> For the complete documentation index, see [llms.txt](https://docs.nullify.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.nullify.ai/connectors/wiz.md).

# Wiz

The Wiz connector imports cloud resource inventory and configuration so Nullify can evaluate accounts already covered by your Wiz tenant. It is an inbound scanner-source integration, not a destination for exporting Nullify findings. Availability is enabled per tenant; contact Nullify if Wiz is absent from your integration catalog.

## Connect

1. Create or select a Wiz service account with permission to read the intended inventory.
2. Copy your tenant's GraphQL API endpoint from Wiz's service-account settings.
3. In Nullify's Wiz connection form, enter `apiEndpoint`, `clientId`, and `clientSecret`.
4. Select the identity provider: `cognito` for `auth.app.wiz.io`, `auth0` for `auth.wiz.io`, or `custom` with `customTokenUrl` and, if needed, `customAudience`.
5. Select **Connect** to save the connection. Reopen its management form, then select **Test** to check the stored connection. Confirm that the expected accounts and resources appear after collection.

Choosing the wrong identity provider can return `401` even when the client credentials are correct. Verify the token service for your Wiz tenant before rotating a working secret. Keep the secret in the connector's secret field.

Wiz-sourced configuration can feed [Cloud Audits](/capabilities/cloud-audits.md). Incomplete upstream inventory can limit coverage; an account with no imported resources is not automatically a clean account.