Wiz

Import assets from Wiz.

This integration is currently in beta.

Halo Security's Wiz integration allows you to automatically import cloud assets from Wiz to enhance your attack surface discovery. This integration helps ensure you have a complete inventory of your cloud resources.

Wiz Setup

Step 1: Create a Service Account

You'll need to create a service account in Wiz to generate API credentials:

1. Log in to Wiz with the Project Admin role

2. Click the Settings icon in the top-right

3. Select Service Accounts from the left menu

4. Click Add Service Account

5. Enter a Service Account Name

6. Select Custom Integration (GraphQL API) from the Type dropdown

7. Select the Project(s) containing the resources you want to import

8. Select the necessary read permissions for assets

9. Click Add Service Account

10. The system will display the Client ID and Client Secret

Step 2: Get the API Endpoint URL

To obtain the Wiz API Endpoint URL:

1. Log in to your Wiz account

2. Click your User Profile icon in the top right of the screen

3. Select User Settings

4. Click Tenant from the left menu

5. Copy the displayed API Endpoint URL

Connect Wiz to Halo Security

1. Visit your Settings → Integrations → Add

2. Add the Wiz integration

3. Name the integration and click Add

4. Configure the following settings:

   • Client ID: Enter your Wiz Client ID

   • Client Secret: Enter your Wiz Client Secret

   • API Endpoint URL: Enter your Wiz API Endpoint URL

   • Auto Update: Select how frequently the connector should sync asset data

   • Ignore URLs: Optionally add specific URLs to exclude from discovery

5. Click Save

After verifying the account details, your integration will be ready for use.

You can add domains or hosts to ignore in the Ignore tab. Any hosts listed here will be skipped when retrieving information from Wiz, allowing you to exclude specific resources from your asset discovery.