CyCognito Joins Wiz Integrations (WIN) Platform

Joint Integration Takes Outside-In Testing View to Identify and Prioritize Cloud Risks

PALO ALTO, Calif., April 24, 2025 /PRNewswire/ -- CyCognito, the leader in external exposure management, today announced its partnership with leading cloud security provider Wiz and joins Wiz Integrations (WIN). The integration, launching at the RSA Conference, enables joint customers to combine the visibility and coverage of Wiz's CNAPP with the power of continuous Dynamic Application Security Testing (DAST) and external asset discovery across global organizations—ultimately enabling enhanced cloud security coverage.

There are a number of critical visibility gaps that can compromise a company's security posture in the cloud. Human error in account mapping and CSPM configuration creates dangerous blind spots. Enterprises struggle with unmanaged workloads outside security controls, while M&A introduces subsidiary assets with inconsistent standards. Vendor-transitioned projects contain undocumented vulnerabilities, and third-party services extend the attack surface beyond your perimeter. All of these gaps create exploitable weaknesses that threat actors actively target.

CyCognito addresses these challenges through seedless discovery that automatically identifies unmanaged cloud instances where traditional security tools fall short. By providing an attacker's perspective from outside your network, CyCognito reveals both sanctioned and unsanctioned environments without requiring cloud service provider APIs. Its external attack surface management approach complements CNAPP strategies by providing visibility into coverage gaps and giving cloud security teams visibility into assets they didn't know existed. This comprehensive view enables effective management of dynamic cloud environments.

CyCognito uses DAST to examine running apps for vulnerabilities. CyCognito enables organizations to reach their ideal app sec goals by testing from the network edge—through the infrastructure—and into the application. CyCognito addresses the testing gaps that, until now, organizations have struggled to close.

"By integrating with Wiz, we're bringing the attacker's perspective directly into cloud security programs," said Randy Streu, SVP Global Channels & Alliances, CyCognito. "This partnership empowers security teams with both internal and external visibility—combining Wiz's deep cloud-native context with our continuous external discovery to help teams surface, prioritize, and respond to the risks that matter most."

Mutual customers receive the following benefits:

• Risk Enrichment: CyCognito's integration directly maps to Wiz assets, additional issue findings, context, and risk-based prioritization to Wiz to provide customers with the attacker's perspective.
• Unified Coverage Insights: CyCognito's external asset discovery complements Wiz's internal cloud visibility, helping joint customers identify previously unknown or unmanaged assets.
• Multi-cloud Attacker's Perspective: CyCognito enhances Wiz's visibility into exposed web apps and risks across AWS, Microsoft Azure, and Google Cloud Platform.
• Targeted DAST Based on Verified Exposure: Wiz identifies externally exposed API endpoints through static and dynamic network analysis, and sends only those endpoints to CyCognito for DAST scanning.

The integration with Wiz supports a modern cloud security operating model, where security and cloud teams work together across the entire development lifecycle. Wiz's unified platform delivers code-to-cloud context to reduce the attack surface—using shared policies to stop risks earlier in the SDLC and ensure posture is enforced in production. With Wiz Defend, teams can also detect and respond to real-time threats in their cloud environments, enabling complete visibility and control across code, cloud, and runtime.

"We're excited to welcome CyCognito to the Wiz Integration Network," said Oron Noah, VP of Product, Extensibility & Partnerships at Wiz. "By combining CyCognito's continuous DAST and external asset discovery with Wiz's comprehensive code-to-cloud context and real-time threat detection, we're enabling our customers to proactively identify exposures, prioritize critical risks, and strengthen their cloud security posture across the entire development lifecycle."

To learn more about the CyCognito-Wiz integration at RSA, please visit booth #3110.

To see how this integration empowers cloud security teams with greater visibility and control, please visit the dedicated blog page.

About CyCognito

CyCognito is an external exposure management platform that discovers, tests, and prioritizes security risks. The platform provides the deepest, most accurate mapping of external attack surfaces without manual effort or seed inputs, and conducts 80,000+ security tests to identify critical vulnerabilities before attackers can exploit them. Trusted by Fortune 500 companies and government agencies, CyCognito reduces remediation time from months to days. Learn more at https://www.cycognito.com/

SOURCE CyCognito