IP Library Granted Patent US 12706930
Granted Patent B1
US 12706930 · App. 19/258,504 · Granted Aug 11, 2026

Method and system for cloud cybersecurity monitoring

Inventors: Eden Koby Naftali (Tel Aviv, IL); Gilad Lekner (Tel Aviv, IL); Eyal Wiener (Tel Aviv, IL); Oron Noah (Geulim, IL)
Assignee: Wiz, Inc.
H04L63/1416
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12706930
App. No.
19/258,504
Granted
Aug 11, 2026
Kind
B1
Abstract

A method and system for deploying a cybersecurity monitoring system in a cloud computing environment is presented. The method includes: deploying a plurality of cybersecurity modules in a cloud computing environment, each cybersecurity module configured to monitor a portion of the cloud computing environment; periodically determining for each cybersecurity module a phase of deployment in the cloud computing environment; generating a corrective action for a first cybersecurity module of the plurality of cybersecurity modules, in response to determining that a phase of deployment for the first cybersecurity module indicates that the first cybersecurity module is partially deployed; and initiating the corrective action in the cloud computing environment.

Claims (50)

1 . A method for deploying a cybersecurity monitoring system in a cloud computing environment, comprising:

deploying a plurality of cybersecurity modules in a cloud computing environment, each cybersecurity module configured to monitor a portion of the cloud computing environment,

periodically determining for each cybersecurity module a phase of deployment in the cloud computing environment;

generating a corrective action for a first cybersecurity module of the plurality of cybersecurity modules, in response to determining that a phase of deployment for the first cybersecurity module indicates that the first cybersecurity module is partially deployed;

rendering a report indicating state of deployment of the cybersecurity modules;

associating a user account with a cybersecurity level achievement based on the report;

assigning a tag to the user account, wherein the tag is configured to indicate the corrective actions and the cybersecurity level achievement; and

initiating the corrective action in the cloud computing environment.

2 . The method of claim 1 further comprising deploying the plurality of cybersecurity modules in multiple cloud computing environments.

3 . The method of claim 2 , wherein the multiple cloud computing environments are each deployed on a different cloud computing infrastructure.

4 . The method of claim 1 , further comprising:

deploying a first plurality of cybersecurity modules as agents hosted on virtualizations in the cloud computing environment; and

deploying a second plurality of cybersecurity modules as agentless modules.

5 . The method of claim 1 , wherein the corrective action comprises:

generating instructions to a deployed cybersecurity module of the plurality of cybersecurity modules to deploy additional monitors.

6 . The method of claim 1 , wherein the corrective action comprises:

generating a user interface configured to render the report.

7 . The method of claim 6 , wherein the report indicates deployment of any of: AV, anti-malware, ransom ware protection and intrusion detection.

8 . The method of claim 6 , wherein the report indicates protection gaps based on the state of deployment of the cybersecurity modules.

9 . A non-transitory computer-readable medium storing a set of instructions for deploying a cybersecurity monitoring system in a cloud computing environment, the set of instructions comprising:

one or more instructions that, when executed by one or more processing circuitry of a device, cause the device to:

deploy a plurality of cybersecurity modules in a cloud computing environment, each cybersecurity module configured to monitor a portion of the cloud computing environment;

periodically determine for each cybersecurity module a phase of deployment in the cloud computing environment;

generate a corrective action for a first cybersecurity module of the plurality of cybersecurity modules, in response to determining that a phase of deployment for the first cybersecurity module indicates that the first cybersecurity module is partially deployed;

render a report indicating state of deployment of the cybersecurity modules;

associate a user account with a cybersecurity level achievement based on the report;

assign a tag to the user account, wherein the tag is configured to indicate the corrective actions and the cybersecurity level achievement; and

initiate the corrective action in the cloud computing environment.

10 . A system for deploying a cybersecurity monitoring system in a cloud computing environment comprising:

a processing circuitry;

a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:

deploy a plurality of cybersecurity modules in a cloud computing environment, each cybersecurity module configured to monitor a portion of the cloud computing environment;

periodically determine for each cybersecurity module a phase of deployment in the cloud computing environment;

generate a corrective action for a first cybersecurity module of the plurality of cybersecurity modules, in response to determining that a phase of deployment for the first cybersecurity module indicates that the first cybersecurity module is partially deployed;

render a report indicating state of deployment of the cybersecurity modules;

associate a user account with a cybersecurity level achievement based on the report;

assign a tag to the user account, wherein the tag is configured to indicate the corrective actions and the cybersecurity level achievement; and

initiate the corrective action in the cloud computing environment.

11 . The system of claim 10 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

deploy the plurality of cybersecurity modules in multiple cloud computing environments.

12 . The system of claim 11 , wherein the multiple cloud computing environments are each deployed on a different cloud computing infrastructure.

13 . The system of claim 10 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

deploy a first plurality of cybersecurity modules as agents hosted on virtualizations in the cloud computing environment; and

deploy a second plurality of cybersecurity modules as agentless modules.

14 . The system of claim 10 , wherein the corrective action comprises:

generating instructions to the deployed cybersecurity module of the plurality of cybersecurity modules to deploy additional monitors.

15 . The system of claim 10 , wherein the corrective action comprises:

generating a user interface configured to render the report.

16 . The system of claim 15 , wherein the report indicates deployment of any of: AV, anti-malware, ransomware protection and intrusion detection.

17 . The system of claim 15 , wherein the report indicates protection gaps based on the state of deployment of the cybersecurity modules.