CTO Point of View: Why Wiz is launching a Runtime Sensor

This document outlines Wiz’s cloud-first detection and response approach, extending its agentless security posture management with a lightweight eBPF-based Runtime Sensor that adds runtime network, process, and memory telemetry. By correlating cloud and Kubernetes events with the Wiz Security Graph, it prioritizes alerts, assesses blast radius, and provides end-to-end visibility across workloads and infrastructure—particularly for cloud-native, ephemeral environments—while also ingesting signals from existing EDR/runtime tools.