October 2026
New Features
Section titled “New Features”AI-Powered Import Expanded to Incidents
Section titled “AI-Powered Import Expanded to Incidents”Import via AI, introduced in a previous release for risks, covers incidents as well. Upload a post-mortem, incident report, or breach notification and review the proposed incidents beside the source document before anything is added. Import incidents with AI.
AI-Imported Records Include the Source Document as an Attachment
Section titled “AI-Imported Records Include the Source Document as an Attachment”The document you upload is automatically attached to every risk or incident created from it, so the original report is in each record’s Attachments section. See risk attachments and incident attachments.
Redesigned Integrations Settings
Section titled “Redesigned Integrations Settings”Settings > Integrations lists each integration as its own row, with type filters, switches that save as you flip them, a warning icon when a connection has a problem, and in-place editing and testing. Integrations that import risks or incidents can tag every record they bring in, and records are opened by an integration user named for the connection, such as “Wiz Production”. Manage your integrations.
Members Can Create Their Own Service Accounts
Section titled “Members Can Create Their Own Service Accounts”You no longer need an administrator to get API access. Any member can create service accounts from Settings > Team, limited to roles within their own permissions. Administrators can see and transfer all of them. Learn how service accounts work.
Date Ranges in Your Own Time Zone
Section titled “Date Ranges in Your Own Time Zone”Date filters on the registers and the Home dashboard follow your own time zone, include both ends of a range, and carry the exact range in shared links. How date filters work.
Improvements
Section titled “Improvements”Clear Threat Objectives for Many Items at Once
Section titled “Clear Threat Objectives for Many Items at Once”When you edit several risks or incidents together and their Threat Objectives differ, Varied – click to override lets you clear or replace them on every selected item. See risk threat objectives and incident threat objectives.
Updated Headings for Organization Supplements
Section titled “Updated Headings for Organization Supplements”Supplements use a heading one level below their policy section, and are listed oldest first. Where supplements appear.
Leave Your Only Organization
Section titled “Leave Your Only Organization”You can leave an organization from Settings > Company even if it’s your only one. Leaving an organization.
Sorting in the API
Section titled “Sorting in the API”API list endpoints for risks, incidents, members, authorized apps, and jobs accept a single sort option that can combine several fields and directions. The older ordering option on the risk and incident lists is deprecated and has been removed from the other lists. See the API reference.
Stricter Service Account Security
Section titled “Stricter Service Account Security”Service accounts and integration credentials can no longer create organizations or accept invitations, and a service account’s allowed IP addresses are also enforced when it requests a token. IP allowlists.
- The New status pill is readable in light mode again. It previously showed dark text on a dark background.
- Titles containing
&,[, or]no longer show up with extra characters such as&or backslashes in the register tables or in the item editor. Descriptions and other text cells in the tables also preview as plain text. - The domains table in Settings fills its container.
- The organization notifications page no longer takes several seconds to load when Slack or Microsoft Teams isn’t set up.