Hey everyone, new here and still figuring out all this cloud security stuff. I've been testing Wiz for our company's AWS setup, and I keep seeing this "AI supply chain security" feature flagged as a recommendation. It sounds impressive, but I'm not entirely sure what it actually *does* in practice.
From what I gather, it's supposed to scan for risks in open-source packages and AI models we use. We do use a bunch of Python libraries and some pre-trained models in our dev environment. My basic question is: is turning this on going to cause a lot of noise or false alarms? I'm worried about overwhelming our small team with alerts we don't understand yet.
Also, does it only check at deployment, or can it monitor things continuously? And is it something you'd consider essential from the start, or more of an advanced feature you grow into? Any real-world experiences on how it's impacted your workflow would be super helpful. 😅
Just trying to understand if this is a must-have security layer or more of a nice-to-have for our current scale. Thanks in advance for any pointers!