Wiz Tables

Tables

WizCloudConfigurationFindings

Contains details of cloud configuration findings identified by Wiz, including rule information, affected resources, severity, remediation guidance, and analysis timestamps.

Code	Status	Description	Message
ConfigID	integer	Identifier of the configuration context under which the finding was generated.	Identifier of the configuration context under which the finding was generated.
FindingID	string	Unique identifier for this specific finding record.	Unique identifier for this specific finding record.
Title	string	The title or human-readable name of the configuration finding.	The title or human-readable name of the configuration finding.
Remediation	string	Text describing how to remediate or fix the finding.	Text describing how to remediate or fix the finding.
ResolutionReason	string	Reason provided for why this finding was resolved (e.g., `exception`, `accepted risk`).	Reason provided for why this finding was resolved (e.g., `exception`, `accepted risk`).
Tags	string	Labels or keywords attached to the finding for categorization and filtering.	Labels or keywords attached to the finding for categorization and filtering.
Result	string	The result of the check (e.g., `passed`, `failed`, `skipped`).	The result of the check (e.g., `passed`, `failed`, `skipped`).
RuleID	string	Identifier of the rule that triggered this finding.	Identifier of the rule that triggered this finding.
SubscriptionID	string	Cloud subscription or account identifier under which the resource/finding resides.	Cloud subscription or account identifier under which the resource/finding resides.
Severity	string	Severity level of the finding (e.g., `Critical`, `High`, `Medium`, `Low`).	Severity level of the finding (e.g., `Critical`, `High`, `Medium`, `Low`).
Status	string	Current status of the finding (e.g., `Open`, `Closed`, `Dismissed`).	Current status of the finding (e.g., `Open`, `Closed`, `Dismissed`).
BatchDate	datetime	Date/time when this finding record was ingested or last updated in the dataset.	Date/time when this finding record was ingested or last updated in the dataset.

WizCloudConfigurationRules

Contains metadata for configuration rules in Wiz, including their scope, severity, remediation guidance, and mapping to compliance controls.

Code	Status	Description	Message
ConfigID	integer	Identifier of the configuration context in which the rule is defined.	Identifier of the configuration context in which the rule is defined.
RuleID	string	Unique identifier for the specific configuration rule in Wiz.	Unique identifier for the specific configuration rule in Wiz.
Name	string	Human-readable name of the rule.	Human-readable name of the rule.
BuiltIn	boolean	Indicates whether the rule is a default Wiz rule (`true`) or a custom user-created rule (`false`).	Indicates whether the rule is a default Wiz rule (`true`) or a custom user-created rule (`false`).
CloudProvider	string	The cloud platform(s) the rule applies to (e.g., `AWS`, `Azure`, `GCP`).	The cloud platform(s) the rule applies to (e.g., `AWS`, `Azure`, `GCP`).
CreatedAt	datetime	Timestamp when the rule was first created.	Timestamp when the rule was first created.
UpdatedAt	datetime	Timestamp when the rule was last modified.	Timestamp when the rule was last modified.
CreatedByUserID	string	Identifier of the user who created the rule.	Identifier of the user who created the rule.
UserConfigID	integer	Identifier linking to the user’s configuration that references this rule.	Identifier linking to the user’s configuration that references this rule.
Description	string	Text explaining what the rule checks for and why it’s important.	Text explaining what the rule checks for and why it’s important.
Enabled	boolean	Indicates whether the rule is currently active or disabled.	Indicates whether the rule is currently active or disabled.
FunctionAsControl	boolean	Specifies if the rule functions as a compliance control within Wiz.	Specifies if the rule functions as a compliance control within Wiz.

WizControls

Contains definitions and metadata for Wiz security and compliance controls, including configuration, severity, execution history, automation capabilities, and business impact applicability.

Code	Status	Description	Message
ConfigID	integer	Identifier of the configuration or environment context in which the control is defined.	Identifier of the configuration or environment context in which the control is defined.
ControlID	string	Unique identifier for the specific security or compliance control in Wiz.	Unique identifier for the specific security or compliance control in Wiz.
Name	string	Human-readable name of the control.	Human-readable name of the control.
CreatedAt	datetime	Timestamp when the control was first created.	Timestamp when the control was first created.
CreatedByUserID	string	Identifier of the user who created the control.	Identifier of the user who created the control.
Description	string	Text describing the purpose and functionality of the control.	Text describing the purpose and functionality of the control.
Enabled	boolean	Indicates whether the control is active or disabled.	Indicates whether the control is active or disabled.
EnabledForHighBusinessImpact	boolean	Specifies if the control is applied to assets classified as high business impact.	Specifies if the control is applied to assets classified as high business impact.
EnabledForLowBusinessImpact	boolean	Specifies if the control is applied to assets classified as low business impact.	Specifies if the control is applied to assets classified as low business impact.
EnabledForMediumBusinessImpact	boolean	Specifies if the control is applied to assets classified as medium business impact.	Specifies if the control is applied to assets classified as medium business impact.
EnabledForUnattributed	boolean	Indicates whether the control applies to assets not assigned a business impact level.	Indicates whether the control applies to assets not assigned a business impact level.
SecurityCategoryID	string	Identifier linking the control to a specific security category or framework section.	Identifier linking the control to a specific security category or framework section.

WizIssues

Contains detailed records of issues detected by Wiz, including control associations, affected entities, severity, resolution details, and update timestamps.

Code	Status	Description	Message
ConfigID	integer	Identifier of the configuration or environment context in which the issue is recorded.	Identifier of the configuration or environment context in which the issue is recorded.
IssueID	string	Unique identifier for the specific issue in Wiz.	Unique identifier for the specific issue in Wiz.
CreatedAt	datetime	Timestamp when the issue was first created or detected.	Timestamp when the issue was first created or detected.
Description	string	Text describing the nature, cause, or context of the issue.	Text describing the nature, cause, or context of the issue.
DueAt	datetime	Date or timestamp by which the issue is expected to be resolved.	Date or timestamp by which the issue is expected to be resolved.
ControlID	string	Identifier linking the issue to the control or rule that detected it.	Identifier linking the issue to the control or rule that detected it.
FrameworkCategoryID	string	Identifier of the compliance or security framework category related to the issue.	Identifier of the compliance or security framework category related to the issue.
Notes	string	Free-form notes or comments added to the issue.	Free-form notes or comments added to the issue.
RejectionExpiredAt	datetime	Timestamp indicating when an issue rejection (dismissal) expired or will expire.	Timestamp indicating when an issue rejection (dismissal) expired or will expire.
ResolutionReason	string	Explanation of why or how the issue was resolved (e.g., false positive, accepted risk, remediated).	Explanation of why or how the issue was resolved (e.g., false positive, accepted risk, remediated).
ResolvedAt	datetime	Timestamp when the issue was marked as resolved.	Timestamp when the issue was marked as resolved.
ServiceTickets	string	References to external service tickets (e.g., `Jira`, `ServiceNow`) linked to the issue.	References to external service tickets (e.g., `Jira`, `ServiceNow`) linked to the issue.

WizProjectMemberships

Stores information about user and service account memberships within Wiz projects, including their roles, associated projects, and configuration context.

Name	Type	Description
ConfigID	integer	Identifier referencing the configuration or environment context where the project membership is defined.
MembershipID	integer	Unique identifier for the individual project membership record.
ProjectID	string	Identifier of the Wiz project to which the member is assigned.
UserID	string	Identifier of the user associated with the project membership.
ServiceAccountID	string	Identifier of the service account linked to the project, if applicable.
MembershipType	string	Specifies the type or role of the membership (e.g., `Owner`, `Editor`, `Viewer`, `Service Account`).
BatchDate	datetime	Timestamp indicating when the membership data was last updated or imported into the system.

WizProjects

Contains metadata and statistics for Wiz projects, including organizational structure, connected resources, risk metrics, and overall security performance indicators.

Code	Status	Description	Message
ConfigID	integer	Identifier referencing the configuration or environment context where the project is defined.	Identifier referencing the configuration or environment context where the project is defined.
ProjectID	string	Unique identifier for the project within Wiz.	Unique identifier for the project within Wiz.
Name	string	Human-readable name assigned to the project.	Human-readable name assigned to the project.
Archived	boolean	Indicates whether the project has been archived or is still active.	Indicates whether the project has been archived or is still active.
BusinessUnit	string	The business unit or department associated with the project.	The business unit or department associated with the project.
CloudAccountCount	bigint	Number of connected cloud accounts included in the project.	Number of connected cloud accounts included in the project.
CloudOrganizationCount	bigint	Number of cloud organizations linked to the project.	Number of cloud organizations linked to the project.
Description	string	Text providing additional information or context about the project.	Text providing additional information or context about the project.
EntityCount	bigint	Total number of entities (e.g., `resources`, `workloads`) tracked under the project.	Total number of entities (e.g., `resources`, `workloads`) tracked under the project.
ProjectIdentifiers	string	A list or set of identifiers used to reference the project across Wiz and external systems.	A list or set of identifiers used to reference the project across Wiz and external systems.
KubernetesClusterCount	bigint	Number of Kubernetes clusters associated with the project.	Number of Kubernetes clusters associated with the project.
RepositoryCount	bigint	Count of code repositories linked to the project.	Count of code repositories linked to the project.

WizRoles

Defines user and service account roles in Wiz, outlining access scope, permissions, and whether they apply at the project or organizational level.

Name	Type	Description
ConfigID	integer	Identifier for the configuration or environment context in which the role is defined.
RoleID	string	Unique identifier for the specific role within Wiz.
IsProjectScoped	boolean	Indicates whether the role is limited to a specific project scope (`true`) or applies organization-wide (`false`).
Name	string	Human-readable name of the role (e.g., `Viewer`, `Editor`, `Administrator`).
BatchDate	datetime	Timestamp showing when the role information was last collected or updated.
Description	string	Text summarizing the purpose and permissions associated with the role.

WizRoleScopes

Contains definitions of access scopes in Wiz, specifying the boundaries and contexts in which roles and permissions apply.

Name	Type	Description
WizRoleScopes	ConfigID	integer
WizRoleScopes	ScopeName	string
WizRoleScopes	BatchDate	datetime

WizSecurityCategories

Defines the different security categories used in Wiz to organize controls, findings, and policies by area of focus or security domain.

Name	Type	Description
ConfigID	integer	Identifier referencing the configuration or environment context where the security category is defined.
CategoryID	string	Unique identifier for the specific security category within Wiz.
Name	string	Human-readable name of the security category (e.g., `Network Security`, `Data Protection`).
Description	string	Text describing the focus or purpose of the security category.
BatchDate	datetime	Timestamp showing when the category record was last collected or updated in the dataset.

WizSecurityFrameworks

Contains metadata and configuration details for security and compliance frameworks in Wiz, including their status, scope, and policy coverage.

Name	Type	Description
ConfigID	integer	Identifier referencing the configuration or environment context where the security framework is defined.
FrameworkID	string	Unique identifier for the specific security or compliance framework within Wiz.
Name	string	Human-readable name of the security framework (e.g., `CIS`, `NIST`, `ISO 27001`).
BuiltIn	boolean	Indicates whether the framework is a default Wiz-provided framework (`true`) or a custom-created one (`false`).
Description	string	Text summarizing the framework’s purpose, coverage, or compliance focus.
Enabled	boolean	Specifies whether the framework is currently active and being applied to assessments.
PolicyTypes	string	Lists the types of policies or rules included in the framework (e.g., `configuration`, `identity`, `vulnerability`).
BatchDate	datetime	Timestamp showing when the framework record was last updated or imported into the dataset.

WizServiceAccounts

Stores details about service accounts in Wiz, including their authentication sources, creation dates, credential rotation status, and usage types.

Name	Type	Description
ConfigID	integer	Identifier referencing the configuration or environment context where the service account is defined.
ServiceAccountID	string	Unique identifier for the specific service account within Wiz.
Name	string	Human-readable name of the service account.
AuthenticationSource	string	Indicates the origin or method used for authentication (e.g., `Azure AD`, `Okta`, `Local`).
ClientID	string	The client or application ID associated with the service account credentials.
CreatedAt	datetime	Timestamp when the service account was created.
LastRotatedAt	datetime	Timestamp showing when the service account credentials were last rotated or renewed.
Type	string	Specifies the type of service account (e.g., `API`, `Automation`, `Integration`).
BatchDate	datetime	Date and time when this record was last collected or updated in the dataset.

WizServiceAccountScopes

Defines the access scopes assigned to service accounts in Wiz, outlining the areas and resources each account can manage or interact with.

Name	Type	Description
ConfigID	integer	Identifier referencing the configuration or environment context where the service account scope is defined.
ScopeName	string	Name of the scope that determines the access boundaries or permissions granted to the service account (e.g., `Project`, `Organization`).
BatchDate	datetime	Timestamp indicating when the service account scope data was last updated or ingested into the dataset.

WizSubscriptions

Contains details about cloud subscriptions integrated with Wiz, including provider information, resource metrics, scan history, and operational status.

Name	Type	Description
ConfigID	integer	Identifier referencing the configuration or environment context where the subscription is defined.
SubscriptionID	string	Unique identifier for the cloud subscription within Wiz.
Name	string	Human-readable name of the subscription as displayed in Wiz.
ContainerCount	bigint	Number of containerized resources (e.g., `Kubernetes pods`, `Docker containers`) within the subscription.
ExternalID	string	The external cloud provider ID associated with the subscription (e.g., `AWS Account ID`, `Azure Subscription ID`).
LastScannedAt	datetime	Timestamp showing when the subscription’s resources were last scanned or analyzed by Wiz.
ResourceCount	bigint	Total number of resources detected in the subscription.
CloudProvider	string	Name of the cloud platform linked to the subscription (e.g., `AWS`, `Azure`, `GCP`).
Status	string	Current operational status of the subscription (e.g., `Active`, `Inactive`, `Disconnected`).
VirtualMachineCount	bigint	Number of virtual machines or compute instances discovered within the subscription.
BatchDate	datetime	Date and time when this subscription record was last collected or updated in the dataset.

WizUsers

Stores information about users in Wiz, including identity provider details, login activity, account status, and assigned roles.

Name	Type	Description
ConfigID	integer	Identifier referencing the configuration or environment context where the user record is defined.
UserID	string	Unique identifier for the specific user within Wiz.
Name	string	Full name of the user as recorded in Wiz.
Email	string	The user’s email address used for authentication and notifications.
IdentityProviderType	string	The authentication provider used by the user (e.g., `Okta`, `Azure AD`, `Google`, `Local`).
CreatedAt	datetime	Timestamp indicating when the user account was created in Wiz.
LastLoginAt	datetime	Timestamp of the user’s most recent login activity.
TenantID	string	Identifier of the Wiz tenant or organization to which the user belongs.
BatchDate	datetime	Date and time when the user record was last updated or ingested into the dataset.
IPAddress	string	The last known IP address used by the user to log in.
IsAnalyticsEnabled	boolean	Indicates whether analytics or telemetry features are enabled for the user account.
IsSuspended	boolean	Indicates if the user account is currently suspended or deactivated.
RoleID	string	Identifier linking the user to a specific role that defines their permissions within Wiz.

WizVulnerabilityFindings

Stores detailed information on vulnerabilities discovered across cloud and container environments, including severity, exploitability, affected assets, remediation guidance, and detection history.

Code	Status	Description	Message
ConfigID	integer	Identifier referencing the configuration or environment context where the vulnerability finding is recorded.	Identifier referencing the configuration or environment context where the vulnerability finding is recorded.
VulnerabilityID	string	Unique identifier for the specific vulnerability finding within Wiz.	Unique identifier for the specific vulnerability finding within Wiz.
Name	string	Human-readable name or title of the vulnerability.	Human-readable name or title of the vulnerability.
CVEDescription	string	Description of the vulnerability as defined in the CVE database.	Description of the vulnerability as defined in the CVE database.
CVESeverity	string	Severity rating from the CVE record (e.g., `Low`, `Medium`, `High`, `Critical`).	Severity rating from the CVE record (e.g., `Low`, `Medium`, `High`, `Critical`).
Description	string	Detailed explanation of the vulnerability and its potential impact.	Detailed explanation of the vulnerability and its potential impact.
DetailedName	string	Full or extended name describing the specific vulnerability or affected component.	Full or extended name describing the specific vulnerability or affected component.
DetectionMethod	string	Method used by Wiz to detect the vulnerability (e.g., `Package Analysis`, `Runtime Scan`, `Agentless Detection`).	Method used by Wiz to detect the vulnerability (e.g., `Package Analysis`, `Runtime Scan`, `Agentless Detection`).
ExploitabilityScore	float	Numeric score representing the likelihood that the vulnerability can be exploited.	Numeric score representing the likelihood that the vulnerability can be exploited.
FirstDetectedAt	datetime	Timestamp indicating when the vulnerability was first identified.	Timestamp indicating when the vulnerability was first identified.
FixedVersion	string	The version of the software or component that includes a fix for the vulnerability.	The version of the software or component that includes a fix for the vulnerability.
HasCISAKevExploit	boolean	Indicates whether the vulnerability appears in the CISA Known Exploited Vulnerabilities catalog.	Indicates whether the vulnerability appears in the CISA Known Exploited Vulnerabilities catalog.

Bridge Tables

WizCloudConfigurationFindings_WizProjects

Maps cloud configuration findings to their corresponding Wiz projects, establishing relationships between detected issues and project contexts.

Name	Type	Description
FindingID	string	Unique identifier of the cloud configuration finding linked to a Wiz project.
ProjectID	string	Identifier of the Wiz project associated with the finding.
ConfigID	integer	Identifier referencing the configuration or environment context for the project-finding relationship.

WizProjects_WizIssues

Links Wiz projects to their related issues, showing which detected issues belong to each project within a specific configuration context.

Name	Type	Description
ProjectID	string	Identifier of the Wiz project associated with the issue.
IssueID	string	Unique identifier of the issue linked to the project.
ConfigID	integer	Identifier referencing the configuration or environment context for the project-issue relationship.

WizProjects_WizSubscriptions

Maps Wiz projects to their associated cloud subscriptions, defining which subscriptions and resources belong to each project within a given configuration context.

Name	Type	Description
ProjectID	string	Identifier of the Wiz project connected to the subscription.
SubscriptionID	string	Unique identifier of the cloud subscription associated with the project.
ConfigID	integer	Identifier referencing the configuration or environment context for the project-subscription relationship.

WizRoles_WizRoleScopes

Defines the relationship between roles and their assigned scopes in Wiz, specifying which access levels or contexts each role applies to.

Name	Type	Description
RoleID	string	Unique identifier of the Wiz role associated with the scope.
ScopeName	string	Name of the access scope assigned to the role (e.g., `Project`, `Organization`).
ConfigID	integer	Identifier referencing the configuration or environment context for the role-scope relationship.

WizSecurityCategories_WizSecurityFrameworks

Maps security categories to their corresponding frameworks in Wiz, showing how individual security domains align with broader compliance or governance frameworks.

Name	Type	Description
CategoryID	string	Unique identifier of the security category linked to the framework.
FrameworkID	string	Identifier of the security or compliance framework associated with the category.
ConfigID	integer	Identifier referencing the configuration or environment context for the category-framework relationship.

WizServiceAccounts_WizServiceAccountScopes

Defines the association between service accounts and their assigned scopes in Wiz, detailing which access boundaries or contexts each service account operates within.

Name	Type	Description
ServiceAccountID	string	Unique identifier of the service account associated with the scope.
ScopeName	string	Name of the access scope assigned to the service account (e.g., `Project`, `Organization`).
ConfigID	integer	Identifier referencing the configuration or environment context for the service account-scope relationship.