According to @galnagli, Wiz has launched the Wiz Red Agent, an AI-powered attacker that reasons like a world-class pentester to continuously find vulnerabilities across an organization’s entire attack surface; as reported by the original tweet on X, the agent emulates human red team workflows to identify exploitable paths at scale, signaling a shift from periodic assessments to continuous AI-driven security testing. According to the announcement by Nagli on X, the business impact includes faster time-to-detection, reduced reliance on manual pentests for routine coverage, and potential cost savings by automating discovery and triage, creating opportunities for managed security providers to offer always-on offensive testing services.

According to Nagli on Twitter, AI should continuously augment security across the full attack surface rather than replace manual penetration tests used for compliance, emphasizing that deeper cloud context is critical for effective detection and prioritization across environments (as reported by the original tweet by @galnagli). According to the tweet, this approach suggests a hybrid model where AI-driven continuous monitoring flags risks in real time while human-led pentests validate exploitability and meet audit requirements, creating business value by reducing mean time to detect and aligning with compliance frameworks. As reported by the source post, the claim highlights a product direction for cloud-native security platforms to leverage environment-wide context graphs for attack path analysis, drift detection, and automated validation—opportunities for vendors to offer continuous assurance alongside scheduled manual assessments.