Wiz

The Wiz connector imports cloud resource inventory and configuration so Nullify can evaluate accounts already covered by your Wiz tenant. It is an inbound scanner-source integration, not a destination for exporting Nullify findings. Availability is enabled per tenant; contact Nullify if Wiz is absent from your integration catalog.

Connect

1. Create or select a Wiz service account with permission to read the intended inventory.

2. Copy your tenant's GraphQL API endpoint from Wiz's service-account settings.

3. In Nullify's Wiz connection form, enter apiEndpoint, clientId, and clientSecret.

4. Select the identity provider: cognito for auth.app.wiz.io, auth0 for auth.wiz.io, or custom with customTokenUrl and, if needed, customAudience.

5. Select Connect to save the connection. Reopen its management form, then select Test to check the stored connection. Confirm that the expected accounts and resources appear after collection.

Choosing the wrong identity provider can return 401 even when the client credentials are correct. Verify the token service for your Wiz tenant before rotating a working secret. Keep the secret in the connector's secret field.

Wiz-sourced configuration can feed Cloud Audits. Incomplete upstream inventory can limit coverage; an account with no imported resources is not automatically a clean account.