, automatically correlated with affected Wiz resources and cloud cost impact.
🟒AI Studio Coverage ExpansionGAAI-APPExpanded visibility into AWS Agentcore, Gemini Enterprise Agent Platform, Azure Copilot Studio, and Salesforce Agentforce, including agents, models, and connected tools on the Security Graph.
🟒Multi-cloud PaaS ExpansionGACloudContinued multicloud PaaS coverage expansion including AgentCore, enabling teams to track workloads, identities, and exposures across increasingly abstracted infrastructure.
🟒Wiz Code Plugins for AI IDEsGACodePre-commit and pre-push security scanning for AI-native IDEs (Claude Code, Cursor) via Wiz MCP Server and WizCLI, catching secrets, IaC misconfigs, CVEs, and malware before code reaches the repository.
🟒CI/CD Pipeline SecurityGACodeCI/CD pipelines modeled as first-class assets on the Security Graph with CI-BOM inventory, AI agent prompt injection detection, dangerous trigger flagging, and a dedicated CI Pipelines Inventory page.
🟒IaC InventoryGACodeUnified view connecting every IaC module to its deployments and live resources, surfacing drift and blast radius across code, state files, and cloud environments.
🟒Pulumi IaC ScanningGACodeWiz CLI now scans Pulumi templates for misconfigurations across AWS, GCP, and Azure before deployment, extending IaC coverage to developer-first languages.
🟒Shadow Data DetectionGADataIdentifies stale, duplicated, and over-retained data across cloud storage using provider inventory reports, surfacing cost savings and exposure reduction opportunities in a dedicated dashboard.
🟑Red Agent with Claude OpusPublic PreviewRed AgentRed Agent leverages Anthropic Claude Opus 4.6/4.7 for AI-powered offensive security testing of web applications and APIs, scanning 150K+ assets weekly with zero false positives; available in Preview Hub.
🟑Green Agent Remediation in IDEPublic PreviewGreen AgentGreen Agent generates precise remediation plans using full code-to-cloud context; security teams can send plans to coding agents to auto-create pull requests from within the Wiz portal.
πŸ”΅Apigee API DiscoveryIntegrationPlatformFull Apigee X and Hybrid architecture surfaced on the Security Graph including gateways, environments, proxies, endpoints, and authorization schemes, with unauthenticated endpoint flagging; no additional setup beyond the GCP Connector.
πŸ”΅Databricks Security Graph IntegrationIntegrationPlatformDatabricks workspaces, Unity Catalog assets, identities, and data classifications (PII, PHI, PCI, secrets) mapped onto the Security Graph for cross-platform attack path analysis.
πŸ”΅Secure Guardrails for LovableUpdateCodePost-code-generation security scanning for Lovable AI coding tool using inline hooks with organizational guardrails injected before AI writes code; available May 2026.

Sources

This post is licensed under CC BY 4.0 by the author.

MS Release Radar

Wiz Release Radar

MS Tech News