The Runtime Security Tool Landscape: Which tools are worth a PoC?
Runtime security tools compared: how Wiz, Sysdig, Falco, CrowdStrike, Datadog and more protect live cloud workloads, and which are worth a proof of concept.
Tal Moriah
Tal Moriah Articles
What is AI Detection and Response (AIDR)?
AI detection and response (AIDR) is a security capability that monitors your AI systems, prompts, agents, models, and the data pipelines feeding them, then acts when something goes wrong.
What is Threat Detection and Response (TDR)?
Threat detection and response (TDR) is a cybersecurity discipline that combines continuous monitoring, threat identification, investigation, and containment to find and stop attacks before they cause damage.
Top threat intelligence platforms in 2026
Threat intelligence platforms (TIPs) aggregate attacker data from OSINT, dark web sources, commercial feeds, and adversary infrastructure to highlight the threats most likely to be exploited.
Watch 12-min demo
Watch how Wiz turns instant visibility into rapid remediation.
Cloud Investigation and Response Automation (CIRA)
Cloud investigation and response automation (CIRA) harnesses the power of advanced analytics, artificial intelligence (AI), and automation to provide organizations with real-time insights into potential security incidents within their cloud environments
Incident Response Template: A Cloud-Focused Example
An incident response plan template is a pre-structured document that gives organizations a standardized framework for how to detect, investigate, contain, and recover from cybersecurity incidents.
Top Threat Intelligence Tools for 2026 and Beyond
Get the top 10 threat intelligence tools for 2026—key features and limitations. This master list covers the best TI feeds and tools for your environment.
The 13 Must-Follow Threat Intel Feeds
A threat intel feed, or threat intelligence feed, provides a continuous incoming flow of data related to cyber threats and risks.
Cloud Threat Hunting Explained
Cloud threat hunting is the proactive search for malicious activity across cloud infrastructure, workloads, and identities before automated tools detect it.
Attack Path Analysis (APA) Explained
Attack path analysis (APA) is a cybersecurity technique that identifies and maps how potential attackers could infiltrate your network and systems
SOC Automation Guide: AI Agents, Tools, and Use Cases
Learn how SOC automation reduces manual workloads, improves threat detection, and accelerates response with AI-driven tools and real-time security workflows.
Incident Response Process: 6 Steps of the IR Lifecycle
Learn the 6 essential incident response steps to detect, contain, and recover from threats. Compare NIST vs. SANS and optimize your IR process for the cloud.
MITRE ATTACK Framework: Tactics, Techniques and More
Learn use cases, tactics, and the foundations of the MITRE ATTACK (also known as MITRE ATT&CK) framework and how to leverage it for improved cloud security.
Threat Detection Tools for Cloud-Native Security
Learn how threat detection tools work in cloud environments, what capabilities matter most, and how modern platforms use context and automation to improve response.
Identity Threat Detection and Response
ITDR is a security discipline that detects and responds to attacks that target or abuse user and machine identities, stopping credential misuse in real time.
How to Create an Incident Response Policy: An Actionable Checklist and Template
Build a strong incident response policy to manage cybersecurity crises with clear roles, compliance steps, and hands-on training.
Alert Fatigue: How Layered Context Turns Thousands of Alerts into Dozens
Alert fatigue, sometimes known as alarm fatigue, happens when security team members are desensitized by too many notifications, leading them to miss critical signals and legitimate warnings.
Tal Moriah Posts
Building an AI Detection Engine That Understands Agent Intent
Analyzing model input and output logs in an AI-native detection pipeline to understand and uncover malicious AI agent behavior
Investing Together: Wiz Defend and Google Security Operations
Continuing to deepen the integration between Wiz Defend and Google Security Operations, helping teams work faster wherever they choose to investigate
Wiz at Black Hat 2026: Driving AI Threat Readiness
Announcing new capabilities that help organizations prepare for the AI era by expanding visibility and accelerating response, so security teams can defend at machine speed.
AI Threat Readiness Pillar 4: Detect and contain threats in real-time
Your guide to operationalizing AI-powered threat detection and response with Wiz to stay ahead of AI-driven attackers.
The Wiz Blue Agent, now Generally Available
Accelerate your SecOps team with the Blue Agent for threat investigation, now Generally Available
AI-Powered Forensics, at Cloud Speed
Reviewing Wiz’s approach to forensics in the cloud era, and announcing the public preview of AI-powered, context-aware forensics capabilities
Empower and Accelerate Your SOC with the Blue Agent
Meet the Blue Agent: AI-powered threat triage built on the Wiz platform. Investigate every threat with speed and transparency
AI-Powered Wiz: From Agents to Everyday Intelligence
How Wiz AI Agents and Integrations Meet You Where You Work
Defend Agentless Workload Detection: Bringing Visibility to Blind Spots in Threat Detection
Providing unconditional visibility into your environment
Introducing Wiz Incident Response: Your Expert Partner for Cloud Security Incidents
Announcing the public preview of Wiz’s in-house Incident Response service—empowering customers to investigate, contain, and resolve cyber incidents with confidence