# Wiz

{% hint style="info" %}
This integration is currently in beta.
{% endhint %}

Halo Security's Wiz integration allows you to automatically import cloud assets from Wiz to enhance your attack surface discovery. This integration helps ensure you have a complete inventory of your cloud resources.

## Wiz Setup

### Step 1: Create a Service Account

You'll need to create a service account in Wiz to generate API credentials:

1. Log in to Wiz with the Project Admin role
2. Click the **Settings** icon in the top-right
3. Select **Service Accounts** from the left menu
4. Click **Add Service Account**
5. Enter a Service Account Name
6. Select **Custom Integration (GraphQL API)** from the Type dropdown
7. Select the Project(s) containing the resources you want to import
8. Select the necessary read permissions for assets
9. Click **Add Service Account**
10. The system will display the **Client ID** and **Client Secret**

### Step 2: Get the API Endpoint URL

To obtain the Wiz API Endpoint URL:

1. Log in to your Wiz account
2. Click your User Profile icon in the top right of the screen
3. Select **User Settings**
4. Click **Tenant** from the left menu
5. Copy the displayed **API Endpoint URL**

## Connect Wiz to Halo Security

1. Visit your *Settings → Integrations →* [Add](https://app.halosecurity.com/user/settings/integrations/add)
2. Add the Wiz integration
3. Name the integration and click **Add**
4. Configure the following settings:
   * **Client ID**: Enter your Wiz Client ID
   * **Client Secret**: Enter your Wiz Client Secret
   * **API Endpoint URL**: Enter your Wiz API Endpoint URL
   * **Auto Update**: Select how frequently the connector should sync asset data
   * **Ignore URLs**: Optionally add specific URLs to exclude from discovery
5. Click **Save**

After verifying the account details, your integration will be ready for use.

{% hint style="info" %}
You can add domains or hosts to ignore in the **Ignore** tab. Any hosts listed here will be skipped when retrieving information from Wiz, allowing you to exclude specific resources from your asset discovery.
{% endhint %}