How does the Wiz-Netskope integration actually block access to compromised resources?

When Wiz detects a security issue, it sends a webhook to an AWS-based integration toolkit. This toolkit then uses Netskope's NPA APIs to add the affected hostname to a blocked private applications list. A real-time protection policy in Netskope references this list, automatically preventing users from accessing the compromised resource until Wiz reports the issue as resolved.

What cloud resources can be protected through this integration?

The integration supports any cloud service that Netskope users access through private applications, including EC2 virtual machines, EKS clusters, and other workloads across AWS, Azure, and GCP environments. The specific resources monitored are configured in the Wiz dashboard when setting up the webhook.

Wiz and Netskope Integration: Dynamic Cloud Access Control

Name: Wiz and Netskope Integration: Dynamic Cloud Access Control
Uploaded: 2026-04-02T18:57:35-04:00
Duration: 4 min
Description: TL;DR The Wiz-Netskope integration uses webhooks and APIs to automatically block access to private applications when Wiz detects security issues in cloud workloads. An AWS-based integration toolkit (API Gateway and Lambda) serves as the bridge between ...

netskope

04/02/2026

0 (0%)

Report Like Favorite

TL;DR

The Wiz-Netskope integration uses webhooks and APIs to automatically block access to private applications when Wiz detects security issues in cloud workloads.
An AWS-based integration toolkit (API Gateway and Lambda) serves as the bridge between Wiz's security intelligence and Netskope's access policies.
When Wiz identifies issues with resources like EC2 instances or EKS clusters, affected hostnames are automatically added to a blocked applications list in Netskope.

Summary

This technical demonstration showcases the Netskope and Wiz integration, which creates a unified control plane for dynamically managing access to private applications based on security issues detected by Wiz. The integration leverages Wiz webhooks and Netskope APIs through an AWS-based integration toolkit, enabling automated policy enforcement when Wiz identifies vulnerabilities or security concerns in cloud workloads. The demonstration walks through the complete workflow: configuring the webhook connection in the Wiz dashboard, observing how security issues trigger automatic blocking of affected private applications in Netskope's real-time protection policies, and how resolved issues automatically restore access. This bidirectional communication between the platforms enables organizations to proactively block user access to compromised or vulnerable cloud resources across AWS, Azure, and GCP environments without manual intervention, significantly reducing the window of exposure when security issues are detected.

Chapters

0:00 - Introduction
0:28 - Integration Architecture Overview
1:07 - Netskope Dashboard Configuration
1:48 - Live Webhook Demonstration
3:22 - Issue Resolution Flow

Key Quotes

0:12 "And what this does is it utilizes the WIS Webhook and Netskope APIs to create a unified control plane for dynamically blocking access to private applications from Netskope based on issues that WIS communicates to us."
3:09 "So now all of the Netskope users will no longer be able to access this host name until WIS resolves the issue and we can remove this from the host name list."

Categories:

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

05/19/2026

01:00 PM

05/19/2026

How to Build an AI Governance Foundation for GenAI - Before, Duration and After Deployment

https://www.truthinit.com/index.php/channel/1936/how-to-build-an-ai-governance-foundation-for-genai-before-duration-and-after-deployment/
05/20/2026

08:00 AM

05/20/2026

Establishing a Robust AI Governance Framework for GenAI Throughout the Deployment Lifecycle

https://www.truthinit.com/index.php/channel/1937/establishing-a-robust-ai-governance-framework-for-genai-throughout-the-deployment-lifecycle/
05/20/2026

10:00 PM

05/20/2026

Establishing a Robust AI Governance Framework for GenAI Throughout Its Lifecycle

https://www.truthinit.com/index.php/channel/1953/establishing-a-robust-ai-governance-framework-for-genai-throughout-its-lifecycle/
05/21/2026

11:00 AM

05/21/2026

Risk in Real Time Demo Series: The Autonomous Era - Orchestrating a Resilient Enterprise

https://www.truthinit.com/index.php/channel/1372/risk-in-real-time-demo-series-the-autonomous-era-orchestrating-a-resilient-enterprise/
05/27/2026

04:00 AM

05/27/2026

Rivoluziona i rischi dell'AI in opportunità con Netskope AI Security

https://www.truthinit.com/index.php/channel/1925/rivoluziona-i-rischi-dellai-in-opportunità-con-netskope-ai-security/
05/27/2026

10:00 AM

05/27/2026

Adopting AI: From Illusion to Intentional Control

https://www.truthinit.com/index.php/channel/1924/harnessing-ai-transitioning-from-illusion-to-purposeful-mastery/
05/28/2026

01:00 PM

05/28/2026

Harnessing AI for Smaller Teams: Strategies for Secure Implementation

https://www.truthinit.com/index.php/channel/1951/harnessing-ai-for-smaller-teams-strategies-for-secure-implementation/
06/02/2026

01:00 PM

06/02/2026

Spring of Satori: Delving into Recent Findings and 2026's Threat Landscape

https://www.truthinit.com/index.php/channel/1930/spring-of-satori-delving-into-recent-findings-and-2026s-threat-landscape/
06/16/2026

07:00 AM

06/16/2026

Establishing Clear Priorities: Addressing Data Risks Effectively

https://www.truthinit.com/index.php/channel/1952/establishing-clear-priorities-addressing-data-risks-effectively/