Scan for Good: Finding Critical Exposures with AI | Wiz Blog
September 30, 2026 Update: Our Scan for Good initiative now uses Gemini 4 Argon , alongside Gemini 3.8 Flash Cyber.
It is in this spirit that we are launching Scan for Good , an initiative that uses AI - coupled with human security researchers - to uncover public exposures and complex attack paths across public services, critical infrastructure, and nonprofits.
September 30, 2026 Update: Our Scan for Good initiative now uses Gemini 4 Argon , alongside Gemini 3.8 Flash Cyber.
Through our collaboration with the Google DeepMind team, Gemini 3.8 Flash Cyber’s frontier cybersecurity performance is helping uncover complex attack paths in foundational AI and cloud technology, and fueling Wiz as we work with public services, nonprofits, and other critical infrastructure providers to ensure they stay ahead of AI-powered adversaries.
Our partners at Google DeepMind were critical to both initiatives: the AI-powered tooling behind Scan for Good is powered by the Gemini family of models, especially the new Gemini 3.8 Flash Cyber.
Scan for Good helps defenders secure vital systems before malicious actors can exploit them .
Our efforts spent validating findings and collaborating with the affected organizations on remediation have uncovered hundreds of public exposures that were fixed as a result of Scan for Good.
We would like to thank the team at Google DeepMind for partnering with us to ensure the success of Scan for Good.
Scan for Good is our effort to turn advances in AI into an advantage for defenders: finding critical exposures before attackers do, helping organizations remediate them, and sharing what we learn so the broader security community can adapt.
Under President Trump’s Executive Order 14409, CISA promotes the lawful and responsible adoption of AI to accelerate vulnerability discovery and strengthen cybersecurity resilience across government, industry, and the essential organizations that support our communities.
It can emerge from the combination of configurations, permissions, identities, APIs, and application behaviors that may appear benign individually but create dangerous attack paths when connected.
What happened
It is in this spirit that we are launching Scan for Good , an initiative that uses AI - coupled with human security researchers - to uncover public exposures and complex attack paths across public services, critical infrastructure, and nonprofits.
September 30, 2026 Update: Our Scan for Good initiative now uses Gemini 4 Argon , alongside Gemini 3.8 Flash Cyber.
What changed
Through our collaboration with the Google DeepMind team, Gemini 3.8 Flash Cyber’s frontier cybersecurity performance is helping uncover complex attack paths in foundational AI and cloud technology, and fueling Wiz as we work with public services, nonprofits, and other critical infrastructure providers to ensure they stay ahead of AI-powered adversaries.
Our partners at Google DeepMind were critical to both initiatives: the AI-powered tooling behind Scan for Good is powered by the Gemini family of models, especially the new Gemini 3.8 Flash Cyber.
Who is affected
Scan for Good helps defenders secure vital systems before malicious actors can exploit them .
Our efforts spent validating findings and collaborating with the affected organizations on remediation have uncovered hundreds of public exposures that were fixed as a result of Scan for Good.
Why it matters
We would like to thank the team at Google DeepMind for partnering with us to ensure the success of Scan for Good.
Scan for Good is our effort to turn advances in AI into an advantage for defenders: finding critical exposures before attackers do, helping organizations remediate them, and sharing what we learn so the broader security community can adapt.
Technical details
Under President Trump’s Executive Order 14409, CISA promotes the lawful and responsible adoption of AI to accelerate vulnerability discovery and strengthen cybersecurity resilience across government, industry, and the essential organizations that support our communities.
It can emerge from the combination of configurations, permissions, identities, APIs, and application behaviors that may appear benign individually but create dangerous attack paths when connected.
Scan for Good brings these capabilities to organizations where successful exploitation could have an outsized impact, including critical infrastructure, public services, healthcare, and nonprofits.
Response
Every potential finding will be reviewed and validated by a human researcher.
Across these cases, a small public signal – be it a forgotten route, a missing permission check, or an exposed credential – quickly and autonomously escalated access to sensitive data, infrastructure, or administrative control.
What security teams should do
Organizations concerned about exposed infrastructure can apply for a Scan for Good assessment at wiz.io/scan-for-good/apply .
Attribution
Wiz Research: September 30, 2026 Update: Our Scan for Good initiative now uses Gemini 4 Argon , alongside Gemini 3.8 Flash Cyber.
What to watch next
Watch for updated vendor guidance and fixed-version details.