--- title: "Wiz" slug: "wiz" updated: 2026-03-02T16:08:28Z published: 2026-03-02T16:08:28Z canonical: "docs.databee.buzz/wiz" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # Wiz Wiz is a unified cloud security that enables prevention, active detection and response. Wiz is used by security and development teams to reduce risk, gain unmatched visibility, prioritize risk and enabling business agility. **Integration Method:** API **Tables:** Assessment Finding (99402001), Data Security Finding (2006), Detection Finding (2004), Device Inventory (5001), Scan Activity (6007), Vulnerability Finding (2002), Cloud Resources Inventory Info (5023) The integration supports the following events. | Event | Description | | --- | --- | | Vulnerability Finding | Reads all the vulnerabilities generated in instance. | | Cloud Configuration | Reads all the cloud configuration rules. | | Network Exposure | Reads the network exposure report. | | Issue | Reads an issue, lists issues. | | System Activity | Reads all the system activities generated. | | Host Configuration | Reads host configuration rules and findings. | | Endpoint Attack Surface | Reads all the endpoint attack surfaces. | | Data Finding | Reads all the data findings generated. | | Cloud Resources | Reads all the cloud resources generated | This integration supports the following versions. | Wiz API version | GraphQL API v1.0 | | --- | --- | > [!NOTE] > Note: > > Wiz doesn’t follow a traditional versioning system. As of this document preparation, the latest release was on May 5, 2025. ## Prerequisites - The user should have access to [Wiz portal](https://app.wiz.io/) with an account that has Admin privilege. - The user should have access to the DataBee console. ## Configuration Overview 1. Generate an API Key and Client Secret with the required scopes. 2. Add the [Wiz data feed](/user-manual/docs/wiz#databee-configuration) in the DataBee console with the below parameters. | **DataBee Parameters** | **Wiz Parameters** | | --- | --- | | Key ID | Client ID | | Secret Key | Client Secret | | Token URL | Authentication URL | | API URL | API Endpoint URL | ## Wiz Configuration 1. Login to [Wiz](https://app.wiz.io/) platform. 2. Navigate to **Settings** > **Access Management** > **Service Accounts**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-hb35kerv.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) 3. Click **Add Service Account**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-cngk2yl8.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) 4. Enter ‘Name’ and ‘Description’ of service account and select the ‘Type’ as **Custom Integration (GraphQL API)**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-n64xxuvw.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) 5. Under **API Scopes**, the following permissions need to be granted to fetch all the events. DataBee requires read permissions. | Event Type | Permission | | --- | --- | | Vulnerability Finding | read:vulnerabilities | | Cloud Configuration | read:cloud_configuration | | Network Exposure | read:network_exposure | | Issues | read:issues | | System Activity | read:system_activities | | Host Configuration Finding | read:host_configuration | | External Attack Surface | read:endpoint_attack_surfaces read:issues | | Data Finding | read:data_findings | | Cloud Resources | read:resources | ![A screenshot of a computer Description automatically generated](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-hrzr32b6.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) ![A black background with white text Description automatically generated](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-311qftxt.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/image(455).png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) ![A black background with white text Description automatically generated with medium confidence](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-11y5b92d.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) ![A black background with white text Description automatically generated](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-4mo2oh03.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) ![A black background with white text Description automatically generated](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-qb1q4ek8.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/Resources.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) 6. Click on **Add Service Account**. 7. Copy the secret credentials as they will only be shown once. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-cqf08jmw.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) ### Wiz API URL 1. To get the API tenant, go to **Tenant Info**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz_api_url.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) 2. Copy the **API Endpoint URL** (without /graphql) and **Authentication URL** info. This will be used when configuring DataBee data feed. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-q9db5429.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) > [!NOTE] > Note: > > Do not copy /graphql from the API Endpoint URL. ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-euptc1jj.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) 2. Search for the **Wiz** data feed and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-1d0b16im.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) 3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-spkthjmu.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) 4. Enter feed contact information and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/wiz-feb2025-image-40zx707p.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) 5. In the configuration page, confirm the following: - API Base URL: paste the API Endpoint URL from the Wiz console. - Authorization Method: TokenURLAuth - Key Id: paste the Client ID generated earlier in the instance. - Secret Key: paste the Client Secret generated earlier in the instance. - Token URL: paste the Authentication URL from the Wiz console. - Event Types: preselected for all the event types that integration pulls. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/DBconfih.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A30%3A36Z&se=2026-10-30T12%3A30%3A36Z&sr=c&sp=r&sig=oetGecl8kSCw67djc35bJfb47fGwQCqJfzIFmt99L1Y%3D) 1. Click **Submit**. ## Troubleshooting Tips - Ensure the Client ID and Client Secret are pasted correctly. Since you cannot view the secrets after the 1st time, re-create the secret, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed. - Ensure the Wiz scopes/permissions are correct.