AskAI – Text to Security Graph Query

This blog outlines Wiz’s approach to building a user-friendly text-to-query search engine for the Security Graph, using Anthropic Sonnet 3.5 via Amazon Bedrock, prompt engineering (zero-shot, few-shot, and RAG), and a structured divide-and-conquer retrieval process. The team augmented performance by curating and expanding an examples database, clustering real-world queries with UMAP/DBSCAN to find gaps, and applying Maximal Marginal Relevance (MMR) for diverse, relevant context. These methods collectively improved the accuracy and reliability of generating complex graph queries from natural language.