Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure

Scan for Good is a Wiz initiative (in partnership with Google DeepMind and with CISA engagement) that leverages AI-powered tooling—such as the Wiz Red Agent and Gemini 3.8 Flash Cyber—to autonomously identify internet-facing exposures and complex attack paths affecting public-interest organizations, critical infrastructure, and major platforms; the post gives anonymized case examples (exposed admin keys to national archives, hospital access-control failures, leaked production databases affecting a rail operator, platform payment and data-exposure issues, and exposed cloud credentials), emphasizes human validation, authorized and minimal testing, private disclosure and remediation, and commits to publishing anonymized research and patterns after fixes.