Google Cloud and Wiz Launch Built-In Runtime Protection for Kubernetes Clusters

Google Cloud and Wiz have announced the Wiz Runtime Sensor add-on for Google Kubernetes Engine (GKE), now available in Preview. It works with both GKE Standard and GKE Autopilot clusters. According to Wiz Research, the add-on is a first-party integration: GKE deploys the sensor, injects the credentials it needs and handles updates automatically through the control plane.

The announcement addresses a gap that scanning tools leave open. Static vulnerability scanners and pre-deployment image checks examine software at rest, so they cannot stop active exploits, live reverse shells, privilege escalations or zero-day execution paths happening in node memory. Wiz says runtime protection has been hard to adopt for four reasons: deploying third-party agents across many clusters is slow, distributing and rotating tokens and API keys adds risk, new clusters can go live without coverage before security teams know they exist, and teams worry that agents will consume CPU and memory needed by business workloads.

Wiz argues that runtime protection should be native, platform-managed and built into the cloud environment rather than added as an afterthought. Note that this is a Preview release and the material comes from the vendor, so businesses using GKE should assess it against their own needs. This summary is based on the opening of the source article only.