HackerOne and Wiz integrate to strengthen security in the cloud

HackerOne, a global leader in Continuous Threat Exposure Management (CTEM), today announced an integration with Wiz, now part of Google Cloud, bringing HackerOne results directly into Wiz cloud and AI security platform. By combining verified exploitability with cloud context, the integration helps security teams identify which vulnerabilities pose the greatest risk and prioritize actions based on actual exploitability.

As organizations expand across cloud and AI systems, security teams are facing a growing imbalance: more findings and less ability to prioritize what can actually be exploited. The emergence of advanced AI models is accelerating vulnerability discovery, while remediation efforts are struggling to keep up. New data from the HackerOne platform shows that vulnerability reports increased by 76 percent year-over-year in March. At the same time, the resolution rate fell from 73 percent to 27 percent over the past year, driving a growing backlog of unresolved findings.

The integration between HackerOne and Wiz addresses this challenge by connecting continuous testing results with the Wiz Security Graph and Attack Surface Management capabilities. Validated vulnerabilities from bug bounty programs, vulnerability reporting, penetration testing, and AI red teaming are mapped directly to the cloud environments they impact, giving teams real-time insights into risks across infrastructure, identities, and data.

”Context is what transforms safety results into meaningful action,” says Worry Noah, VP Product, Extensibility & Partnerships at Wiz. ”Through our partnership with HackerOne, customers gain access to verified exploitability in the broader context of their cloud environments. The integration helps teams focus on the biggest risks so they can prioritize remediation with greater clarity and confidence.”

The Wiz integration is part of HackerOne's PartnerOne Technology Alliance Program, where integrations are brought together in a connected ecosystem built to reduce exploitable risks by compressing the cycle from discovery to action across identification, validation, prioritization, and resolution.

”PartnerOne is built on a simple idea: customers get better security results when the tools they rely on work better together,” says John Addeo, Vice President of Global Channels at HackerOne. ”Our partnership with Wiz reflects this mission by integrating validated risk into the cloud security workflows that teams already use. Together, we help organizations bridge the gap between detection and action by moving from reactive vulnerability management to proactive exposure mitigation.”

Security teams can use the integration to:

• Understand the scope of exploitable vulnerabilities in cloud environments
• Prioritize issues supported by actual evidence of exploitation instead of theoretical risks
• Connect security and cloud workflows to accelerate remediation
• Ensure validated risks move from discovery to resolution instead of falling into growing backlogs

The integration between HackerOne and Wiz is available today.

About HackerOne:

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne platform combines AI-powered agent solutions with the ingenuity of the world's largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures in code, cloud, and AI systems.

Through solutions such as bug bounty, vulnerability reporting, agent-based penetration testing, AI red teaming, and code security, HackerOne delivers measurable and continuous cyber risk reduction for enterprises. Industry leaders like Anthropic, Crypto.com, General Motors, Goldman Sachs, Lufthansa, Uber, the UK Ministry of Defence and the US Department of Defense rely on HackerOne to protect their digital ecosystems.

HackerOne was noticed in Gartner's Emerging Tech Impact Radar report: AI Cybersecurity Ecosystem for its leadership in AI security testing and has been named one of the most appreciated workplaces for young professionals in 2024.