2026-07

This release tracker is LLM-curated from Wiz updates and announcements I follow. Always verify critical details against the linked source announcements. Source files for this radar are published at https://github.com/pisinger/pisinger.github.io/tree/main/_wiz_release_radar

Wiz Release Radar - July 2026

This is an LLM-curated list of Wiz updates and announcements I follow.

Status: 🟢 GA

🟡 Public Preview

🟠 Private Preview

⚫ Deprecation

🔵 Update

🔴 Security

Indicator	Feature	Type	Product Area	Description
🟢	Red Agent generally available	GA	Red Agent	Wiz’s AI-powered offensive security agent for continuous attack surface management and automated penetration testing is now GA. During preview it surfaced over 10,000 validated critical exploitable risks and scanned 350,000 assets in a single day, closing the gap between traditional scanners and AI-speed adversaries. https://www.wiz.io/blog/wiz-red-agent-is-ga
🟢	Wiz MCP GA	GA	Platform	Wiz MCP is now generally available, securely connecting AI assistants, custom agents, and AI-powered applications to the Wiz platform. It exposes Security Graph context, Red/Blue/Green Agent intelligence, and verified Wiz AI Skills so agentic workflows can automate investigation and remediation. https://www.wiz.io/blog/introducing-wiz-mcp
🔴	wp2shell WordPress RCE exploitation	Security	Defend	Wiz Research identified in-the-wild exploitation of a critical pre-authentication RCE chain in WordPress Core (CVE-2026-63030 & CVE-2026-60137), with attackers deploying persistent webshells. Organizations should prioritize patching or apply WAF mitigations. https://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137
🔴	AsyncAPI supply chain compromise	Security	Code	Wiz M-Red-Team documented a supply chain compromise of the AsyncAPI generator via a “pwn request” GitHub Actions misconfiguration that stole a privileged PAT, enabling malicious @asyncapi npm packages with persistence payloads. Highlights CI/CD secret-exposure and workflow risks requiring attention. https://www.wiz.io/blog/m-red-team-asyncapi-supply-chain-compromise-via-github-actions
🔵	Wiz Integration Network reaches 300	Integration	Platform	The Wiz Integration Network hit 300 partner integrations spanning developer toolchains, CI/CD pipelines, APIs, threat intel, and SaaS platforms, all feeding into the Security Graph so code, runtime, and ownership context correlate for correlated findings. https://www.wiz.io/blog/wiz-integration-network-reaches-300
🔵	Agentless threat detection for virtual appliances	Update	Defend	Wiz Defend Agentless Workload Detection extends EDR-like threat detection, hunting, and incident investigation to virtual appliances such as FortiGate and Redis that cannot run traditional agents, using local logs to surface attacker activity in the wild. https://www.wiz.io/blog/agentless-visibility-uncovering-cloud-blind-spots
🔵	Wiz ASM automated reconnaissance	Update	Red Agent	Wiz ASM launches automated reconnaissance to continuously discover all subdomains belonging to an organization, combining external reconnaissance with internal context to remove shadow exposures and remediate exploitable risks. https://www.wiz.io/blog/wiz-asm-auto-recon

Sources

• https://www.wiz.io/blog/wiz-red-agent-is-ga
• https://www.wiz.io/blog/introducing-wiz-mcp
• https://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137
• https://www.wiz.io/blog/m-red-team-asyncapi-supply-chain-compromise-via-github-actions
• https://www.wiz.io/blog/wiz-integration-network-reaches-300
• https://www.wiz.io/blog/agentless-visibility-uncovering-cloud-blind-spots
• https://www.wiz.io/blog/wiz-asm-auto-recon