Wiz
Connect OverView to Wiz via the GraphQL API to retrieve cloud assets, vulnerabilities, software inventory, cloud identities, and compliance findings
The Wiz connector allows OverView to retrieve your cloud assets, vulnerabilities, software inventory, cloud identities, and compliance findings directly from your Wiz tenant for a consolidated view of your cloud security posture.
Objective
The Wiz connector retrieves the following information:
- Cloud assets — virtual machines, containers, databases, storage, and serverless resources
- Vulnerability findings
- Installed software and packages (SBOM)
- Cloud identities and IAM roles
- Compliance findings (CIS, NIST, PCI DSS, and other frameworks)
Prerequisites
- Access to the Wiz console with permission to manage service accounts
- A service account of type Custom Integration (GraphQL API)
- The read scopes listed in the procedure below assigned to that service account
Information to provide in OverView
Contact OverSOC support to configure this connector. You will need to provide:
| Field | Description |
|---|---|
| Client ID | Service account client ID |
| Client Secret | Service account client secret (shown only once at creation) |
| API URL | Your tenant GraphQL endpoint, e.g. https://api.us1.app.wiz.io/graphql (Settings > Tenant Info) |
Procedure
Create a service account in Wiz
- Sign in to the Wiz console.
- Navigate to Settings > Access Management > Service Accounts.
- Click Add Service Account.
- Enter a name for the account (e.g., "OverView Connector").
- Select the type Custom Integration (GraphQL API).
- Assign the following read-only API scopes:
read:resources— cloud assets, cloud identities, IAM rolesread:vulnerabilities— vulnerability findingsread:cloud_configuration— compliance findings and security frameworksread:inventory— technology inventoryread:sbom_artifacts— installed packages (this is a separate scope and is not covered byread:resources)
- Click Add Service Account.
- Copy the Client ID and Client Secret, then provide them to OverView.
The Client Secret is displayed only once, at creation. If you leave the page without copying it, you will need to create a new service account.
Retrieve your API endpoint
- In the Wiz console, go to Settings > Tenant Info.
- Copy the API Endpoint URL — this is the API URL to provide to OverView.
The endpoint is tenant-specific (format https://api.<region>.app.wiz.io/graphql) and cannot be inferred, so it must be retrieved from your tenant.
Security Best Practices
- Use a dedicated service account for the OverView integration rather than a shared or personal account.
- Grant read-only scopes — OverView only needs to read inventory, findings, and identity data.
- Store the Client Secret securely; it is shown only once and cannot be retrieved afterwards.
- Rotate credentials regularly according to your organization's security policy.
Official Documentation
- Wiz Documentation
- Wiz API reference: available in the Wiz console under Settings > API Explorer
Alternative: file import through DropPoint
The API access described above is the recommended method for this connector. Where it is not available (a segregated network, a version or licence without API, an export you already produce), OverView accepts file exports, to be uploaded to the bucket dedicated to Wiz.
Bucket : s3://wiz/
Example : s3://wiz/export.csv
The procedure is described in the OverView DropPoint guide: generating credentials, configuring the client, then sending files from the OverView web interface, the AWS CLI or an SDK. Its examples come pre-filled with this bucket when you follow this link.