Every development team knows the feeling of opening a vulnerability export on Monday morning and staring at a spreadsheet with 1,000 "CRITICAL" rows. The Product Owner dumps all the findings into the backlog and assigns them to developers for the next sprint. A backlog is not a...
If you only use Wiz to browse issues in the console, you probably never think about internal Control IDs. You search by name, filter by severity, and move on with your day. Then you start wiring up response workflows or automation. Suppose you are building out auto-remediations in the...
Introduction Kubernetes clusters generate an obscene amount of noise. Between application stacks dumping debug output, ingress controllers logging every health check, and internal cluster chatter, your logging bill is probably high enough already. Most of it is low-value noise and we dont really care about it. Security logs are...
Three months ago I predicted Security Command Center was heading into maintenance mode. I said Wiz would absorb its multicloud capabilities. Now Security Command Center Enterprise tier shuts down on May 21, 2027. Organizations on Enterprise move automatically to the Premium tier. What Enterprise Actually Offered SCC Enterprise was Google&...
The Shift in Cryptography The foundation of internet security rests on specific mathematical assumptions - problems that are computationally infeasible for classical computers to solve. However, the theoretical boundaries of computing are expanding rapidly. Quantum computers represent a shift that will eventually make our current asymmetric encryption methods obsolete. Powerful quantum...
Introduction Last month I wrote about Google's plans to acquire Wiz. I had concerns about how they would integrate the platforms. The acquisition closed on March 11, 2026. That was fast. Now I am seeing the first signs of integration. Some are exciting. Some are concerning. Security Command...
