Wiz achieves FedRAMP Moderate authorization

Wiz is now the fastest company to be listed FedRAMP Moderate Authorized on the FedRAMP Marketplace, making it easier for government agencies to effectively protect their cloud environment with Wiz’s CNAPP

Today, we are proud to announce that Wiz for Government has achieved FedRAMP® Moderate authorization just four years since the company was founded. This achievement, in addition to ourStateRAMP authorization(1), shows our commitment to the US public sector and empowering these organizations to secure everything they build and run in the cloud.

We are excited about the timing of our FedRAMP authorization.  The Federal Government remains in a transition to the cloud. The President's EO on Zero Trust [EO 14028] was an effort to modernize cyber across the Government to keep pace with the cloud.   AI now creates opportunities and cyber challenges for the government.  Wiz stands at the brink of all three: cloud, AI, and cyber.  Wiz provides a single platform to view and contextualize risk across all clouds as well as AI security posture management.

FedRAMP is a government-wide program that provides a standardized approach to security in the cloud, helping government agencies accelerate cloud adoption with a common security framework. Achieving a FedRAMP Moderate authorization means Wiz has gone under rigorous internal and external security assessment to show it meets the security standards of the Federal Government and complies with required controls from the National Institute of Standards and Technology (NIST) Special Publication 800-53.

As government agencies protect critical missions, they are required to follow the highestsecurity standards(2) in their cloud environments. In Executive Order on Improving the Nation’s Cybersecurity (EO 14028(3), May 2021), the White House made it clear that:

To keep pace with today’s dynamic and increasingly sophisticated cyber threat environment, the Federal Government must take decisive steps to modernize its approach to cybersecurity, including by increasing the Federal Government’s visibility into threats, while protecting privacy and civil liberties.

Wiz helps government agencies address the challenges discussed in the EO; providing a critical service to ensure their cloud security keeps pace with the complexity ofcloud threats(4). WithWiz FedRAMP Moderate authorization, it is now even easier for government agencies to take advantage of our Cloud-Native Application Protection Platform (CNAPP(5)) to effectively improve their cybersecurity posture in the cloud.

Government civilian and defense agencies are already using Wiz to secure their missions in the cloud. One example isthe U.S Navy(6), which is leveraging Wiz to secure their COSMOS platform and effectively prioritize alerts according to risk level and potential remediation paths.

Wiz for Government(7) is a cloud security solution that enables the Government to operate in the cloud with confidence and support critical missions more effectively. Wiz provides the Government with complete visibility into their environment, proactive risk reduction, and continuous compliance assessment in the cloud, helping them accelerate their journey tozero trust(8).

With Wiz we’ve been able to provide real time risk assessment into these environments, out-of-the-box for all our users. COSMOS is automating those steps to be able to be able to auto-generate the security documentation, automate regular deliverables like POA&Ms; and with that we’ve been able to take a process that typically takes 3 months, down to 3 minutes

Gain 100% visibility-Wiz, a revolutionary new approach tocloud security(9), enables agencies to remove the risk of blind spots. Wiz’s agentless, graph-based CNAPP provides full-stack visibility into every technology running in your environment across virtual machines, containers, serverless, and AI technologies all without having to deploy a single agent. You can connect your entire environment to Wiz in minutes and gain immediate time-to-value.

Remove critical security risk in the cloud-Wiz continuously monitors for risk in your environment across vulnerabilities, identities, network exposures, misconfigurations, secrets, and malware. Risks are prioritized and modeled on the Wiz Security Graph enabling agencies to effectively focus on removing the most critical risk in their environment.

Meet compliance requirement-Agencies, contractors, and other cloud providers can assess and compare their cloud compliance posture against CIS Benchmarks including CIS Linux, Windows, Red Hat STIG benchmarks. You can leverage Wiz’s over 140 built-in compliance frameworks to help build compliance reports, and investigate vulnerability findings and inventory.

Ensure readiness against the next Log4j-Stay ahead of threats like the Log4j, MOVEit, and XZ Backdoor Util vulnerabilities with Wiz’s Threat Center which flags down emerging threats and whether you are exposed to them in your environment.

Establish secure use of AI-With Wiz AI-SPM (AI Security Posture Management) capabilities, agencies can securely adopt AI in their organization by gaining visibility into their AI pipelines, detecting misconfigurations in AI services such as Amazon Bedrock and Sagemaker, and proactively removing attack paths to AI models

The Wiz Security Graph

Wiz’s approach to cloud security is based on our Wiz Security Graph, which enables the Government to effectively remove the most critical risk in their environment with graph-based context. The Security Graph models every resource and technology in your cloud, as well as every risk found in your environment. Wiz conducts adeep risk assessment(10) across misconfigurations, network exposure, secrets, vulnerabilities, data, malware, and identities and maps all risks on the graph which enables Wiz to detect attack paths in your environment and provide you with a prioritized queue of risks based on the real criticality of an issue. With the Wiz Security Graph, you don’t have to deal with alert fatigue faced with traditional tools anymore, and you can truly focus on the risks that pose a real threat to your business.

Hear more about how Wiz helps the U.S. Navy secure their cloud environmentin the case study(6) with Strategic Business Systems (SBS). Read here to learn howGartner defines a complete CNAPP solution(11). You can learn more about Wiz for Gov by visiting theWiz for Government(7) webpage. If you prefer alive demo(12), we would love to connect with you.

Links in this article:

1https://www.wiz.io/blog/wiz-achieves-stateramp-authorization

2https://www.wiz.io/academy/cloud-security-standards

3https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/

4https://www.wiz.io/cloud-threat-landscape

5https://www.wiz.io/academy/what-is-a-cloud-native-application-protection-platform-cnapp

6https://www.wiz.io/customers/niwc-pac-sbs

7https://www.wiz.io/verticals/government

8https://www.wiz.io/academy/how-to-implement-zero-trust

9https://www.wiz.io/academy/what-is-cloud-security

10https://www.wiz.io/lp/cloud-security-assessment

11https://www.wiz.io/blog/gartner-cnapp-market-guide-key-takeaways

12https://www.wiz.io/demo

See how Wiz protects your cloud from code to runtime

Our next steps and hope for the industry.

Wiz Threat Research recently spotted a new phishing campaign targeting AWS accounts.

The Wizlympic games have officially opened — do you have what it takes to become the master of cloud services?

Get a personalized demo

©2026Wiz, Inc.

StatusPrivacy PolicyTerms of UseModern Slavery StatementCookie Settings