© 2026 Check Point Software Technologies Ltd. All rights reserved.

Wiz and Check Point for Unified Cloud Security

Guided by Check Point’s open garden principle for its Hybrid Network Security

Architecture, and Following Wiz and Check Point's strategic partnership, Wiz and

Check Point are joining forces to deliver a comprehensive cloud security

encompassing unified visibility and continuous threat prevention.

Our goal is to provide a tightly integrated solution that bridges the operational gap

between posture management and inline threat prevention. This complementary

approach enhances situational awareness through rapid, effective virtual patching,

enabling faster and safer remediation of cloud risks.

This document will help you understand the solution stack with a particular focus on

the role of Check Point Threat Exposure Management (TEM) as the connective tissue

between Check Point Cloud Firewall (previously known as CloudGuard) and Wiz’s

CNAPP solution.

C etected

C and detailsN ccess ules

cti ate CloudGuard PS to lock C

posure itigation

U fy W z

© 2026 Check Point Software Technologies Ltd. All rights reserved.

UNIFYING CLOUD SECURITY WITH WIZ AND CHECK POINT

THE SOLUTION STACK 1

S S

Wiz pro ides complete, agentless isibility into cloud infrastructure, applications, code, and

identity. t correlates misconfigurations, ulnerabilities, e cessi e permissions, and data

e posure, and identifies to ic combinations of ulnerabilities that could materialize into attacks,

protecting clouds from code to runtime.

Crucially for this joint solution, Wiz can also detect the presence of the Check Point Cloud

Firewall in front of seemingly e posed, ulnerable assets, allowing Wiz to de-risk these assets

and for engineers to implement policy-le el changes in the Cloud Firewall to mitigate risk.

Check Point Cloud Firewall enforces adapti e, enterprise-grade security controls across cloud

en ironments and workloads. t combines L3, L4, and L7 protections, PS, application control,

and cloud-nati e policy objects to block both known and unknown threats in real time with

unmatched effecti eness.

oasting 100% security effecti eness, as measured by Cyber atings Org and 99.9% success at

blocking zero-days based on iercom tests, Check Point Cloud Firewall is particularly adept at

acting as a irtual patching engine, pre enting attackers from e ploiting ulnerable workloads,

such as instances running a known C , applications that suffer from input and file sanitization

issues, and other threats that may require lengthy remediation procedures.

Check Point Threat Exposure Management connects Wiz’s conte tual risk intelligence with

Check Point’s enforcement capabilities. t automatically alidates whether e isting security

policies protect critical ulnerabilities, identifies gaps, and orchestrates remediation.

For this joint cloud security solution, Check Point hreat posure anagement enables

security practitioners and cloud and e SecOps engineers to down-score risks identified by Wiz

by implementing Check Point Cloud Firewall pre ention engines.

Check Point hreat posure anagement acts as the connecti e tissue between Wiz’s cloud

ulnerability and risk detection and the Check Point Cloud Firewall’s attack pre ention. erging

isibility and enforcement engines across the stack enables intelligent remediation, oC sharing,

and irtual patching of issues without the operational burden associated with manual rule

writing, ticketing, and change control. his efficiency enables teams to focus on resol ing issues

and applying patches, thereby relie ing them of the stress associated with operational tasks.

https://www.checkpoint.com/resources/items/report-cyberratings-cloud-firewall-test-results-q1-2025 https://www.checkpoint.com/2025-miercom-firewall-report/ https://www.checkpoint.com/2025-miercom-firewall-report/

© 2026 Check Point Software Technologies Ltd. All rights reserved.

UNIFYING CLOUD SECURITY WITH WIZ AND CHECK POINT

CHECK POINT THREAT EXPOSURE MANAGEMENT 2

Check Point hreat posure anagement-dri en remediation occurs without policy rewrites,

effecti ely deli ering “ irtual patching” at machine speed – reducing alert se erity and gi ing

teams the time to fi issues and apply patches.

t its core, Check Point hreat posure anagement simultaneously synthesizes feeds from

Wiz and he Check Point Cloud Firewall, cross-correlating them with your network topology,

policies, additional security controls, and o erall e posure, to prescribe safe and effecti e

remediation and risk mitigation steps. Howe er, instead of simply generating alerts, it maps

issues to the actual security controls that protect that asset.

With Check Point Cloud Firewall's threat-pre ention engine responding to Wiz's risk-e posure

findings, critical issues can be remediated with a click. his proacti e approach ensures that

ulnerabilities cannot be e ploited, e en if they ha e not yet been patched at their core,

empowering cloud security, e Ops, and teams to focus on more immediate and critical

threats, while also freeing aluable engineering resources to pursue technological goals instead

of spending time chasing after alerts – effecti ely switching tedious and lengthy ime to

emediation into quick and easy Time-to-Prevention.

Worldwide Headquarters

5 Shlomo Kaplan Street, el i 6789159, srael | el: +972-3-753-4599

U.S. Headquarters

100 Oracle Parkway, Suite 800, edwood City, C 94065 | el: 1-800-429-4391

www.checkpoint.com

© 2026 Check Point Software echnologies Ltd. ll rights reser ed.

S

( S )

https://www.youtube.com/watch?v=OlThN2iGwjs