Securing clouds, securely

This document describes Wiz’s agentless, API-based cloud workload scanner and its security-by-design principles, including least-privilege access, no code execution in customer environments, regional data residency, stateless resiliency, and multi-cloud coverage. It outlines two deployment models (Wiz-hosted SaaS and customer-hosted) and highlights privacy safeguards such as redaction and hashing of scan results, along with benefits like fast deployment and scalability.