/
← Voltar ao feed
low

Wiz launches Runtime Sensor add-on for GKE (Preview) with 1-click eBPF runtime protection

1 fonte(s) · 1 atualização(ões) · publicado 20/10/2026 19:02 · coletado há 1 hora

Wiz and Google Cloud announced the Wiz Runtime Sensor add-on for Google Kubernetes Engine (GKE) in Preview. It is available for both GKE Standard and Autopilot clusters. GKE manages sensor deployment, credential injection and lifecycle updates through the control plane, which removes manual Helm and manifest handling. The sensor uses eBPF to detect runtime threats such as reverse shells, binary executions from /tmp, image drift and privilege escalation. Its alerts are enriched with context from Wiz agentless scanning and the Security Graph. This is vendor product news with no vulnerability or incident described.

Technical Details

  • Enabled at cluster creation or on existing clusters with --addons=WizSensor=ENABLED or through the Google Cloud Console.
  • API keys and pull tokens are held off-cluster via GKE Secret Manager integration and Workload Identity Federation, and rotations resync without pod restarts.
  • Custom Google Cloud Organization Policies can mandate runtime protection and block creation of unprotected clusters.
  • The eBPF sensor monitors system calls, processes and network sockets with fixed per-node resource limits. Detection rules update independently of GKE patch versions.
  • Alerts appear on the Threats page in the Wiz Portal with pod, namespace, image and execution context, and are correlated with vulnerabilities actually loaded in memory, secrets, IAM privileges and sensitive data reachability.
  • The wider stack includes the Wiz CLI in Cloud Build, Artifact Registry scanning, the Wiz Admission Controller, KSPM against CIS Benchmarks, and ingestion of GCP Admin Activity and GKE control plane audit logs via Pub/Sub.
  • Planned extensions cover Cloud Run, GCE VMs and WizOS Hardened Images.

Remediation

No vulnerability is involved. Teams running GKE can enable the add-on per the Google Cloud GKE and Wiz documentation, and can enforce coverage through Organization Policy.

Linha do tempo

  1. wiz.io ↗ · pub. 20/10/2026 19:02 · coletado 20/10 20:00 primeiro registro

    Wiz launches Runtime Sensor add-on for GKE (Preview) with 1-click eBPF runtime protection

    ler a análise desta fonte

    Wiz and Google Cloud announced the Wiz Runtime Sensor add-on for Google Kubernetes Engine (GKE) in Preview. It is available for both GKE Standard and Autopilot clusters. GKE manages sensor deployment, credential injection and lifecycle updates through the control plane, which removes manual Helm and manifest handling. The sensor uses eBPF to detect runtime threats such as reverse shells, binary executions from /tmp, image drift and privilege escalation. Its alerts are enriched with context from Wiz agentless scanning and the Security Graph. This is vendor product news with no vulnerability or incident described.

    Technical Details

    • Enabled at cluster creation or on existing clusters with --addons=WizSensor=ENABLED or through the Google Cloud Console.
    • API keys and pull tokens are held off-cluster via GKE Secret Manager integration and Workload Identity Federation, and rotations resync without pod restarts.
    • Custom Google Cloud Organization Policies can mandate runtime protection and block creation of unprotected clusters.
    • The eBPF sensor monitors system calls, processes and network sockets with fixed per-node resource limits. Detection rules update independently of GKE patch versions.
    • Alerts appear on the Threats page in the Wiz Portal with pod, namespace, image and execution context, and are correlated with vulnerabilities actually loaded in memory, secrets, IAM privileges and sensitive data reachability.
    • The wider stack includes the Wiz CLI in Cloud Build, Artifact Registry scanning, the Wiz Admission Controller, KSPM against CIS Benchmarks, and ingestion of GCP Admin Activity and GKE control plane audit logs via Pub/Sub.
    • Planned extensions cover Cloud Run, GCE VMs and WizOS Hardened Images.

    Remediation

    No vulnerability is involved. Teams running GKE can enable the add-on per the Google Cloud GKE and Wiz documentation, and can enforce coverage through Organization Policy.