How Wiz Meets CISA “Secure by Design” Objectives

Wiz reports progress on its Secure by Design commitments, highlighting SAML SSO integration (with mandatory MFA for direct auth), least-privilege access, memory-safe implementation (Go/Rust), strongly typed GraphQL APIs, and configurable login/session protections. It details audit logging with 180-day retention and SIEM export, supply chain controls (automated dependency scanning, third‑party risk management, OSS governance), in-product SBOM inventory, formal SLAs and audits for vulnerability management, a Trust Center for security artifacts, an external bug bounty, and routine release-note disclosures of patched issues.