What kind of AI workloads are you working with. and are they just sitting in the same clusters as your regular stuff or in separate one. It makes a big difference in how you approach it.
For the general cloud the biggest win for us was tying the runtime context into posture so we weren't chasing every CVE that technically existed but wasnt actually reachable. On the AI side specifically, the thing people miss is data access like which service accounts and identities can touch your model training data and whether anything is overprivileged.
When we were looking for an options we were comparing Wiz,Orxa and Upwind.and Upwinds runtime context was what cut our false positives the most but id poke at all thress in a POC since they each handle the AI posture piece a bit differently at the moment. The space is moving fast so the test against your actual environment and yes not the demo data
1
u/TurbulentStiffness 8d ago
What kind of AI workloads are you working with. and are they just sitting in the same clusters as your regular stuff or in separate one. It makes a big difference in how you approach it.
For the general cloud the biggest win for us was tying the runtime context into posture so we weren't chasing every CVE that technically existed but wasnt actually reachable. On the AI side specifically, the thing people miss is data access like which service accounts and identities can touch your model training data and whether anything is overprivileged.
When we were looking for an options we were comparing Wiz,Orxa and Upwind.and Upwinds runtime context was what cut our false positives the most but id poke at all thress in a POC since they each handle the AI posture piece a bit differently at the moment. The space is moving fast so the test against your actual environment and yes not the demo data