Announcing Wiz Runtime Sensor add-on for GKE: Turnkey threat detection for Kubernetes
Google Cloud and Wiz launched a managed runtime threat detection add-on for GKE clusters, integrating Wiz’s eBPF-based sensor directly into the platform to reduce operational overhead and improve security posture.
Google Cloud and Wiz introduced the Wiz Runtime Sensor add-on for Google Kubernetes Engine (GKE) in preview, designed to address the limitations of static vulnerability scans by providing real-time, kernel-level threat detection through eBPF technology. The integration aims to reduce deployment complexity and operational friction that often accompany third-party runtime agents, particularly in large-scale Kubernetes environments. By embedding the sensor as a first-party managed platform add-on, Google Cloud automates lifecycle management, credential handling, and fleet-wide governance for both Standard and Autopilot GKE clusters.
The add-on leverages GKE’s native Secret Manager integration to centralize credential storage and distribution, eliminating the need for platform teams to manually manage Wiz API keys across cluster namespaces. Credentials are injected into Runtime Sensor pods automatically, and updates to keys in Secret Manager propagate without requiring cluster restarts or manual intervention. Platform administrators can enable the sensor during cluster creation or retroactively on existing clusters using standard gcloud commands, streamlining adoption while maintaining secure credential practices.
To enforce consistent runtime protection across an organization, platform teams can deploy a custom constraint requiring all new GKE clusters to install the managed Wiz sensor. This ensures that workloads are monitored for active threats before receiving traffic, addressing gaps in fleet-wide enforcement. The integration also supports Workload Identity Federation for GKE, further simplifying secure credential management and reducing administrative overhead.
The managed sensor feeds runtime telemetry into the Wiz AI Application Protection Platform, enabling advanced threat detection beyond static alerting. This includes monitoring for attacks and data exfiltration targeting mission-critical applications and AI agents deployed on GKE. By combining GKE’s managed automation with Wiz’s security intelligence, the solution aims to maintain strong runtime defense without compromising developer productivity or operational efficiency.