Cloud security platforms are great at telling you what's exposed. They're not built to tell you what an attacker could actually do with it. That's the gap Cobalt and Wiz are closing together.
As part of the Wiz Integration Network (WIN), we are now bringing our pentesting expertise directly into the Wiz Cloud Security Platform, now part of Google Cloud. The integration connects the Cobalt Offensive Security Platform with the Wiz AI Application Protection Platform, and is generally available through WIN.
Inside-out meets outside-in
Wiz gives teams clear visibility into vulnerabilities, misconfigurations, and potential attack paths from code to runtime; an "inside-out" view of the environment. But understanding what's exposed is a different question from understanding what is realistically exploitable and how an attacker would act on it, and that's exactly the question Cobalt is built to answer.
Cobalt adds the "outside-in" perspective: real pentesters from the Cobalt Core, our network of 500+ vetted experts, exploiting what's exposed, so you know which risks are real and which are just noise. For example, Wiz might flag a storage bucket as publicly exposed; a Cobalt pentest finding can show how an attacker could chain that exposure with a weak IAM policy to exfiltrate data, turning a theoretical misconfiguration into a demonstrated attack path.
Together, that means your Wiz environment doesn't just tell you something could be a problem. It shows you how an attacker could realistically get in, with the proof and context your team needs to prioritize fixing it first.
What the integration does
Once connected, Cobalt pushes your pentest findings directly into the Wiz Pentest Table, automatically, and without manual re-entry. Each finding carries the context your team actually needs to act on it, starting with the pentest details that anchor the finding to a specific asset and target, the vulnerability itself (what it is, how severe it is, and what it means for your environment), the exploitability evidence that proves it's a real risk, and clear remediation guidance, so your team knows exactly what to fix.
Once set up, findings stay in sync automatically, so what you see in Wiz reflects what's current in Cobalt. No manual uploads, no stale data.
Why it matters
Knowing you're vulnerable doesn't reduce your risk; fixing the right vulnerabilities does. By bringing our offensive security context into Wiz, you can connect the attacker's perspective with the cloud context you already use to prioritize, investigate, and remediate, so you can focus remediation effort where it matters most.
Getting started
The integration is available today through WIN to all Cobalt customers with access to integrations, configured through a Wiz service account with scoped permissions, with no additional Cobalt licensing required.