Wiz and other tools in the same space tell you and tracks compliance across your fleet.
Idk if wiz does this, but their competitors have “compliance packs” which are preset compliance patterns, IE hipaa, finra, etc.
That way you click a button and it tells you every change you need to make to be compliant
Edit: this is all just examples
I am sure I am misunderstanding something, but I'm not sure what.
You're missing that a lot of "security" is in reality just a bunch of check-boxes for a form that someone asks you to fill out.
The security you need to really think about is outside of those checkboxes, and it seems like Wiz is not for this type of security, but the former.
And that still provides a lot of value to the right customers.
Yes there are other parts to HIPAA than just VM config, but it’s just giving you policies and checks out of the box
They have other capabilities, but that’s the primary value add.
Imagine you are working for a fortune 100 company with hundreds of thousands of cloud resources. You can’t manage them individually.
/s
The problem with the cloud, from a security standpoint is that is it much more complex than a traditional on-premise infrastructure, especially if you go the "managed services" route and have minimal code.
The real value is it's linter for _any_ cloud config - you can use terraform or cloudformation or just click around in user interface, and Wiz's rules would still work.
https://shelly.guide/add-a-shelly-to-your-wi-fi-through-web-...
