Wiz Launches Automated DISA STIG Assessment for Federal Cloud Workloads

Wiz has expanded its cloud security platform to offer automated DISA Security Technical Implementation Guide (STIG) assessments for Amazon Linux 2023 and Windows Server 2025. The new capability provides continuous hardening validation for federal and defense cloud teams, replacing traditional point‑in‑time manual audits that can take days per system.

Because official SCAP content for the latest benchmarks is not yet available, Wiz’s compliance engineers translated the DISA STIGs into automated Host Configuration Rules that run continuously across AWS GovCloud environments. The solution supports FedRAMP, CMMC and DoD authorization requirements, surfacing findings in the Wiz Compliance Posture dashboard and re‑checking configurations as they change.

The move targets the high‑value U.S. government segment, where continuous compliance is mandatory, and aims to reduce operational burden while improving security posture for large fleets of cloud instances.