Wiz Integration

Setup Guide — Export Validated Pentest Findings to Wiz

Integration Overview

Wiz is a cloud security platform that gives security teams visibility into risk across their cloud environments through its Security Graph.

The Cobalt and Wiz integration exports your Cobalt pentest findings to Wiz, so offensive security results appear alongside your existing cloud security data. This removes the need to re-enter findings in Wiz by hand.

How it works:

• A Cobalt organization connects to one Wiz tenant.
• You choose which pentests to sync. All findings in a selected pentest are sent to Wiz automatically.
• Findings sync right away when you select a pentest, then once daily to keep them current.
• When a finding is marked Fixed, Cobalt stops sending it and removes it from Wiz.

Before you begin

Have the following ready:

Item	Where it comes from
Client ID	Wiz Settings › Service Accounts
Client Secret	Wiz Settings › Service Accounts (encrypted and stored securely by Cobalt)
Wiz API Endpoint URL	The GraphQL endpoint for your Wiz tenant, e.g. https://api.us1.app.wiz.io/graphql

Note Your Wiz service account must be permitted to use the Wiz API; confirm the specific scopes and permissions with your Wiz administrator or Wiz's documentation, as those requirements are set on the Wiz side.

Exporting findings to Wiz

Step 1 — Open the Wiz Integration

1. In the left side navigation, select Integrations.
2. Click the Wiz card.

Step 2 — Connect

Enter your Wiz API credentials so Cobalt can upload data to your Security Graph.

1. Enter your Client ID and Client Secret.
2. Enter the Wiz API Endpoint and Wiz Auth URL for your tenant.
3. Click Next.

Step 3 — Select & Export

On the Choose Pentests screen, choose which pentests to sync with Wiz:

• Pentest to Sync — pick the Cobalt Pentests you want Wiz to ingest. All Findings in the selected pentest will sync with Wiz automatically.

Click NEXT.

Step 4 — Confirm and Sync

Review the selected Pentest and choose Confirm and Sync

Once the Pentests selection has been confirmed and synced an Overview page will be displayed.

On this page:

• Details about the Wiz Tenant, Cobalt Org, Integration connection date, and the last successful sync
• Details about the pentests that are currently synced to Wiz, the test status, individual sync status, and findings count.
• The option to add additional Pentests to sync
• Option to fully disable the Wiz integration

Additional Details

• Only findings in a Pending Fix state are synced to Wiz.

• Findings are synced automatically when the test is chosen, then a daily sync to keep findings fresh

  • Findings are removed from Wiz when they are not synced for 7 days.

• Once a Pentest Finding is moved to Fixed it will be omitted from the Wiz sync and removed from the Wiz platform.

Need help? Contact your Cobalt representative for assistance with the Wiz integration.