What Dazz is
Acquired by Wiz. Dazz aggregates your security vulnerabilities into a single dashboard which allows easy assignment and risk based prioritization. Their approach to this problem does a lot of automated lookup work and has some advanced ability to find where container images are coming from. Dazz differentiates by being focused on remediation, rather than just prioritization. The vendor site is www.dazz.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Dazz covers
Dazz is in the catalog for these capabilities. Categories: ASPM, Secret Scanning, and Vulnerability Management. Catalog tags: Acquired.
How to evaluate Dazz in a security program
Use Dazz as a stack candidate, not as diligence evidence. The oneNorma score for Dazz is 6/10 (percentile 83). If the real gap is in ASPM, Secret Scanning, and Vulnerability Management, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.dazz.io publishes. Contrast it with pentesting and Security Cloud & Compliance.
