Snapshot 249680
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Wiz 2026 Security & Privacy Reports and Certifications Available Trust Center Start your security review View & download sensitive information Overview At Wiz, trust is the foundation of our partnership. To provide enterprise-grade peace of mind, this Customer Trust Center allows you to self-serve documentation about our security and compliance posture. Come see why 50% of Fortune 100 companies rely on Wiz to protect their clouds. Our most-downloaded files among the 75+ here include: Audit reports against 8+ risk and compliance frameworks including SOC 2 Type II with HIPAA/HITECH, ISO 27001 and others. Pentest report and pentest vendor credentials. Certificates of Insurance (COI) Completed SIG Lite and CAIQ assessments. Internal Policies that touch on security, privacy, data, AI, and legal matters. See also our ever-expanding list of Frequently Asked Questions. However, for technical product info please visit Wiz Docs. And for information about our FedRAMP-authorized platform (“Wiz for Gov”), reach out to your Wiz point of contact or support@wiz.us. Note: While Wiz employees are onboarding to Google and processes are integrating, it is possible for processes and controls to be governed by either a Wiz policy, a Google policy, or a combination of both. Wiz will update its policies or materials on a continuous basis to reflect the policy that applies. Compliance CCPA CSA STAR Level 1 ProcessUnity ISO/IEC 27001:2022 ISO/IEC 27017:2015 ISO/IEC 27018:2019 ISO/IEC 27701 SOC 2 Type 2 SOC 3 GovRAMP TruSight PCI DSS v4.0.1 TX-RAMP FedRAMP High IRAP EcoVadis OCT 2025 - Committed CPSTIC Serv High Wiz is reviewed and trusted by Morgan Stanley Salesforce Slack Blackstone DocuSign ServiceNow Siemens Canva Colgate-Palmolive BMW Redis Aon LVMH Mars Cushman & Wakefield Bridgewater Associates Priceline ManpowerGroup REI Fox Corporation Brex InterContinental Hotels Group Shell FICO Zendesk® Takeda ASOS Documents Featured Documents REPORTSPenetration Test Report REPORTSSOC 2 Type II + HIPAA Report REPORTSSOC 3 Report COMPLIANCECSA STAR Level 1 COMPLIANCEISO/IEC 27001:2022 COMPLIANCEISO/IEC 27701 COMPLIANCEProcessUnity Customer Security Review Resources Try the Wiz Trust Center Wiz Customer Audit Program Wiz Trust Center Access Guide Reports Accessibility Report Data Flow Diagram (DFD) Disaster Recovery Test Report View more Policies Acceptable Use Policy Access Management Policy Asset Management Policy View more Self-Assessments CAIQ CAIQ Lite SIG Lite Data Security Access Monitoring Data Backups Data Erasure View more App Security Code Analysis Credential Management Software Development Lifecycle View more Endpoint Security Disk Encryption Endpoint Detection & Response Mobile Device Management AI AI Governance Policy AI Features AI Transparency and Choice View more Legal Subprocessors Data Processing Agreement Insurance View more ESG Anti-Bribery and Corruption Anti-Modern Slavery Code of Conduct View more Data Privacy Cookies Data Breach Notifications Employee Privacy Training View more BC/DR Business Continuity Plan (BCP) Data Backup/Backup Protection Disaster Recovery Plan (DRP) View more Access Control Data Access Logging Password Security Infrastructure Status Monitoring Amazon Web Services Anti-DDoS View more Incident Response Incident Response Tabletop Exercise Attestation Letter Impact on Wiz of Specific Security Vulnerabilities or Breaches Incident Response Policy Knowledge Base (FAQ) Trust Center Updates Wiz 2026 Security & Privacy Reports and Certifications Available Compliance Wiz is proud to announce we have completed our SOC 2 Type II + HIPAA and SOC 3 audit reports and our ISO 27001, ISO 27017, ISO 27018, and ISO 27701 recertifications for this year! We worked together with A-LIGN as our audit partners and are excited to have completed another successful audit cycle. The reports and certifications are now available in the Compliance section of our Trust Center. PHP2Shell Vulnerabilities - No Impact to Wiz General PHP2Shell vulnerabilities - No Impact to Wiz Wiz is not impacted by the critical memory-safety vulnerabilities in core PHP, dubbed "PHP2Shell" (CVE-2026-109618, CVE-2026-109619). Wiz collaborated with industry partners to discover and responsibly disclose these vulnerabilities, so our team knows them extremely well. You can read Wiz’s technical write-ups about the discovery and collaboration here: https://www.wiz.io/blog/php2shell-php-rce https://www.php2shell.com/ The Wiz Research team has been monitoring for exploitation attempts across our customers’ environments for the past several days. Of course, we’ll proactively reach out to any customer if we detect suspicious activity related to these vulnerabilities. Wiz account teams are sharing additional details with customers about using the Wiz platform to detect and block exploitation of this vulnerability, and standing by to support as needed. Please continue to monitor Wiz's Threat Center for updates and information on safeguarding your own environments against these vulnerabilities. (Updated Oct 26, 2026 to clarify that Wiz generally, not just the Wiz product, has no exposure to PHP2Shell.) 2026 Penetration Test Report Available Compliance We have released our latest third-party penetration test report, which includes a security assessment of the Wiz web platform and external infrastructure. Alongside the report, we have published an addendum that outlines the current status of the issues identified during the assessment. Both the report and the addendum are now available in the Trust Center under the Reports card here. Vercel / Context.ai Security Incident - No Impact to Wiz General We are aware of the recent Vercel security incident following the compromise of Context.ai and can confirm that no part of Wiz’s product or production environment was impacted. While we were not affected, we have proactively rotated credentials for all integrations as a rigorous security precaution to ensure continued platform integrity. For further information on this incident, please refer to Vercel's official security bulletin. 2026 Annual Disaster Recovery Test Report Available Compliance As part of our commitment to ensuring the highest level of service availability and data protection, Wiz performs annual disaster recovery exercises. On January 14, 2026, Wiz conducted a disaster recovery exercise that simulated a scenario involving a regional AWS outage. This simulated a disruption to a primary data center, impacting the availability of Wiz systems and services. As a result in this tabletop exercise, Wiz initiated the cross-regional disaster recovery strategy and executed a comprehensive disaster recovery plan. The report is available in the Reports card of the Trust Center. If you think you may have discovered a vulnerability, please send us a note. Report issue