Company deep dives

Wiz interviews

Prioritising by exposure

“Any exposed application, service, or technology should be prioritized based on reachability, exploitability, and business impact, with a clear and fast process to route the issue to the right owner and drive remediation.”

Alon Schindel and Raaz HerzbergWiz blog

Wiz · 8 May 2026

Reachability, exploitability, impact

Which devices get patched first? Practise the order.

Example

“Sensitive assets should not be reachable from the internet or exposed to untrusted paths, regardless of patch status.”

Alon Schindel and Raaz HerzbergWiz blog

Wiz · 8 May 2026

Keep sensitive assets unreachable

Which devices get patched first? Practise the order.

Example

“Without environmental context, security teams spend valuable engineering cycles remediating theoretical risks rather than actionable exposures.”

Wiz Threat ResearchWiz blog

Wiz · 26 August 2026

Context over theoretical risk

Which devices get patched first? Practise the order.

Example

Containing access

“The true severity of an intrusion is not defined by the initial foothold, but by privilege and reachability: what an adversary can inherit, access, or pivot to next.”

Wiz Threat ResearchWiz blog

Wiz · 26 August 2026

Privilege and reachability set severity

Has the stolen access been stopped? Practise proving it.

Example

What AI changes

“Published research, including our own AI cyber model arena, has shown that frontier models can now autonomously discover zero-day vulnerabilities, generate working exploits, and chain multiple weaknesses together – changing the scale and speed at which risk emerges.”

Alon Schindel and Raaz HerzbergWiz blog

Wiz · 8 May 2026

Models find zero-days

Does this result prove an access-control flaw? Practise the check.

Example

Last reviewed