Wiz introduces Red and Blue Agents — AI attacker and AI investigator for the SOC

Wiz published its SOC agent capability on Nov 2: the Red Agent is an AI-powered attacker that continuously finds and validates exploitable risk across the attack surface and delivers pre-breach SOC-level alerts (with proof of exploitability and reproduction steps), while the Blue Agent investigates active threats at machine speed with cloud/code/runtime context; a Green Agent routes fixes to owners.

It reframes SOC work from reactive detection to proactive, validated exposure — treating proven-exploitable attack paths with the urgency of a live threat — which the company argues is necessary to keep pace with AI-speed offense in custom AI applications.

SOC and DevSecOps teams on Wiz should evaluate Red Agent for validated pre-breach alerts and Blue Agent for AI-assisted incident investigation.