---
title: "Wiz"
slug: "wiz"
updated: 2026-06-30T00:36:05Z
published: 2026-06-30T00:36:05Z
canonical: "help.nucleussec.com/wiz"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.nucleussec.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Wiz

## Overview

Nucleus enables you to ingest your Wiz data directly into your Nucleus console using an automated connector. The connector uses the APIs provided by Wiz to seamlessly sync data into your Nucleus project for use in analysis, triage, automation, and reporting.

The Wiz connector supports importing findings in the following situations:

- Vulnerabilities for all active virtual machines on a daily schedule
- Immediate ingestion of vulnerabilities for active virtual machines for one or more subscriptions
- Vulnerabilities for container images that are currently running on a daily schedule
- Configuration findings for cloud resources on a daily schedule

Availability

The Wiz Cloud Resources ingestion connector is now generally available.

## Connector Setup

### Connector Setup Checklist

Follow the steps in this checklist to successfully set up this connector:

1. **API Access** Generate a client id and secret key with the appropriate permissions.
2. **Connector Configuration** Create and configure the connector in your Nucleus project.
3. **Data Ingestion** Create a vulnerability scan ingest rules to ingest vulnerabilities or configuration findings from Wiz.

### 1. API Access

1. Navigate to Wiz and setup access using the following URL ([direct link](https://docs.wiz.io/docs/nucleus-security-integration))
  1. Wiz API Scopes required for API key permissions
    1. Create:reports
    2. read:cloud_configuration
    3. read:cloud_configuration_finding
    4. read:cloud_configuration_rule
    5. read:projects
    6. read:reports
    7. read:resources
    8. read:vulnerabilities
    9. update:reports

1. Identify your **Instance URL** by first retrieving your **Tenant Data Center**:
  1. At the top right of your Wiz portal, click the user icon > **Tenant info** ([direct link](https://app.wiz.io/tenant-info/general)).
  2. At the left side, click **Data Center and Regions** ([direct link](https://app.wiz.io/tenant-info/data-center-and-regions)).
  3. Make a note of your **Tenant Data Center**.
  4. Your **Instance URL** can now be constructed according to the table below:

| Tenant | Instance URL |
| --- | --- |
| Wiz Commercial | https://api.<TENANT_DATA_CENTER>.app.wiz.io |
| Wiz for Gov (FedRAMP) | https://api.<TENANT_DATA_CENTER>.app.wiz.us |
| Wiz GovCloud | https://api.<TENANT_DATA_CENTER>.gov.wiz.io |
2. Identify your **Auth URL:**

| Tenant | Auth URL |
| --- | --- |
| Wiz Commercial | https://auth.app.wiz.io |
| Wiz for Gov (FedRAMP) | https://auth.app.wiz.us |
| Wiz GovCloud | https://auth.gov.wiz.io |

### 2. Connector Configuration

<editor360-custom-block data-preprocessing="true" data-sanitizationtags="strong"><ol><li>Open Nucleus and go to <strong>Integration Hub</strong><strong>&nbsp;&gt; Connector Setup.</strong></li><li>Under the <strong>Scanners</strong> section, click the <strong>Wiz</strong><strong>&nbsp;</strong>icon. You will see the following popup:<img src="https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image-1709774870966.png" class="fr-fic fr-dib"></li><li>In the <strong>Setup Wiz Connector&nbsp;</strong>popup, enter the following information:</li></ol></editor360-custom-block><editor360-custom-block data-preprocessing="true" data-sanitizationtags="thead,strong"><table style="width:62%;margin-right:calc(38%);"><thead><tr><th style="width:24.9184%;">Field</th><th style="width:74.9728%;">Description</th></tr></thead><tbody><tr><td style="width:24.9184%;">Name</td><td style="width:74.9728%;text-align:left;">(Optional) Enter a name for your connector. If left blank, this will default to Wiz.</td></tr><tr><td style="width:24.9184%;">Description</td><td style="width:74.9728%;">(Optional) Enter a description for your connector.</td></tr><tr><td style="width:24.9184%;">Instance URL</td><td style="width:74.9728%;">Enter the <strong>Instance&nbsp;</strong><strong>URL</strong> identified in API Access Step 2 above. Do not include /graphql in the URL.&nbsp;</td></tr><tr><td style="width:24.9184%;">Auth URL</td><td style="width:74.9728%;">Enter the <strong>Auth URL</strong> identified in API Access Step 3 above.</td></tr><tr><td style="width:24.9184%;">API Key</td><td style="width:74.9728%;">Enter the <strong>Client ID</strong> from API Access Step 1 above.</td></tr><tr><td style="width:24.9184%;">API Secret</td><td style="width:74.9728%;">Enter the <span style="caret-color:rgb(34, 34, 34);color:rgb(34, 34, 34);font-size:16px;"><strong>Client Secret</strong> from API Access Step 1 above.</span></td></tr></tbody></table></editor360-custom-block><editor360-custom-block data-preprocessing="true" data-sanitizationtags="strong"><ol start="4"><li>Click <strong>Verify Credentials</strong><strong>.</strong></li><li>Click <strong>Save</strong>.</li></ol></editor360-custom-block>

### 3. Vulnerability Data Ingestion

<editor360-custom-block data-preprocessing="true" data-sanitizationtags="strong"><ol><li>Go to <strong>Integration Hub</strong><strong>&nbsp;&gt; Import via Connector</strong>.</li><li>Select the Wiz connector you just created.</li><li>Select the method of import: VMs, Running Container Images or Cloud Resources.<img src="https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image-1714645824336.png" class="fr-fic fr-fil fr-dib" style="width:586px;"></li><li>Select the import method (All, or Subscription for VMs)</li><li>Select a schedule to ingest data into Nucleus, or import immediately if selecting subscriptions.</li><li>Click <strong>Save &amp; Finish</strong>.</li></ol></editor360-custom-block>

###