Streamlining OS and Application Hardening: Revealing Misconfigurations with Wiz’s Agentless Custom Host Configuration Rules

This post describes Wiz’s agentless custom host configuration rules, enabling teams to create OVAL-style checks to audit OS and application configurations across cloud workloads without agents or privileged access. It covers selecting target platforms, writing rule logic (e.g., a regex-based check in /etc/nginx/nginx.conf to ensure merge_slashes is set to on to avoid directory traversal risk), and setting metadata like severity and compliance mappings, with automated findings and drift detection to support remediation at scale.