Wiz Defend
Wiz Defend is a cloud security product for detecting, investigating, and responding to threats, including threats targeting AI applications.
What Wiz Defend is
Wiz Defend is a cloud security product for detecting, investigating, and responding to threats, including threats targeting AI applications. It brings together runtime signals from the Wiz Sensor, cloud and SaaS logs, and agentless risk context to help teams trace attack paths and assess potential blast radius. Telemetry maps to MITRE ATT&CK, and the product identifies detection coverage gaps ahead of incidents. Its Blue Agent triages threats and presents an investigation and verdict for analyst review. Response options include cloud containment playbooks, root-cause analysis, source-code remediation, and automation through Wiz Workflows. It detects AI runtime risks such as prompt injection, model exfiltration, and MCP server attacks. The sensor add-on protects and monitors VM, containerized, and serverless container workloads; Kubernetes capabilities include file integrity monitoring, drift detection, monitoring, and blocking. Wiz Defend integrates with Google Security Operations, where threat status, severity, and comments sync in real time. It supports hybrid, multi-cloud environments. Pricing is by request; there is no free plan.
Good
- Maps telemetry to MITRE ATT&CK.
- Blue Agent triages threats for analyst review.
- Detects AI-specific runtime threats.
- Supports cloud-native containment playbooks and automation.
- Integrates with Google Security Operations.
Watch out
- No free plan is listed.
- Pricing is available only by request.
- Runtime workload protection requires the Wiz Sensor add-on.
Who it suits
Wiz Defend suits SOC, threat intelligence, and incident response teams working across cloud environments. It may fit organizations seeking AI runtime detection and automated response capabilities.
Verdict
Wiz Defend combines cloud threat investigation with response tools, Kubernetes runtime capabilities, and AI-specific threat detection. Pricing is quote-based, so teams will need to request a price to assess fit.
Plans and prices
From Wiz Defend's own pricing page, checked 29 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Wiz Defend | Priced on request | Modular licensing; pricing by quote |
The facts
Each one read from Wiz Defend's own pages, with the date it was checked.
What it does
- AI runtime protection
- It detects AI-specific runtime threats such as prompt injection, model exfiltration, and MCP server attacks.checked 29 Sep 2026
- AI threat investigation
- The Blue Agent automatically triages threats and provides an investigation and verdict for analyst review.checked 29 Sep 2026
- Incident readiness
- It maps telemetry to MITRE ATT&CK and identifies coverage gaps before an incident.checked 29 Sep 2026
- Integration
- Wiz Defend integrates with Google Security Operations so analysts can investigate threats in either platform, with threat status, severity, and comments syncing between them in real time.checked 29 Sep 2026
- Kubernetes protection
- Runtime sensor capabilities include file integrity monitoring, drift detection, threat monitoring, and blocking on container hosts.checked 29 Sep 2026
- Pricing
- Wiz publishes no fixed price for Wiz Defend on its pricing page and directs customers to request pricing; its licensing is modular and can be tailored to customer needs.checked 29 Sep 2026
- Purpose
- Wiz Defend provides real-time threat detection, investigation, and response across cloud environments, including AI applications.checked 29 Sep 2026
- Response tools
- Wiz Defend supports cloud-native containment playbooks, root-cause analysis, source-code remediation, and response automation through Wiz Workflows.checked 29 Sep 2026
- Security and compliance
- Wiz says it has recertified to ISO 27001, ISO 27017, ISO 27018, and ISO 27701, and makes SOC 2 Type II plus HIPAA and SOC 3 reports available through its Customer Trust Center.checked 29 Sep 2026
- Sensor add-on
- The Wiz Sensor add-on provides runtime workload protection and monitoring for VMs, containerized environments, and serverless containers.checked 29 Sep 2026
- Threat context
- It combines runtime signals from the Wiz sensor, cloud and SaaS logs, and agentless risk context to investigate attack paths and potential blast radius.checked 29 Sep 2026
The company
- Founded
- 2020checked 23 Sep 2026
- Headquarters
- New York City, United Stateschecked 23 Sep 2026
- Intended teams
- Wiz describes Wiz Defend as a cloud SecOps solution for SOC, threat intelligence, and incident response teams.checked 29 Sep 2026
Alternatives to Wiz Defend
- 1
Amazon GuardDuty
Free planWebAPILinux7.6From $0.03 a month - 2
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 3
Sysdig Secure
WebAPILinuxmacOS7.2From $20 a month - 4
SentinelOne Singularity Cloud Security
AndroidiOSWebAPI6.9 - 5
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 6
Oligo Security
Free planWebAPILinuxSelf-hosted6.5Free plan