Learning Objectives
- Understand what Wiz does and how agentless cloud security works
- Evaluate the Security Graph approach to visualizing cloud risk
- Assess the impact of Google's $32 billion acquisition on Wiz's future
What Is Wiz?
Wiz is a Cloud-Native Application Protection Platform (CNAPP) that scans cloud environments — AWS, Azure, Google Cloud, and Oracle Cloud — without installing agents on any workload. Instead, Wiz connects via cloud APIs to analyze configurations, workloads, identities, and data, building a Security Graph that visualizes how risks connect across your entire cloud infrastructure.
On March 11, 2026, Google completed the acquisition of Wiz for $32 billion — the largest cybersecurity acquisition in history, surpassing Cisco's $30.2 billion purchase of Splunk.
💡Key Concept
Agentless Cloud Security: Traditional security tools require installing software agents on every server and workload — complex to deploy, maintain, and scale. Wiz connects directly to cloud provider APIs and scans everything without agents, meaning full visibility in minutes (not months) with zero performance impact on workloads. This agentless approach is why Wiz grew from $0 to $100 million ARR faster than any software company in history.
The $32 Billion Google Acquisition
The acquisition story spans nearly two years:
- Mid-2024: Google offered $23 billion; CEO Assaf Rappaport walked away to pursue an IPO
- Early 2025: Google returned with $32 billion
- November 2025: US regulatory approval
- February 2026: EU regulatory approval
- March 11, 2026: Deal closed — $32 billion, largest cybersecurity acquisition ever
Post-acquisition, Wiz continues operating across all major clouds (AWS, Azure, GCP, Oracle) with its multicloud strategy preserved.
Key Capabilities
- Agentless scanning — connects via cloud APIs; no agents to install or maintain
- Security Graph — visualizes how risks (misconfigurations, vulnerabilities, identities, data exposures) connect to form attack paths
- 2,300+ misconfiguration rules across cloud providers
- 150+ compliance frameworks built-in (SOC 2, HIPAA, PCI DSS, ISO 27001, etc.)
- IaC scanning — catches security issues in infrastructure-as-code before deployment
- Real-time detection and auto-remediation — identifies and fixes critical issues automatically
- CSPM + CWPP + CIEM + DSPM unified in a single platform
Growth Metrics
| Metric | Value |
|---|---|
| ARR | Crossed $1 billion (2025); 40% growth rate anticipated in 2026 |
| Time to $100 million ARR | 18 months (fastest software company ever) |
| Customers | 50%+ of the Fortune 100 |
| Zero Criticals Club | 50% of customers have no outstanding critical issues in production |
| Acquisition Price | $32 billion (March 2026; largest cybersecurity acquisition ever) |
| Previous Valuation | ~$12 billion (last private round before Google deal) |
Wiz vs. Cloud Security Competitors
| Platform | Strength | Best For |
|---|---|---|
| Wiz (Google Cloud) | Fastest time-to-value; Security Graph; strongest multicloud agentless scanning | Multicloud enterprises wanting comprehensive visibility without agents |
| Prisma Cloud (Palo Alto) | Broadest coverage (CSPM + CWPP + CIEM + AppSec + runtime) | Existing Palo Alto customers wanting platform consolidation |
| Orca Security | Patented SideScanning; deep workload visibility | Teams wanting detailed workload scanning without agents |
| Lacework (Fortinet) | Behavioral modeling and anomaly detection; container security | Runtime security and containerized environments |
| AWS Security Hub | Native AWS integration; aggregates AWS service findings | AWS-only environments (no multicloud) |
Company Details
| Detail | Info |
|---|---|
| Company | Wiz Inc. (now part of Google Cloud) |
| Founded | January 2020 |
| CEO | Assaf Rappaport (co-founder) |
| Co-Founders | Assaf Rappaport; Yinon Costica; Roy Reznik; Ami Luttwak |
| Headquarters | New York City (Israeli-American company) |
| Acquired By | Google for $32 billion (closed March 11, 2026) |
| ARR | $1 billion+ (2025) |
| Recognition | Forrester Wave Leader for CNAPP (Q1 2026); Gartner Peer Insights Customers' Choice 2025 |
| Website | wiz.io |
Strengths
- Fastest-growing security company — $0 to $100 million ARR in 18 months; $1 billion+ by 2025
- Agentless simplicity — full cloud visibility in minutes without installing anything
- Security Graph — unique risk visualization connecting misconfigurations, vulnerabilities, and attack paths
- Multicloud — AWS, Azure, GCP, and Oracle Cloud in one platform
- Google backing — $32 billion acquisition provides unlimited resources and Google Cloud integration
Limitations and Considerations
- Google acquisition concerns — non-GCP customers may worry about neutrality; Wiz claims multicloud strategy preserved
- Agentless trade-off — API-based scanning provides breadth but may miss runtime behaviors that agent-based tools catch
- Enterprise pricing — Wiz targets large enterprises; not accessible to SMBs or startups
- No runtime protection — agentless approach excels at posture management but does not provide real-time workload protection like CrowdStrike or SentinelOne
- Post-acquisition uncertainty — how Google integrates Wiz and whether multicloud commitment holds remains to be seen
Key Takeaways
- Wiz is a cloud security platform using agentless scanning and a Security Graph to visualize attack paths across multicloud environments — used by 50%+ of the Fortune 100
- Acquired by Google for $32 billion (March 2026) — the largest cybersecurity acquisition in history; fastest software company ever to $100 million ARR (18 months)
- Crossed $1 billion ARR in 2025; multicloud strategy (AWS, Azure, GCP, Oracle) preserved post-acquisition
- Best for multicloud enterprises wanting comprehensive cloud security visibility without installing agents on workloads