Wiz

The Britive and Wiz integration strengthens enterprise identity and security operations by combining Wiz’s telemetry and alerting across diverse environments with Britive’s unified Just-In-Time (JIT) access enforcement, visibility, and remediation. Wiz surfaces identity-related risks and vulnerabilities, which Britive uses to generate tailored reports and apply JIT access controls, thereby reducing excessive privileges and alert fatigue. This enables customers to proactively manage identity risks and enhance their overall security posture.

Adding a Wiz Integration

Note:

The administrator must have securityadmin.security.manage permission to add or manage Wiz integrations.

1. Log in to Britive with administrator privileges.

2. Click on System admin -> CSPM Integration.

3. Click New Integration or click Manage to update the existing integration.

4. Click + to create a new Wiz integration.

   1. Enter the name and description in the Add Wiz Integration window.

   2. Click Add.

   3. Copy the generated token, ingest URL, and action template values. You need these values to configure Wiz. The token is shown only once.

   4. Click Ok.

5. Settings tab:

   1. Click Edit to update the name and description.

   2. Rotate Token: Click Rotate Token if you want to create a new token. It invalidates the existing token, and active CSPM integrations using this token stop working. The new token must be reconfigured on the Wiz side.

   3. Sync Now: Pulls the existing findings from Wiz’s API using the saved API credentials.

   4. Add Credentials (Optional): A separate API client can be configured to sync findings using Wiz’s API.

      1. Enter Client ID, Client Secret, and Wiz API URL.

      2. You need to create a service account in Wiz (Settings → Service Accounts) with the "read issues" permission.

   5. Edit Filters (Optional): Enter the filter details to limit which findings a connection keeps. Click to add cloud providers to filter findings. These filters apply to both Webhook findings and syncs.

      1. Click Add Cloud Provider to add a particular provider so that only findings from that cloud and accounts are kept. You can choose one or more cloud providers.

      2. Enter the account IDs to specifically get findings for those accounts. If you leave this field empty, all findings of all accounts of this provider are synced. Filters apply to findings that arrive from then on; findings already stored are not deleted.

6. Findings tab: After integration is complete on both the Britive and Wiz sides, the Findings tab is populated. This tab lists security risks, vulnerabilities, and misconfigurations uncovered by the Wiz Cloud Security Platform.

   • Source Role

   • Highest Severity

   • Application

   • Profiles

   • Britive role

   • Environment

   • Status

   • Source

   • Findings

   • Source environment

   • Application type

Configuring on Wiz

1. Get the Britive-generated token and ingest URL.

2. Copy the connection URL and the token (shown only once), and paste Britive's action template into the Wiz webhook. Wiz sends the token in the Authorization header.

3. Test the webhook connection to ensure the integration is enabled.