Manager – Solutions Support Engineering

Base44 and Wiz team up to catch 'shadow AI' before it ships. Base44 now scans AI-built apps with Wiz before they ship, targeting shadow AI, apps built inside a company without IT or security ever knowing they exist. BuilderWithin Editorial Team BuilderWithin What happened. Base44 partnered with Wiz, the Google Cloud security platform, to add security scanning directly into its app-building workflow. The stated target is "shadow AI," which Base44 defines as any AI tool, model, or AI-built app that people inside an organization use or create without IT or security's knowledge or approval. It's the AI-era version of shadow IT: tools adopted from the bottom up faster than anyone can track them. Base44 cites a Gartner projection that "by 2030, more than 40% of organizations will experience a security or compliance incident tied to shadow AI." That's a forecast, not a measured outcome, but it's the reasoning behind the partnership. Why it matters. AI app builders exist to let people without a software engineering background ship a working app in hours, complete with a database, logins, and access to real data. That speed is the entire point of a tool like Base44. It also means an app touching real user data can go live before anyone with security responsibility even knows it exists. Base44 frames the tradeoff plainly: an organization can "lock everything down and lose productivity, or let it run and lose visibility." The Wiz integration is an attempt at a third option: keep building fast, but check the app before it ships. Concretely, a builder can run a Wiz scan against an app's code. That scan checks the app against the organization's own existing Wiz security policy and flags things like vulnerable dependencies and risky code patterns. Findings appear inside Base44 so a builder can fix them without switching tools, and the same results also flow to the organization's Wiz dashboard, giving a security team visibility they didn't have before. Base44 also added two account-level controls: restricting which integrations an app is allowed to use, and role-based publishing, meaning an organization can define who is allowed to make an app live and to whom. Who should care. This is built for teams, not solo builders. If you build inside an organization that already has an IT or security function, and that organization uses Wiz, this closes a real gap. Someone can now see what AI-built apps exist and what they're exposed to before those apps reach real users. If you build alone with no security team behind you, the Wiz-specific tooling doesn't apply to you directly. The underlying risk still does. An app you build with a login and a database is only as safe as the access controls you actually set on it, whether or not anyone is scanning it. What builders should do next. If you build inside a Base44 workspace with security or IT oversight, ask whether Wiz is already connected. Base44's post doesn't give pricing or a specific settings path, it only points to its own documentation for connecting Wiz. If you have admin or publishing rights, use Base44's role-based publishing controls to decide who can make an app live and to whom, and restrict integrations to what an app genuinely needs rather than leaving everything open by default. If you're building solo, the practical lesson holds regardless of tooling: an app that quietly does something you didn't intend is still a risk, even with no organization or security team involved. Before you publish anything that touches real user data, check what integrations and login options are actually enabled, not just whether the feature works. End of article BuilderWithin Weekly · Free If you found this useful, subscribe free. Get BuilderWithin Weekly in your inbox. Daily briefings publish on the site, and the weekly roundup pulls together what mattered. Unsubscribe any time. BuilderWithin Weekly · Free · No spam Get BuilderWithin Weekly in your inbox. One weekly roundup in your inbox. Daily briefings publish on the site for people who ship products. Unsubscribe any time · Weekly email, always free

A VP of talent at Google's Wiz shares tips for getting hired at a late-stage startup. Jul 3, 2026, 2:18 AM PT A blockbuster acquisition, IPO, or funding round can turn a startup into a hiring magnet. It can also change what it takes to land a job there. Earlier this year, Google completed its $32 billion acquisition of cybersecurity startup Wiz, marking the search giant's largest deal to date. Erin Gard, vice president of talent at Wiz, told Business Insider that the company has seen a significant jump in job applications since the deal was announced a little over a year ago. She also said Wiz, which has maintained its brand since the acquisition, is hiring for more than 100 open roles across sales, engineering, and field operations. "Startups are places that a lot of people want to be in, particularly right now, so our applications are quite high," said Gard. Early-stage startups can offer big upside before a major liquidity event or financing milestone, as Business Insider recently reported. Later-stage ventures have their own draw: more resources, greater job security, and additional room for advancement. Stiff competition isn't the only hurdle to getting a foot in the door, though. Gard said candidates need to show they're equipped to support the company's current and next stage of growth - not the scrappy startup it used to be. For job seekers hoping to join a mature venture like Wiz, she shared the following advice: Tailor your pitch to the company's current stage. The skills most prized at a startup can change as quickly as the company grows. Candidates should be ready to show how their experience aligns with the business at its current stage. When Gard started at Wiz in 2022, she said she kept tabs on candidates in a spreadsheet. Today, her job requires fluency with applicant-tracking systems that can bring order to a much larger hiring operation. "Being able to demonstrate an understanding of the specific chapter that an organization is in is really, really helpful," Gard said. "That shows you're ready for that stage of growth, and you're going to be able to plug in and help support us where we're at." Talk about the customer, not just the company. At a mature startup, candidates should be careful not to frame their interest around the company's newfound status. A stronger pitch focuses on how they can help sustain its momentum and drive its next stage of growth, said Gard. They should also show they understand the specific challenges it's trying to solve and explain how their experience would help address them, she added. Gard cited a solutions engineer candidate who, when asked "Why Wiz?," described how customers at his previous employer struggled to prioritize millions of security findings. He explained how Wiz could help solve that problem and how he would support customers in the role. "He immediately knew the value proposition," Gard said, adding that the candidate's explanation of how customers would use Wiz in the real world "was spot on." The candidate was hired and has since been promoted to a management role, she added. Build relationships with insiders before a position opens. Job seekers should thoughtfully engage with a startup's leaders and hiring managers on social media, such as by commenting on posts about product launches or asking insightful questions. Gard said that kind of engagement can signal genuine interest and help establish credibility before an application is submitted. That can be true no matter what stage company you're looking to join. Jesse Dwyer, Perplexity's chief communications officer and a hiring manager, previously told Business Insider that participating on a startup's social media channels can be especially effective, since these companies often have more flexibility in how they identify and engage with applicants. Don't focus only on successes. Many candidates avoid discussing failures, said Gard, but she argued that hiring managers often favor those who can talk about setbacks, pivots, and lessons learned. Because startups inevitably make mistakes and adapt quickly, she said that candidates who demonstrate resilience and self-awareness tend to come across as more credible. "Being able to show that you too have gone through your own journey, similar to how a startup has, resonates really, really well," said Gard. "It's something that I think a lot of people are really scared to do."

NordStellar partners with Wiz to deliver advanced intelligence and visibility into exposed authentication data. June 30, 2026 08:00 ET | Source: NordStellar NEW YORK, June 30, 2026 (GLOBE NEWSWIRE) - The next-generation threat exposure management platform NordStellar proudly announces a partnership with cloud and AI security leader Wiz (now part of Google Cloud). Through this collaboration, NordStellar will provide Wiz customers with advanced intelligence on exposed authentication data stolen from infected machines. Visibility into hidden threats is essential for companies to stay ahead of cybercriminals and safeguard critical assets. Wiz customers will be able to utilize NordStellar's threat intelligence to obtain visibility into critical authentication data leaks, including cloud secrets/keys (AWS, Azure, GCP, and others), third-party secrets keys, as well as cloud and SSO credentials. "Leaked authentication tokens and credentials are a critical blind spot for many organizations. They can lead to high-impact attacks that are incredibly difficult to detect because threat actors using them often look just like legitimate users and create seemingly normal traffic," says Vakaris Noreika, head of product at NordStellar. "We are proud to partner with a cybersecurity giant like Wiz to help companies take control of their security posture and gain visibility into hidden threats before they escalate." Through this collaboration, NordStellar will monitor the deep and dark web for any exposed authentication data sourced from internal endpoint devices in an organization, providing Wiz with intelligence to share with its customers. When threats are identified, Wiz will alert impacted customers of secrets and cloud keys in their environment that have been stolen, allowing them to prioritize rotating the keys to prevent further misuse. "Authentication data leaks are a critical and often overlooked attack path in the cloud," says Amitai Cohen, attack vector intel lead at Wiz. "Partnering with NordStellar helps us surface those risks earlier, so our customers can take action before attackers do." ABOUT NORDSTELLAR NordStellar is a next-generation threat exposure management platform that enables companies to detect and respond to cyber threats before they escalate. It includes solutions like dark web and data breach monitoring, helping to prevent account takeovers, session hijacking, and other threats. NordStellar was created by Nord Security, a globally recognized company behind one of the world's most popular digital privacy tools, NordVPN. For more information, visit nordstellar.com.