Expanding the Zero Critical Club to set a new standard for AppSec and SecOps teams

We are introducing Zero Code Criticals and Zero Time to Respond clubs to give every team a clear north star for secure development and rapid response

Security teams today are caught in a difficult position. Development teams are shipping features faster than ever, naturally expanding the attack surface, while attackers are leveraging AI to weaponize vulnerabilities faster than ever.

In this environment, good security isn’t defined by the tools you own, it’s defined by the velocity of your security team. To move the needle, security must be usable for everyone involved. That requires a shift in three areas:

Context-Driven Prioritization:Understanding risk and threats in context, so teams can fix what actually matters and not waste time on noise.

Measurable Standards of Excellence:Replacing vague goals with transparent, achievable milestones like the Zero Critical Club that align Security under one mission.

Frictionless Workflows:Embedding security directly into the developer's ecosystem, enabling teams to identify and resolve risks within their existing tools without disrupting the pace of innovation.

Securing cloud-native architectures isn’t a single task, it’s a multi-layered discipline. To protect the entire code-to-runtime lifecycle, teams must master three domains:

Proactive Posture:Removing risks in the cloud before they are discovered.

Shifting Left:Hardening the SDLC to prevent risks from ever reaching production.

Real-time Defense:Detecting and neutralizing active threats to limit the blast radius.

Wiz was built to protect this entire lifecycle from code to runtime. But we know that technology is only half the battle, true security success requires a clear destination. Two years ago, we launched theZero Critical Clubto reward customers for building a world-class cloud security posture. Today,over 50%of our customers have reached this milestone.

Our team looks at Wiz’s Critical Issues daily—it’s how we measure security success. Wiz enables us to translate complex cloud risks into layman’s terms, helping non-security teams understand and act on risks in their own environments. By democratizing access to context-rich issues, R1 turned cloud security into a self-serve practice embedded across engineering, ops, and infrastructure teams.

This proves that when leaders provide a clear north star, they can successfully democratize security across their entire organization.

Building on the success of the Zero Critical Club, we are expanding the program to cover two more critical frontiers in modern security: application security and threat defense. We are thrilled to introduce two new milestones that provide a definitive marker for excellence:

Zero Code Criticals:Built for teams leveraging Wiz Code. This milestone rewards organizations that have successfully shifted left, ensuring that Critical Code Issues are identified and fixed in the development pipeline before they ever reach production cloud environments.

Zero Time to Respond:This recognizes the elite SecOps teams that have excellent Mean Time to Respond (MTTR). By neutralizing active threats in near real-time, these teams effectively close the attacker’s window of opportunity before they reach your crown jewels.

Reaching these milestones is a significant achievement and maintaining them is where true security excellence lives. These new clubs aren't just about recognition, they are about fostering the collaboration between Cloud Security, Dev, and SecOps teams that modern cloud demands. Whether you are hardening your code posture or defending your runtime, the path to excellence is now clearly defined in Wiz.

Are you ready to join the club? If you’re not a Wiz customer,reach outto us to get started on your journey to Zero today. If you’re already a Wiz customer, contact your account team today to see where your organization stands against these new benchmarks and how they can collaborate with you to achieve these new milestones.

Wiz Research reveals the data behind Shai-Hulud's 2.0 long tail, the massive gap in cloud credential rotation, a potential link to the Trust Wallet incident, and how we finally "snipped the tail" on a month of ongoing infections.

Outpacing React2Shell using pre-breach alerts from Wiz ASM to eliminate exploitable risk before attackers find them

Detect and mitigate CVE-2025-14847, an unauthenticated information leak vulnerability in MongoDB. Exploitation has been observed in the wild. Organizations should patch urgently.

Get a personalized demo

©2026Wiz, Inc.

StatusPrivacy PolicyTerms of UseModern Slavery StatementCookie Settings