Wiz

• Enterprises on Amazon or Microsoft clouds could reduce Wiz spend now that Alphabet, a competing cloud, owns the platform that secures their estate.
• Alphabet could fold Wiz capabilities into Google Cloud over time, weakening the multicloud neutrality the company stated it would preserve at close.
• A hyperscaler rival such as Microsoft or Amazon could bundle comparable cloud security into its own platform to displace Wiz with its customers.
• The founding team could depart after the integration, removing the repeat enterprise-security builders who drove the product and the culture.
• A high-severity flaw in Wiz's own agents or sensor could dent the research credibility that disclosures like IngressNightmare built.

Wiz defines the problem as risk that crosses layers. The platform connects code, cloud, identities, network, and runtime into one security graph, framing the pain as the attack paths that single-layer tools miss when each secures only its own slice (s1, s2).

The problem exists at the scale Wiz claims. Half the Fortune 100 buy the platform, a reference source records a reported 45 percent Fortune 100 share, and the customer logo wall names global brands including Morgan Stanley, BMW, and Colgate-Palmolive (s6, s7, s8). Demand for cloud security is proven by purchase, not argument.

The acquisition is an independent read on the same problem. Alphabet's filing records that it completed the Wiz purchase to accelerate its capabilities in multicloud and AI-driven security, a hyperscaler paying a record sum for the cloud-security problem Wiz addresses (s12). [s1, s2, s6, s7, s8, s12]

Wiz is four product lines on one agentless graph. Wiz Cloud delivers posture and workload protection across any cloud, Wiz Code secures the application from code through CI/CD and infrastructure as code, Wiz Defend adds eBPF runtime detection and response over cloud and SaaS logs, and Wiz AI-SPM discovers AI pipelines and surfaces attack paths to AI services (s2, s3, s4, s5).

The platform widened through acquisition as well as engineering. Wiz bought Gem Security for around $350 million to add cloud detection and response and Dazz for $450 million to add remediation, breadth a reference source records (s19).

Independent technical work corroborates the depth. Wiz Research disclosed the IngressNightmare flaws in the Kubernetes ingress-nginx controller, a chain carrying a CVSS 9.8 rating that exposed a large share of cloud environments, a public demonstration of cloud-security capability beyond the vendor's own pages (s13, s14, s15). [s2, s3, s4, s5, s19, s13, s14, s15]

Wiz competes with Palo Alto Networks Prisma Cloud and CrowdStrike Falcon Cloud Security for the cloud security budget, and against the cloud platforms that fold security into their own offerings. Microsoft Defender for Cloud is the clearest platform threat, since it ships inside Azure licensing many Wiz prospects already hold.

The acquisition reshapes the positioning. Wiz now belongs to a cloud platform that competes with Amazon and Microsoft, and its cross-cloud neutrality, once a clean differentiator, now carries the question of whether a rival cloud's customers keep buying from it (s10, s11). Wiz states its products continue to work across the major clouds after the close (s10). [s10, s11]

Wiz reaches enterprise buyers at scale, with half the Fortune 100 on the customer list. The trust center logo wall names global brands including Morgan Stanley, Salesforce, BMW, Mars, and Colgate-Palmolive among the companies that run it (s6, s7).

Revenue traction sits in reference and press sources outside Wiz's own marketing voice. A reference source records a reported $350 million in recurring revenue by 2024, and CNBC documents $100 million in recurring revenue within 18 months of founding (s8, s9). The completed acquisition, recorded by Alphabet at $29.5 billion after adjustments, is an independent regulatory marker of the franchise's value (s12).

A research signal hints at scale beyond the customer list. Wiz Research published that more than 40 percent of cloud environments were exposed to IngressNightmare, a cross-environment finding that points to broad visibility, though the record does not establish a proprietary data corpus as a moat (s15). [s6, s7, s8, s9, s12, s15]

Wiz was founded in 2020 by Assaf Rappaport, Yinon Costica, Roy Reznik, and Ami Luttwak, who had previously founded the security company Adallom together (s16). Rappaport leads as CEO.

The team's track record is a repeat enterprise-security build. Having founded one security company, the same four built Wiz into a sale Alphabet completed for $29.5 billion, the kind of verifiable prior build the strongest team signals describe (s9, s12). [s9, s12, s16]

Wiz operates at enterprise trust scale, securing half the Fortune 100, a strong proxy that the platform passes the security reviews those organizations run before buying, and its trust center publishes the audit artifacts those reviews check (s6, s7).

Alphabet now owns the platform. Independent press reports that Wiz continues to operate under its own brand and across multiple platforms after the close, so the cross-cloud commitment a cautious buyer watches is stated but now sits inside a competing cloud (s10, s11). [s6, s7, s10, s11]

Add analyzed competitors to compare them side by side with Wiz.

Wiz sells to the large enterprise, and Wiz Cloud is offered across any cloud, platform, or AI environment, so the platform fits a buyer running more than one provider (s2). The customers page states the platform sits behind half of the Fortune 100, substantial large-enterprise traction rather than a base of small teams (s6).

Within that base the segmentation spans the security team and the engineering team that ships to the cloud, since Wiz frames risk as the attack paths that cross code, cloud, identities, and runtime where single-layer tools leave gaps (s1). Wiz Code reaches the developer, Wiz Defend the SOC, and Wiz AI-SPM the AI program owner, all on the same buyer relationship.

The stated reach is wide while the evidenced traction sits at the top of the market. The customers page states Wiz helps customers of every size of business, from startups to Fortune 100s, and a Go bundle for SMBs sits on the pricing page, so the cited pages support breadth of offer alongside the large-enterprise base they name (s6, s7).

Wiz is four product lines on one agentless graph. Wiz Cloud delivers visibility and risk prioritization across any cloud, platform, or AI environment, correlating configuration, identities, and runtime into prioritized risk rather than emitting siloed findings one layer at a time (s2). Wiz Code extends the model left into code, CI/CD, and infrastructure as code, and Wiz Defend extends it into runtime detection and response over the eBPF Wiz Sensor and cloud logs (s3, s4).

Wiz AI-SPM applies the graph to AI. The product discovers AI pipelines without agents, catalogs the models and services it finds, detects misconfigurations, and uncovers attack paths to AI services, the inventory and posture work that maps and rates the AI estate (s5). The platform also widened by acquisition, adding Gem Security for cloud detection and response and Dazz for remediation (s9).

A separate research record sits alongside the product. Wiz Research disclosed the IngressNightmare flaws in the Kubernetes ingress-nginx controller, a chain carrying a CVSS 9.8 rating, and reported that more than 40 percent of cloud environments were exposed (s14, s15, s16). That work evidences cloud-security research capability, and the cited pages do not tie it to the graph's construction or to a proprietary data corpus.

Go-to-market rests on demonstrated enterprise pull. Wiz reaches half the Fortune 100, and Alphabet completed its purchase of the company in March 2026, so demand is shown by purchase across a wide enterprise roster (s6, s13).

The packaging is built for land-and-expand. Modular licensing lets an account start with one module and add Wiz Cloud, Wiz Code, Wiz Defend, and sensor coverage as the estate grows, though the cited pages document the licensing structure rather than observed account expansion (s7).

The acquisition reframes the motion as a named structural factor. Wiz now belongs to a cloud platform that competes with the other clouds its customers run, and how the parent balances distribution against the cross-cloud promise shapes the motion going forward (s11, s17).

Wiz prices modularly, scaling with workloads, active developers, log ingestion, or sensors rather than by seat. The pricing page states licensing scales across those units to provide complete security in one platform, so cost tracks the estate being secured rather than headcount (s7).

The structure matches platform expansion. A buyer licenses the modules it needs, Wiz Cloud, Wiz Code, Wiz Defend, Wiz Sensor, or the Go bundle for SMBs, and grows the bill as it adds coverage, which fits the land-and-expand shape of the licensing structure (s7).

List pricing is not published. The pricing page routes the buyer to a custom quote, consistent with a vendor selling negotiated enterprise agreements, which suits its core buyer but leaves cost harder to forecast for a smaller team facing consumption-based units (s7).

Wiz is delivered as an agentless platform, so the customer connects its cloud accounts rather than deploying and running scanning agents on every workload. Wiz Cloud states the visibility is agentless across any cloud, which removes a class of agent rollout and maintenance burden (s2).

Operations center on continuous posture. The platform scans the connected estate, prioritizes risk, and surfaces attack paths on an ongoing basis, so the customer operates policy and remediation workflows rather than collection infrastructure (s2).

Heavier runtime options layer on top of the connect-and-scan core. The eBPF Wiz Sensor blocks workload threats in real time and Wiz Defend correlates its signals with cloud and SaaS logs (s4). The AI-SPM page pairs discovery and posture with AI Runtime Protection for prompt injection and rogue agents and with AI-powered investigation and response, though the cited pages do not establish that Wiz sits between an application and its model and blocks prompts as they pass (s5).

Wiz carries the commercial audit artifacts regulated procurement asks for. Its trust center publishes recertification across ISO 27001, ISO 27017, ISO 27018, and ISO 27701, plus a PCI DSS v4.0.1 attestation, the documentation an enterprise security review expects before deployment (s8).

The shelf extends past commercial attestations: Wiz for Government, the dedicated federal offering, achieved FedRAMP Moderate in 2024 and FedRAMP High authorization in September 2025, and the FedRAMP Marketplace records it as FedRAMP Certified as of September 25, 2025 (s19, s20). Operating scale reinforces the commercial signal: reaching half the Fortune 100 is substantial commercial traction, though the cited pages do not document those enterprises' review processes (s6, s8).

Ownership adds context and a question at once. Wiz is now part of Google Cloud, which may expand distribution, but the cited traction is Wiz's own Fortune 100 base, so parent reach is not scored as a Wiz defensibility driver. The company still states its mission to secure environments across all major clouds, and whether that holds under the parent is the trust item a cautious buyer watches (s11, s17).

Wiz is built to be the security graph an enterprise standardizes on across clouds. The platform page describes a single graph that correlates the technologies running in a cloud environment and uncovers the critical pathways to a breach, positioning the platform as the common control plane rather than a point tool bound to one provider (s1).

Outward, breadth across providers is the ecosystem play. The lines from Wiz Code to Wiz Defend to Wiz AI-SPM feed the same graph, so a multi-cloud enterprise can centralize risk in one model instead of stitching together native tools (s2, s5).

Inward, the new ownership is the ecosystem tension. Wiz's cross-cloud layer now lives inside one cloud that competes with the others, and how the parent balances that distribution against the cross-cloud promise shapes whether the platform stays cross-cloud (s11, s17).

Wiz was founded in January 2020 by Assaf Rappaport, Yinon Costica, Roy Reznik, and Ami Luttwak, who had previously founded the security company Adallom together. The roster is a repeat enterprise-security founding team rather than a first build (s18).

That team turned a roughly six-year-old company into a sale Alphabet completed for $29.5 billion in March 2026, a verifiable build-and-exit in the exact category the platform serves, after the company reached $100 million in recurring revenue within 18 months of founding (s10, s13). The prior shared company and the scale reached together are the strongest team signals the evidence supports.

The open team question is continuity through the acquisition. The franchise was built by these founders as an independent vendor, and whether they and the organization stay intact inside the parent is the risk to the people who drove the product and culture (s11, s12).