Wiz Code integrates cloud context into the development lifecycle

Wiz has introduced Wiz Code, a tool designed to integrate security directly into the software development lifecycle by connecting code in the IDE to the cloud environment. The platform aims to reduce developer frustration by providing actionable guidance rather than just flagging vulnerabilities or creating roadblocks.

Unlike traditional security methods that often result in false positives or disconnected alerts, Wiz Code utilizes cloud context to show the potential impact of code decisions. For instance, if a hardcoded AWS access key is detected, the system can identify whether the key belongs to a production or test environment, which user accounts own it, and if it enables lateral movement within the cloud infrastructure.