Wiz
Connect Wiz to Clearly AI to bring cloud security context into reviews, risk analysis, and project workflows.
Overview
The Wiz integration imports Wiz Projects and posture findings as Clearly project sources. Clearly uses those findings as review context so teams can analyze cloud security posture, answer review templates, and identify security gaps.
This is the initial Wiz integration. More finding types and workflow actions are planned.
The current integration supports:
- Wiz client credentials authentication.
- Wiz API region and tenant class configuration.
- Wiz Project discovery.
- Wiz Project source creation across five finding types: Issues, Cloud Configuration (CSPM), Vulnerability, Secret, and IaC.
- Per-source severity and status filters.
- Preview counts per finding type before saving a source.
- Importing matching Wiz findings as markdown context for Clearly AI reviews and chat.
Connect Wiz
- In Clearly, open Integrations.
- Select Wiz from the Security or Enabled Integrations section.
- Enter your Wiz Client ID and Client Secret.
- Choose the Wiz Region for your tenant (for example,
us1,us2,us3,us4,us8,us17,eu1,eu2, orgov1). The region selects the Wiz API host Clearly calls (https://api.<region>.app.wiz.io/graphql). - Choose the Tenant class:
- Commercial — token endpoint
https://auth.app.wiz.io/oauth/token - Gov — token endpoint
https://auth.app.wiz.us/oauth/token - Gov AWS — token endpoint
https://auth.gov.wiz.io/oauth/token
- Commercial — token endpoint
- Select Apply & Test during first setup. After the integration is enabled, the panel shows Disable and Remove actions.
Clearly requests tokens with the client_credentials grant and the wiz-api audience.
Your Wiz service account needs these read scopes:
| Scope | Used for |
|---|---|
read:projects | List Wiz Projects available to the service account |
read:issues | Import Wiz Issues into Clearly |
read:vulnerabilities | Read vulnerability findings |
read:cloud_configuration | Read cloud configuration findings |
read:iac_configuration_finding | Read IaC findings |
read:secret_instances | Read secret findings |
The Client ID and Client Secret are stored as a workspace-level secret. Use a dedicated Wiz service account rather than an individual user, and grant only the scopes listed above.
Add Wiz findings to a project
- Open Projects.
- Select the project you want to review.
- Select Manage Sources.
- Select Search Integrations.
- Choose Wiz.
- Select a Wiz Project.
- Choose one or more Finding types: Issues, Cloud Configuration (CSPM), Vulnerability, Secret, or IaC.
- Choose a Severity floor. Clearly AI imports findings at that severity or higher. Available values:
INFO,LOW,MEDIUM(default),HIGH,CRITICAL. - Choose statuses, such as Open (default), In progress, Resolved, or Rejected.
- Review Preview counts to confirm how many findings match your filters per finding type.
- Select Save Source.
Current supported workflows
Cloud security review context
Clearly AI imports selected Wiz findings into a project so reviews can use them as evidence. Each imported finding is rendered as markdown including:
- Finding ID, finding type, severity, status, and last-updated timestamp.
- Affected resource (ID, name, type, and cloud platform).
- Parent Wiz Projects.
- Description, evidence chain (framework, category, control hierarchy for cloud configuration findings; OS / image / IP / exploit flag for vulnerabilities; source rules, service tickets, and notes for Issues).
- Remediation guidance.
- A deep link back to the finding in Wiz.
Cloud Configuration (CSPM) findings include extra context to help the reviewer connect a finding to the rule that produced it:
- Rule — Wiz rule short ID, service type, whether the rule is Wiz built-in or customer-authored, and any risks it mitigates.
- Cloud Context — provider resource ID, native type, region, subscription/account name and external ID, tags, and first-seen timestamp.
- Resource-specific Remediation — when Wiz provides node-level remediation that differs from the rule-level guidance.
Use findings in reviews and chat
After Wiz findings are saved as a source, Clearly can use them in review template reviews, compliance analysis, and project chat.
Filtered source creation
Use the source picker to narrow imported findings by Wiz Project, minimum severity, and status. Preview counts show how many findings match before you save.
Not yet supported
- Wiz Data findings are visible in the source picker but cannot yet be selected. The Wiz API does not currently expose a queryable connection for data findings.
- Clearly AI imports Wiz findings for analysis only. Updating, closing, or otherwise modifying findings back in Wiz is not yet available.
- A single Wiz Project source imports up to the first 500 matching findings per finding type. Use narrower filters or add additional sources for larger projects.
- Secret findings are filtered to the chosen Wiz Project on the Clearly AI side because the Wiz Secret API does not expose a project filter. Severity and status filters still apply directly at Wiz.