OpenAna + Wiz

Cloud security findings pulled live from Wiz, plus Wiz CLI results for IaC, images and directories.

Live connectionSecurity testing

Ana + Wiz

What Ana does with it.

Findings Ana pulls live or imports, de-duplicates, ranks by real exposure and turns into fixes.

01
Pulls Wiz issues and ranks them by real exposure
02
Traces each finding to the Terraform or manifest that created it
03
Fixes in code with evidence for every closure

Setup

Connected in four steps.

1
Connect
Open Integrations in Ana and connect Wiz with a scoped token, OAuth app or service account.
2
Scope it
Start read-only and choose which projects, repositories or accounts Ana can see.
3
Set the rules
Decide which actions need approval and who approves them - Ana’s guardrails enforce it.
4
Put it to work
Ana uses Wiz in investigations, fixes and reports, and every action is logged.

In practice

Playbooks that use Wiz.

Security

Fixing cloud misconfigurations at the source

Your CSPM tool flags public buckets, wide IAM policies and open security groups. Ana traces each one back to the infrastructure-as-code that created it, fixes it there, and stops it from coming back.

Read the playbook →

Security

Clearing a dependency CVE backlog

Your SCA tool reports thousands of vulnerable dependencies and the number never goes down. Ana works out which are actually reachable, upgrades them safely with tests, and documents why the rest can wait.

Read the playbook →

Used by

Ana’s engineers

Security →SRE / DevOps →

Governed

Every action, approved and logged.

Ana’s guardrails decide what it may do with Wiz, route sensitive actions to named approvers, and keep evidence for each decision. OpenAna is SOC 2 Type II, ISO 27001, HIPAA and GDPR compliant.

Guardrails →Trust center →

FAQ