[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjnGCiKN_SFzlcYfK7-XNWRB5MZ7-ZrOFxxiHH67ZHX8":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":118},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"77405141-febc-483a-8c00-5806043294ff","ASPM in the AI Era Part 3: Fixing Risk at the Speed of Code","aspm-in-the-ai-era-part-3-fixing-risk-at-the-speed-of-code-85c5a6","Accelerate MTTR and eliminate remediation bottlenecks with simplified ownership mapping, code fixes, and automated workflows","Wiz Code aims to address the challenge of fixing vulnerabilities at scale by automating remediation workflows. It simplifies ownership mapping by tracing cloud assets back to specific code authors and uses the Wiz Green Agent to provide tailored, multi-step remediation plans. The platform can generate pull requests directly or hand off guidance to coding agents, aiming to reduce the mean-time-to-remediation (MTTR).","Wiz Code introduces automated workflows to accelerate vulnerability remediation for engineering teams.","https:\u002F\u002Fwww.wiz.io\u002Fblog\u002Faspm-ai-era-pt-3-fixing-risk-code-speed","https:\u002F\u002Fwww.datocms-assets.com\u002F75231\u002F1794493013-aspm3-copy-2x.png","2026-11-12T18:32:24+00:00","2026-11-12T19:00:04.562892+00:00",7,[17,20,22,24,26,29],{"name":18,"type":19},"Wiz Code","product",{"name":21,"type":19},"Wiz Green Agent",{"name":23,"type":19},"Wiz Workflows",{"name":25,"type":19},"Wiz Security Graph",{"name":27,"type":28},"Wiz","vendor",{"name":30,"type":31},"SAST","technology","02371804-cf6d-4449-98de-f1a2d4d9b266",{"id":32,"icon":34,"name":35,"slug":36},null,"Tools","tools",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[27,18,21],{"controls":58,"vendors":117},[59,88],{"slug":60,"name":61,"problem":62,"products":63},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":89,"name":90,"problem":91,"products":92},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[93,101,109],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-xray","JFrog Xray","https:\u002F\u002Fjfrog.com\u002Fxray\u002F","Software composition analysis and SBOM generation for artifacts.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",[],{"slug":119,"title":120,"body":121,"framework_refs":122,"framework_notes":128},"automating-remediation-is-essential-to-closing-the-gap-between-vulnerability-discovery-and-fix","Automating Remediation Is Essential to Closing the Gap Between Vulnerability Discovery and Fix","Organizations increasingly discover vulnerabilities faster than they can remediate them, creating a dangerous backlog of known, unaddressed risks. The core problem is not detection but ownership ambiguity and manual remediation workflows that slow down the fix cycle. When developers cannot quickly identify what code they own, what is vulnerable, and how to fix it, mean-time-to-remediation (MTTR) balloons. Automating remediation workflows — including ownership mapping, guided fix plans, and AI-generated pull requests — directly attacks this bottleneck. Speed of remediation is now a security-critical metric, not just an operational convenience.",[123,124,125,126,127],"CIS Control 7: Continuous Vulnerability Management (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 RS.MI-2: Incident Mitigation","NIS2 Article 21(2)(e)","OWASP A06:2021 Vulnerable and Outdated Components",{"NIS2 Article 21(2)(e)":129,"NIST SP 800-53 SI-2: Flaw Remediation":130,"NIST CSF 2.0 RS.MI-2: Incident Mitigation":131,"OWASP A06:2021 Vulnerable and Outdated Components":132,"CIS Control 7: Continuous Vulnerability Management (v8)":133},"This provision requires security in development and maintenance including vulnerability handling and disclosure, making automated, developer-integrated remediation workflows a direct compliance enabler.","SI-2 requires that organizations identify, report, and correct information system flaws in a timely manner, directly aligning with the need to automate and accelerate remediation workflows described in the article.","This category calls for timely containment and mitigation of identified vulnerabilities, which is what automated remediation tooling and ownership mapping are designed to accelerate.","This risk category highlights the danger of unpatched or vulnerable components in production, reinforcing why rapid, scalable remediation of code-level vulnerabilities is a critical security objective.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities on a defined timeline — exactly the MTTR reduction and automated remediation workflow problem this article addresses."]