Wiz is an agentless cloud-native application protection platform (CNAPP) that scans AWS, Azure, and GCP environments for misconfigurations, vulnerabilities, and exposed secrets. It builds a unified graph-based view of cloud risk, helping teams understand how individual issues connect into exploitable attack paths.
How it works
Hybrid API + webhook integration (wiz, ViaWebhookPlugin) — Wiz pushes findings to Expel in real time, supplemented by API pulls for context.
Data ingested
Wiz issues, severity scores, cloud resource/posture context
Frequently asked questions
Expel connects to your Wiz account through a direct integration that pulls alerts from both Wiz Cloud and Wiz Defend into Workbench. Once connected, analysts investigate Wiz findings alongside telemetry from your other connected sources, such as email and SaaS. Expel is one of five MDR launch partners for Wiz Defend.
Expel’s Wiz integration routes cloud security posture alerts from Wiz Cloud and runtime threat detections from Wiz Defend into Workbench for analyst investigation. Expel applies roughly 2,000 runtime security detection rules to Wiz-connected environments and correlates findings with telemetry from other connected sources, such as email and SaaS, in Workbench.
Expel adds continuous analyst correlation on top of Wiz’s native alerting rather than leaving findings for your team to triage alone. Workbench analysts combine Wiz Cloud and Wiz Defend alerts with telemetry from other connected sources, such as email and SaaS, applying roughly 2,000 runtime detection rules built for Wiz environments.
Expel supports both Wiz products. Wiz Cloud alerts, covering cloud security posture, and Wiz Defend alerts, covering runtime threat detection, both route into Workbench for analyst investigation. Expel is one of five MDR launch partners for Wiz Defend and applies roughly 2,000 runtime security detection rules to Wiz-connected environments.
Wiz Cloud and Wiz Defend alerts appearing inside Workbench are the centerpiece of Expel’s live Wiz demo, available on request at expel.com/request-demo. The session also covers how analysts correlate Wiz findings with other telemetry and highlights Expel’s role as one of five launch partners for Wiz Defend.