Wiz Inc. today announced new artificial intelligence-related extensions to the modules in its cloud-native application protection platform line of products.

CNAPP tools combine a variety of defensive mechanisms to protect access controls, secure source code pipelines, harden authentication and encryption tasks, and remediate threats.

The company points out the problem with what it calls “shadow AI,” or AI programs that are introduced without any knowledge or support of the security or other technology departments. “This makes it hard to ensure security in an enterprise’s AI pipeline and to protect against AI misconfigurations and vulnerabilities,” the company wrote in its blog post introducing the new features.

The product, called AI Security, uses the technology to cover security posture management. This identifies the resources consumed in an enterprise’s AI pipeline and tracks them on a graphical dashboard.

The scope of the service includes all three of the major cloud platforms, reporting on instances of Amazon Web Services’ SageMaker, Google Cloud Platform’s Vertex AI and Microsoft Azure Cognitive Research. It also searches for misconfigured services using a set of preconfigured rules that can flag missing data encryption or use of public IP addresses.

Another rule set can detect sensitive model training data and help secure it properly, which will help prevent data leaks or model poisoning attacks.

A second collection of features is used for attack path analysis that is specific to AI-related workflows, such as exposed secrets, AI pipeline problems and model misconfigurations. Both the AI and non-AI risk analyses are graphically shown on the Wiz Security Graph (pictured).

Wiz claims it’s the first CNAPP vendor to offer this level of AI security, but it’s not. Many other providers have begun widening their security tools to include an AI threat focus, such as Datadog Inc., Radiant Security Inc., Palo Alto Networks Inc. and Orca Security Ltd., just to point out a few of them. Where Wiz excels is in its threat data visualization, which makes it easier for security analysts to quickly identify problem areas and fix them.

Image: Wiz