4 ms·

If you'd be so kind for those of us that haven't touched cloud in 5/10 years, what is Wiz? from reading the google announcement: solving the supply chain hybrid

by neom 2y ago

If you'd be so kind for those of us that haven't touched cloud in 5/10 years, what is Wiz? from reading the google announcement: solving the supply chain hybrid cloud security issues? I could google I know but you seem to know what you are talking about, so if you'd be so kind. :)

SSLy 2y ago
it's a linter for your yaml spaghetti
- Tuna-Fish 2y ago
  And reason they can get recurring revenue for what is indeed basically a linter, is that what it lints your configuration files against is not just best practices but also regulatory compliance. And that gets hairy enough and changes often enough that it's usually worth it to pay for it to be someone else's headache.
- bigfatfrock 2y ago
  ^ Poetry! If only we had linters for all the yaml spaghetti out there in ops land.
  - tempodox 2y ago
    Your system nosediving is the linter.
- theamk 2y ago
  That's just one part. The real value is it's linter for _any_ cloud config - you can use terraform or cloudformation or just click around in user interface, and Wiz's rules would still work.
JKCalhoun 2y ago
I thought they made smart lightbulbs (I have some "WiZ" ones installed in fact).
- Kipters 2y ago
  I was worried it was that WiZ, luckily it's not Their bulbs are one of the few WiFi bulbs that don't require an app to operate (only for the initial configuration)
  - shermantanktop 2y ago
    I was worried it was https://en.wikipedia.org/wiki/The_Wiz_(film) https://en.wikipedia.org/wiki/The_Wiz_(film)
  - dublinben 2y ago
    Can you elaborate on this? The app (both versions!) barely works, and they don’t appear to be compatible with Apple Home like others.
    - Kipters 2y ago
      You can use a Python library/tool to control them (https://github.com/sbidy/pywizlight https://github.com/sbidy/pywizlight), which means Home Assistant supports them out of the box. In my setup I have Home Assistant running on an N100 mini PC and that's what I use as an HomeKit bridge. If possible I'd use ZigBee or Z-Wave bulbs (or even better, switches) though.
  - birdman3131 2y ago
    Shelly does not require an app at all. Initial setup can be done via the WIFI AP it generates by default. Cloud is a checkbox in the app/web interface. https://shelly.guide/add-a-shelly-to-your-wi-fi-through-web-interface/ https://shelly.guide/add-a-shelly-to-your-wi-fi-through-web-...
Atotalnoob 2y ago
When you use a cloud provider to setup a VM, what policies do you apply to it in order to ensure it’s secure? Wiz and other tools in the same space tell you and tracks compliance across your fleet. Idk if wiz does this, but their competitors have “compliance packs” which are preset compliance patterns, IE hipaa, finra, etc. That way you click a button and it tells you every change you need to make to be compliant Edit: this is all just examples
- Aeolun 2y ago
  You are telling me it’s a huge excel sheet with all my cloud resources (some colored red) in?
  - Atotalnoob 2y ago
    Yes? They have other capabilities, but that’s the primary value add. Imagine you are working for a fortune 100 company with hundreds of thousands of cloud resources. You can’t manage them individually.
- neom 2y ago
  Figures. Crazy how badly I midsized this problem. When I was working on a cloud provider I suspected this would be a big problem space for building in, but I thought it was in the low billions, I was thinking (I guess stupidly) that the clouds and tools around them would be kind enough to create a lot of standardization so as at least this stuff wasn't junk. I get wanting to create a bit of friction, but thought "this is a bad place to make high friction". I guess it's pretty bad given the size of this acquisition? Or GCP just wants surface area data on other cloud providers (I presume this would aid in that, but I don't know)?
  - mattnewton 2y ago
    Idk about other clouds, but Google didn’t eat their own cloud dog food when I was there. We had people food (borg) that was kinda impossible to separate from the infrastructure of google3 (and Google dev processes) and so cloud was built different. It wouldn’t surprise me if that organization just had no awareness of how bad the friction really was for long enough for Wiz to get really good at it?
swyx 2y ago
thank you for asking on behalf of the many of us who are in the same boat.
rakkhi 2y ago
If you don't mind a short blog post I run though the capabilities of something like Wiz: https://rakkhi.substack.com/p/choosing-the-best-cloud-native-application https://rakkhi.substack.com/p/choosing-the-best-cloud-native...

by neom 2y ago

SSLy 2y ago

it's a linter for your yaml spaghetti

Tuna-Fish 2y ago
And reason they can get recurring revenue for what is indeed basically a linter, is that what it lints your configuration files against is not just best practices but also regulatory compliance. And that gets hairy enough and changes often enough that it's usually worth it to pay for it to be someone else's headache.
bigfatfrock 2y ago
^ Poetry! If only we had linters for all the yaml spaghetti out there in ops land.
- tempodox 2y ago
  Your system nosediving is the linter.
theamk 2y ago
That's just one part. The real value is it's linter for _any_ cloud config - you can use terraform or cloudformation or just click around in user interface, and Wiz's rules would still work.

JKCalhoun 2y ago

I thought they made smart lightbulbs (I have some "WiZ" ones installed in fact).

Kipters 2y ago
I was worried it was that WiZ, luckily it's not Their bulbs are one of the few WiFi bulbs that don't require an app to operate (only for the initial configuration)
- shermantanktop 2y ago
  I was worried it was https://en.wikipedia.org/wiki/The_Wiz_(film) https://en.wikipedia.org/wiki/The_Wiz_(film)
- dublinben 2y ago
  Can you elaborate on this? The app (both versions!) barely works, and they don’t appear to be compatible with Apple Home like others.
  - Kipters 2y ago
    You can use a Python library/tool to control them (https://github.com/sbidy/pywizlight https://github.com/sbidy/pywizlight), which means Home Assistant supports them out of the box. In my setup I have Home Assistant running on an N100 mini PC and that's what I use as an HomeKit bridge. If possible I'd use ZigBee or Z-Wave bulbs (or even better, switches) though.
- birdman3131 2y ago
  Shelly does not require an app at all. Initial setup can be done via the WIFI AP it generates by default. Cloud is a checkbox in the app/web interface. https://shelly.guide/add-a-shelly-to-your-wi-fi-through-web-interface/ https://shelly.guide/add-a-shelly-to-your-wi-fi-through-web-...

Atotalnoob 2y ago

When you use a cloud provider to setup a VM, what policies do you apply to it in order to ensure it’s secure? Wiz and other tools in the same space tell you and tracks compliance across your fleet. Idk if wiz does this, but their competitors have “compliance packs” which are preset compliance patterns, IE hipaa, finra, etc. That way you click a button and it tells you every change you need to make to be compliant Edit: this is all just examples

Aeolun 2y ago
You are telling me it’s a huge excel sheet with all my cloud resources (some colored red) in?
- Atotalnoob 2y ago
  Yes? They have other capabilities, but that’s the primary value add. Imagine you are working for a fortune 100 company with hundreds of thousands of cloud resources. You can’t manage them individually.
neom 2y ago
Figures. Crazy how badly I midsized this problem. When I was working on a cloud provider I suspected this would be a big problem space for building in, but I thought it was in the low billions, I was thinking (I guess stupidly) that the clouds and tools around them would be kind enough to create a lot of standardization so as at least this stuff wasn't junk. I get wanting to create a bit of friction, but thought "this is a bad place to make high friction". I guess it's pretty bad given the size of this acquisition? Or GCP just wants surface area data on other cloud providers (I presume this would aid in that, but I don't know)?
- mattnewton 2y ago
  Idk about other clouds, but Google didn’t eat their own cloud dog food when I was there. We had people food (borg) that was kinda impossible to separate from the infrastructure of google3 (and Google dev processes) and so cloud was built different. It wouldn’t surprise me if that organization just had no awareness of how bad the friction really was for long enough for Wiz to get really good at it?

swyx 2y ago

thank you for asking on behalf of the many of us who are in the same boat.

rakkhi 2y ago

If you don't mind a short blog post I run though the capabilities of something like Wiz: https://rakkhi.substack.com/p/choosing-the-best-cloud-native-application https://rakkhi.substack.com/p/choosing-the-best-cloud-native...