Wiz scans clouds for “vulnerabilities”, and sometimes provides remediation advice. For example, if a vm’s kernel is outdated, it might recommend “sudo dnf remove —purge kernel”. And yeah, there sure won’t be any vulnerabilities after that.
It also complains about anything internet facing - including intentionally internet facing services - but that’s another rant for another time.