C1 and Wiz Forge Alliance to Automate Cloud Security Decisions

SAN FRANCISCO, CA – April 28, 2026 – Identity platform C1 today announced a significant collaboration with cloud security leader Wiz, now part of Google Cloud, aimed at transforming how organizations respond to cloud-based threats. By joining the Wiz Integration Network (WIN), C1 will directly ingest cloud risk findings from Wiz into its identity governance engine, creating a system that automatically translates security alerts into real-time access decisions.

This partnership addresses a persistent challenge in cybersecurity: the gap between detecting a risk and acting on it. Traditionally, a security finding—such as an exposed credential or an overprivileged user account flagged by a tool like Wiz—would trigger a manual workflow, requiring security and IT teams to coordinate a response. The new integration promises to eliminate this delay by creating a direct, automated pipeline from detection to remediation.

Closing the Loop From Detection to Action

The core of the collaboration lies in connecting Wiz’s comprehensive cloud visibility with C1’s governance capabilities. Wiz provides security teams with a real-time, agentless view of their entire cloud infrastructure, identifying misconfigurations, vulnerabilities, and potential attack paths. Through the new integration, these precise findings no longer just populate a dashboard; they become actionable triggers within C1's policy engine.

When Wiz identifies a risk associated with a specific identity, C1 can automatically initiate a range of governance actions based on predefined policies. For example, a finding of a high-risk misconfiguration could trigger stricter approval requirements for that user's future access requests. An identity flagged for excessive permissions might automatically be enrolled in an immediate access review, or its entitlements could be revoked entirely if the risk crosses a critical threshold.

"A Wiz finding shouldn't sit in a dashboard waiting for someone to act on it — it should trigger an immediate governance response," said Alex Bovee, CEO and co-founder of C1, in the announcement. "That's what this integration delivers."

This automated feedback loop enables the enforcement of continuous least privilege. Instead of relying on quarterly or annual access reviews, access controls can adapt dynamically as an organization's cloud posture changes. The integration also enriches the decision-making process for human managers. During access approval and review workflows, approvers within the C1 platform will see Wiz's risk data—including severity levels and affected resources—presented directly alongside the request, providing crucial context at the point of decision.

Ecosystem Power and the Shadow of Google

C1's entry into the Wiz Integration Network (WIN) highlights a broader industry trend toward interconnected security ecosystems. Launched two years ago, WIN has grown to over 300 partners, fostering a collaborative environment where security tools can share data and orchestrate workflows. Wiz's philosophy is that security is a "team sport," and a robust partner network allows customers to enhance their security posture without being locked into a single vendor's toolset.

“We’re happy to welcome C1 to the Wiz Integration Network,” said Oron Noah, VP of Product, Extensibility and Partnerships at Wiz. “This integration connects risk findings from Wiz with C1’s governance engine, so teams can automate access decisions and enforce least privilege across their cloud environments, turning visibility into immediate action.”

This partnership unfolds under the significant shadow of Google's recent acquisition of Wiz. Finalized in March 2025 for a reported $32 billion, the deal was Google's largest to date and marked a major strategic push to dominate the multi-cloud security market. The acquisition allows Google to bolster its own cloud security offerings, but it also raises questions of neutrality. To mitigate concerns, Google has stated its intention to keep Wiz operating as an independent, multi-cloud platform, which is crucial for retaining customers who operate across AWS and Azure. The C1 integration demonstrates Wiz's continued execution of this open, ecosystem-focused strategy.

Securing the 'Agentic Workforce' for the AI Era

The timing of this integration is particularly relevant as organizations grapple with the security implications of artificial intelligence. C1 has positioned itself as the identity platform for the emerging "agentic workforce"—a term for the growing legion of autonomous AI agents and digital workers being deployed within enterprises. These non-human workers, which perform complex tasks and interact with sensitive data, represent a new frontier for identity and access management.

Traditional security models designed for human users are often inadequate for managing this "agent sprawl." Static API keys and hard-coded credentials for AI agents create significant vulnerabilities and violate modern security principles like zero trust and least privilege. The Cloud Security Alliance has noted that a vast majority of organizations have unknown AI agents running in their infrastructure, leading to a new wave of potential security incidents.

By treating AI agents as "first-class identities," C1 aims to provide the visibility and governance necessary to adopt AI securely. The partnership with Wiz is a critical component of this vision. Securing AI workloads begins with securing the underlying cloud infrastructure they run on. By leveraging Wiz's ability to detect misconfigurations and overprivileged identities in the cloud services that power AI models, C1 can enforce robust access controls for both the humans and the AI agents interacting with those systems.

A Differentiated Approach in a Crowded Market

Both C1 and Wiz operate in highly competitive markets. C1 competes in the Identity Governance and Administration (IGA) space against giants like Okta, SailPoint, and Microsoft, while Wiz faces off against Palo Alto Networks, CrowdStrike, and others in the Cloud Native Application Protection Platform (CNAPP) arena. The differentiation of this partnership lies not in the individual components, but in their seamless integration to automate a critical security workflow.

While many CSPM tools are excellent at identifying risks, the remediation process often remains manual. The C1-Wiz integration closes this loop, moving beyond mere detection to automated governance and action. This focus on real-time, continuous enforcement of least privilege, driven by live risk data, offers a more dynamic and adaptive security model than traditional, schedule-based approaches.

As organizations accelerate their cloud adoption and AI initiatives, the complexity of managing access and risk is growing exponentially. The collaboration between C1 and Wiz represents a strategic response to this reality, offering a unified solution that bridges the gap between cloud security posture and identity governance. This type of deep integration is becoming essential for organizations seeking to manage risk effectively in increasingly automated and dynamic technology environments.