AI Defense Stack

AI security posture management & discovery

Wiz AI Security Posture Management (AI-SPM): agentless posture management tool for cloud AI

Wiz AI-SPM is an agentless posture management tool for cloud AI from Google. It is a commercial product offered as: SaaS, Cloud-native. Pricing model: not published.

  • Last reviewed
Visit Wiz AI-SPM (opens in a new tab)
Commercial Layer 2: Discovery and posture

Best for

Cloud security teams that want agentless discovery of AI services and their risks inside a cloud security platform

Ownership

Google announced on March 11, 2026 that it completed its acquisition of Wiz, which joins Google Cloud and keeps its brand. Source, checked October 21, 2026: googlecloudpresscorner.com (opens in a new tab)

Consider instead if

  • Your AI workloads run mainly on Azure, AWS and Google Cloud and you already use Microsoft Defender for Cloud. See Defender AI-SPM.

What Wiz AI-SPM does

Wiz AI-SPM is the AI security posture module of the Wiz cloud security platform. The vendor says it finds AI services, technologies and SDKs without agents, including managed services such as Amazon SageMaker and OpenAI, and builds an AI bill of materials that surfaces shadow AI. Built-in rules flag misconfigured AI services, including OpenAI and Amazon Bedrock, and infrastructure as code scanning extends checks into development. The page also describes data security posture for AI, attack path analysis, exposed AI endpoint detection, an AI Security Dashboard and AI runtime protection. Wiz publishes plan names but no prices, and Google completed its acquisition of Wiz in March 2026.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Vendor
Google (Wiz) Source, checked October 21, 2026: googlecloudpresscorner.com (opens in a new tab)
Status
Active Source, checked October 21, 2026: wiz.io (opens in a new tab)
Ownership
Google announced on March 11, 2026 that it completed its acquisition of Wiz, which joins Google Cloud and keeps its brand. Source, checked October 21, 2026: googlecloudpresscorner.com (opens in a new tab)
Open source
No: closed source (proprietary) Source, checked October 21, 2026: wiz.io (opens in a new tab)
Latest release
Not documented in the sources we checked
Deployment
SaaS, Cloud-native Source, checked October 21, 2026: wiz.io (opens in a new tab)
Pricing model
Not published in the sources we checked Source, checked October 21, 2026: wiz.io (opens in a new tab)
Website
wiz.io Source, checked October 21, 2026: wiz.io (opens in a new tab)
Documentation
Not documented in the sources we checked
API reference
Not documented in the sources we checked
Quickstart
Not documented in the sources we checked
Security page
wiz.io Source, checked October 21, 2026: wiz.io (opens in a new tab)
Attestations or disclosure
ISO 27001, ISO 27017, ISO 27018 and ISO 27701 recertification (November 19, 2025); SOC 2 Type II + HIPAA report and SOC 3 report available in the Customer Trust Center; PCI DSS v4.0.1 Attestation of Compliance and Report on Compliance (December 3, 2025) Source, checked October 21, 2026: wiz.io (opens in a new tab)

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Integrations

Where Wiz AI-SPM fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that Wiz AI-SPM covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L2 Discovery Discovery and posture Primary Find the AI models, services, agents, MCP servers and AI apps in use, and check how each is configured and exposed. Follows its category, AI security posture management & discovery
L6 Runtime Runtime guardrails Also covers Documents AI runtime protection against prompt injection and rogue agents. Offers AI runtime protection against prompt injection and rogue agents

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

OWASP LLM risks mapped to Wiz AI-SPM, with the capabilities each mapping rests on
RiskHow it appliesBased on
LLM01 Prompt Injection The page lists runtime protection for prompt injection. Offers AI runtime protection against prompt injection and rogue agents
LLM02 Sensitive Information Disclosure Data security posture for AI detects sensitive training data and leakage risks. Detects sensitive training data and data leakage risks for AI with data security posture management
LLM03 Supply Chain An AI bill of materials inventories AI services, technologies and SDKs. Discovers AI services, technologies and SDKs and builds an AI bill of materials
LLM06 Excessive Agency The page lists runtime protection against rogue agents. Offers AI runtime protection against prompt injection and rogue agents

Not mapped in our analysis: LLM08. These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.

Alternatives and related tools

More in AI security posture management & discovery, ranked within the category by Coverage Score.

Snyk Evo AI-SPM

Snyk

Commercial
  • SaaS
  • CLI

Maps AI models, agents, datasets and MCP servers across code and apps, scores model risk and enforces policy.

Best for: Teams that already use Snyk and want an inventory of AI models, agents and MCP servers tied to policy in the same platform

Coverage Score 64 out of 100
  • LLM03 Supply Chain
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency
  • +1 more

Reviewed

Microsoft Defender for Cloud AI security posture management

Microsoft

Commercial
  • Cloud-native

Finds AI workloads across Azure, AWS and Google Cloud and flags risks with recommendations and attack paths.

Best for: Teams already using Defender for Cloud that want AI workloads in Azure, AWS and Google Cloud added to their posture view

Coverage Score 55 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM03 Supply Chain

Reviewed

Noma Security

Noma Security

Commercial
  • SaaS
  • On-prem

Finds agents, MCP servers, skills and models across endpoint, SaaS and cloud and flags their risks.

Best for: Security teams that need to find and govern agents, MCP servers and models spread across endpoints, SaaS and cloud

Coverage Score 53 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM03 Supply Chain
  • LLM06 Excessive Agency

Reviewed

Wiz AI-SPM FAQ

Does Wiz AI-SPM need agents?

The vendor page says it finds AI services, technologies and SDKs without agents, including managed services such as Amazon SageMaker and OpenAI.

Who owns Wiz?

Google announced on March 11, 2026 that it completed its acquisition of Wiz. The release says Wiz joins Google Cloud and maintains its brand.

What does Wiz AI-SPM cost?

The pricing page names Wiz One, Wiz Go and À la Carte plans and asks for a custom quote. It states no prices.

Does Wiz AI-SPM find sensitive data?

Yes, as a secondary capability. The page says its data security posture management (DSPM) for AI detects sensitive training data and identifies data leakage risks. That is posture detection, so we list Wiz AI-SPM under discovery and posture, not under the data protection layer, which covers tools that redact, tokenize or block data.

Key facts you can cite

We have no commercial relationship with Google (Wiz).

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.