Trust Center

Wiz recently published a Threat Center update for its customers, as well as a public blog post, on the critical vulnerabilities affecting React and Next.js that were disclosed on December 3, 2025.

As part of our internal response process, Wiz security teams have been identifying and patching instances of these affected components across our environments. As of this writing, Wiz has not identified any systems related to its product platform that are externally exposed and vulnerable, and customers do not need to take any further action to safeguard their instances of Wiz. Please continue to monitor our Threat Center and this Trust Site for further updates.

Wiz is aware of the recent supply chain attack targeting Gainsight and its integrations with Salesforce. We can confirm that Wiz does not use Gainsight in our production environment or internal business operations.

Wiz is not aware of any circumstance in which our subcontractors or subprocessors have been affected by this issue and impacted Wiz systems or data.

For further information on this incident, please see the Gainsight Incident FAQs.

A new Shai-Hulud-linked npm supply-chain campaign (“Sha1-Hulud”) is compromising major packages to exfiltrate development secrets and sensitive project files. The blast radius is large and the attack is accelerating, thanks to cross-victim exfiltration and a new preinstall-phase malware variant.

Our internal investigation is ongoing but as of this writing, Wiz has not identified any evidence indicating its own product or systems are affected.

Please continue to monitor the Wiz Threat Center for detection and mitigation guidance. See also this post with details on Wiz's public blog.

Our commitment to security and trust remains our top priority! We are excited to announce the successful completion of our comprehensive annual audit cycle. We have received our latest SOC 2 Type II, HIPAA, and SOC 3 audit reports, as well as ISO 27001, ISO 27017, ISO 27018, and ISO 27701 recertifications for this year.

We partnered with A-LIGN as our auditor and are proud of another successful cycle. All reports and certifications are now available in the Compliance section of our Trust Center.

Wiz is aware of the recent F5 security breach and can confirm that we do not use any F5 appliances identified as impacted by the breach in our production environment.

Wiz is not aware of any circumstance in which our subcontractors or subprocessors have been affected by this issue and impacted Wiz systems or data.

For further information on this incident, please see the F5 Security Advisory.