---
title: "Wiz"
description: "Wiz Integration"
canonical_url: "https://docs.cobalt.io/articles/wiz-BEF4GZvkG7"
md_url: "https://docs.cobalt.io/articles/wiz-BEF4GZvkG7.md"
---
# Wiz

**Wiz Integration**

Setup Guide — Export Validated Pentest Findings to Wiz

**Integration Overview**

Wiz is a cloud security platform that gives security teams visibility into risk across their cloud environments through its Security Graph.

The Cobalt and Wiz integration exports your Cobalt pentest findings to Wiz, so offensive security results appear alongside your existing cloud security data. This removes the need to re-enter findings in Wiz by hand.

How it works:

* A Cobalt organization connects to one Wiz tenant.
* You choose which pentests to sync. All findings in a selected pentest are sent to Wiz automatically.
* Findings sync right away when you select a pentest, then once daily to keep them current.
* When a finding is marked Fixed, Cobalt stops sending it and removes it from Wiz.

 ![](https://docs.cobalt.io/api/attachments.redirect?id=545e7c06-4556-4849-b221-7baab1ab7e48 " =271x342")

# **Before you begin**

Have the following ready:

| Item | Where it comes from |
|:---|:---|
| Client ID | Wiz Settings › Service Accounts |
| Client Secret | Wiz Settings › Service Accounts (encrypted and stored securely by Cobalt) |
| Wiz API Endpoint URL | The GraphQL endpoint for your Wiz tenant, e.g. https://api.us1.app.wiz.io/graphql |
| Wiz Integration ID | Wiz console › Settings › Integrations (the third-party integration's UUID) |

| Note Your Wiz service account must be permitted to use the Wiz API; confirm the specific scopes and permissions with your Wiz administrator or Wiz's documentation, as those requirements are set on the Wiz side. |
|:---|
|    |

# **Exporting findings to Wiz**

## **Step 1 — Open the Wiz Integration**


1. In the left side navigation, select Integrations.
2. Click the Wiz card.

## **Step 2 — Connect**

Enter your Wiz API credentials so Cobalt can upload data to your Security Graph.


1. Enter your **Client ID** and **Client Secret**.
2. Confirm the **Wiz API Endpoint URL** for your tenant.
3. Enter the **Wiz Integration ID** — the third-party integration's UUID from the Wiz console under Settings › Integrations. This tells Wiz which integration the exported data belongs to.
4. Click **Next.**

 ![](https://docs.cobalt.io/api/attachments.redirect?id=f8e1bc74-7b35-4364-885c-0651d178b307 " =473x637")

## **Step 3 — Select & Export**

On the **Choose Pentests** screen, choose which pentests to sync with Wiz:

* **Pentest to Sync** — pick the Cobalt Pentests you want Wiz to ingest. All Findings in the selected pentest will sync with Wiz automatically.

 ![](https://docs.cobalt.io/api/attachments.redirect?id=0bc38dae-a99c-48bf-b1df-fbe5eb306e38 " =978x855")

Click **NEXT**.

## **Step 4 — Confirm and Sync**

Review the selected Pentest and choose Confirm and Sync

 ![](https://docs.cobalt.io/api/attachments.redirect?id=f7fb590d-4d79-4dc2-9149-2f7075b911f9 " =975x568")

Once the Pentests selection has been confirmed and synced an Overview page will be displayed.

On this page:

* Details about the Wiz Tenant, Cobalt Org, Integration connection date, and the last successful sync
* Details about the pentests that are currently synced to Wiz, the test status, individual sync status, and findings count.
* The option to add additional Pentests to sync
* Option to fully disable the Wiz integration

 ![](https://docs.cobalt.io/api/attachments.redirect?id=d50dda9e-136b-47df-a265-7afcfe63cf75 " =1302x677")

# **Additional Details**

* Only findings in a Pending Fix state are synced to Wiz.
* Findings are synced automatically when the test is chosen, then a daily sync to keep findings fresh
  * Findings are removed from Wiz when they are not synced for 7 days.
* Once a Pentest Finding is moved to Fixed it will be omitted from the Wiz sync and removed from the Wiz platform.

_Need help? Contact your Cobalt representative for assistance with the Wiz integration._