Wiz

Security for AI Cloud SecurityApplication SecurityData SecurityIdentity AccessDetection Response acquired

Market readinessHow well the company can compete in its security market, scored across eight dimensions against public evidence. Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
DefensibilityHow well the company holds its position if competitors catch up on features, scored across seven dimensions against public evidence. Defensible: Defensibility of 15 or above. A position that stays hard for rivals to replicate.
Founded 2020
Funding $1,900M
Last updated 2026-10-20

All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.

Executive Summary

Founded in 2020, Wiz sells cloud and AI security software to enterprises and government agencies. Its platform links code, cloud resources and running applications in one graph of the routes an attacker could take. It raised $1.9 billion in venture and private funding. Wiz still sells under its own brand after Alphabet bought it for $29.5 billion in March 2026. A source TechCrunch cited put Wiz past $1 billion in annual recurring revenue in 2025. Wiz says it serves 65% of the Fortune 100. Its named customers include Morgan Stanley, Salesforce and BMW. Wiz for Government has FedRAMP High authorization and seven agency approvals. Customers that run mainly on AWS or Azure could cut Wiz spending under Google ownership.

Sourced Details

Description Agentless cloud security platform that connects code, cloud, and runtime into one security graph, spanning posture and workload protection, application and pipeline security, cloud detection and response, and security for AI. [f1]
Acquisition Google (Alphabet), announced 2025-03-18 [f2]
Founded 2020 [f3]
HQ New York City, United States [f3]
Funding $1,900M total [f3]
Latest funding Acquired by Alphabet for $32B all-cash, announced March 2025, closed March 2026 [f4]
Deployment SaaS [f5]
Compliance HIPAA, ISO 27001, ISO 27017, ISO 27018, ISO 27701, PCI DSS v4.0.1, SOC 2 Type II, SOC 3 [f5]

Products

Product What it does
Wiz Cloud Agentless cloud security posture and workload protection that gives visibility and risk prioritization across any cloud, platform, or AI environment.
Wiz Code Application security across code, CI/CD pipelines, IaC, and cloud environments, so risks are caught and fixed before they reach production.
Wiz Defend Cloud detection and response that combines eBPF runtime sensor signals, cloud and SaaS logs, and agentless risk context to detect and respond to threats.
Wiz AI-SPM Agentless AI security posture management that discovers AI pipelines, models, and data across clouds, then surfaces misconfigurations and attack paths to AI services.

Matrix Coverage

AI Defense Matrix

GovernIdentifyProtectDetectRespondRecover
AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain.
AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients.
AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD.
AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services.
AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes.
Training Data Datasets used for training, fine-tuning, and continued learning.
Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history.
AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools.

Wiz AI-SPM is agentless AI security posture management that discovers AI pipelines, models, and data across clouds, then surfaces misconfigurations and attack paths to AI services. It is mapped to the AI Defense Matrix. [f6]

Cyber Defense Matrix

IdentifyProtectDetectRespondRecover
Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware.
Applications Software, interactions, and application flows on the devices.
Networks Connections and traffic flowing among devices and apps, plus communication paths.
Data Content at rest, in transit, or in use across devices, apps, and networks.
Users The people using the devices, apps, networks, and data.

Wiz Cloud, Wiz Code, and Wiz Defend secure conventional cloud workloads, application code, data, and identities. These product lines are mapped to the Cyber Defense Matrix. [f7]

Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

Established 30 /40 Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
Dimension Score Rationale
Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. 4/5 Wiz names its buyer, security leaders such as the chief security officer, and the problem of toxic combinations across misconfigurations, vulnerabilities, public exposure, excessive permissions and sensitive data. CyberScoop quantifies that pain from outside Wiz, reporting a Kubernetes security co-chair’s estimate that the affected tool runs in more than 2 in 5 Kubernetes clusters and Censys counting about 5,000 exposed hosts, and Rapid7 describes attackers reaching cluster-wide secrets. [s6, s3, s23]
Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. 3/5 Wiz documents its mechanisms in detail on its own pages: agentless API connection to cloud resources, a security graph that maps the relationships between them into paths to a breach, and an eBPF sensor that blocks workload threats as an add-on (s2, s3, s5). Wiz reports Forrester's Q1 2026 evaluation on its own blog (s13). The cited record contains no underlying technical assessment of Wiz's products. Wiz Research's disclosures concern other vendors' software (s22). [s2, s3, s5, s13, s22]
Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. 3/5 Cloud security has a credible enabler in multi-cloud adoption, which TechCrunch describes, but the independently documented buyer-side demand in the past year is one kind: TechCrunch’s report, from a source, that Wiz crossed $1 billion in ARR in 2025. The FedRAMP authorizations show eligibility rather than a new regulatory driver, and the Forrester Wave placement reaches the record through Wiz’s own blog. [s17, s12, s13]
Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. 4/5 Wikipedia records that Wiz’s four founders previously founded Adallom, and Alphabet’s 10-Q records completing its acquisition of Wiz in March 2026, an in-domain exit. CyberScoop and SecurityWeek independently report Wiz Research findings in Kubernetes and GitHub. The cited sources show prior builds, an exit and sustained research, but no independent source recognizes the founders themselves as having defined the category, which rung 5 needs. [s14, s19, s23, s24]
GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. 5/5 TechCrunch reported, from a source, that Wiz crossed $1 billion in ARR in 2025 (s17). Alphabet's filing records the $29.5 billion purchase (s19). Wiz's own figure is 65% of the Fortune 100, with Morgan Stanley, Salesforce and BMW among the customers it names, and the FedRAMP Marketplace counts seven federal authorizations to operate or use Wiz for U.S. Government (s1, s12). [s17, s19, s1, s12]
Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. 4/5 Wiz raised $1.9 billion in venture and private funding. It reached $100 million in recurring revenue within 18 months and, by a source TechCrunch cited, $1 billion in ARR in 2025, then sold to Alphabet for $29.5 billion (s14, s15, s17, s19). That confirms output per dollar at scale. An exit price does not show operating efficiency, and the reviewed sources carry no Wiz margin or cash-flow figure. [s14, s15, s17, s19]
Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. 4/5 Cloud security is an established category that buyers place without coaching: Palo Alto Networks' annual report names Wiz among the independent security vendors it competes with, and Forrester evaluated Wiz in its Q1 2026 Wave of cloud-native application protection vendors (s20, s13). Wiz relays the Leader placement on its own blog, and no Forrester publication of it is in the cited record, so it does not independently confirm that Wiz defines the category. [s20, s13]
Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. 3/5 Wiz carries some friction against absorption: its graph ties code, cloud and runtime findings together across AWS, Azure and Oracle Cloud, and Wiz for U.S. Government holds a FedRAMP certification with seven agency authorizations (s1, s16, s12). No cited source shows a structural moat, such as a cross-customer data asset, that a cloud platform bundling comparable security could not eventually reproduce. [s1, s16, s12]
Business Risks Enterprises that run mainly on AWS or Azure could reduce Wiz spend now that Google Cloud owns the platform that secures their environments…
  • Enterprises that run mainly on AWS or Azure could reduce Wiz spend now that Google Cloud owns the platform that secures their environments.
  • Google could fold Wiz technology into its own security products, as SiliconANGLE reports it plans to integrate it, and narrow the cross-cloud support Wiz states today.
  • Microsoft or another cloud platform could bundle comparable cloud security with its infrastructure and displace Wiz in accounts it already serves.
  • Founders and senior staff could leave once Google's retention bonuses run their course, removing the team that built the product.
Problem & Market Wiz frames the problem as risk that crosses layers…

Wiz frames the problem as risk that crosses layers. Its platform connects code, cloud and runtime into one security graph, and Wiz Cloud looks for toxic combinations of misconfigurations, vulnerabilities, public exposure, excessive permissions and sensitive data that together form an exploitable attack path (s1, s3).

Wiz now applies the same framing to AI applications. Its platform page presents the Wiz AI-Application Protection Platform as visibility and protection for cloud and AI systems across development, infrastructure, data and runtime (s2).

Alphabet's filing gives an outside read on the problem's value. It records the Wiz purchase as an investment by Google Cloud in multicloud security and in security that uses AI (s19). The figures that size the problem, such as the share of cloud environments exposed to the IngressNightmare flaws, are Wiz researchers' own estimates (s23). [s1, s3, s2, s19, s23]

Product Capabilities Wiz sells Wiz Cloud, Wiz Code and Wiz Defend on one security graph, and Wiz AI-SPM extends it to AI services…

Wiz sells Wiz Cloud, Wiz Code and Wiz Defend on one security graph, and Wiz AI-SPM extends it to AI services. Wiz Cloud gives agentless visibility and risk prioritization across clouds. Wiz Code applies security policies across coding assistants, development environments, pull requests and software delivery pipelines. Wiz Defend combines runtime sensor signals with cloud and SaaS logs for detection and response. Wiz AI-SPM discovers AI pipelines and attack paths to AI services (s3, s4, s5, s6).

Runtime coverage now reaches AI workloads. Wiz Defend detects prompt injection, model exfiltration and attacks on MCP servers at runtime, and the AI-SPM page adds detection of prompt injection and rogue agents plus AI agents that investigate threats and guide remediation (s5, s6). The Wiz Sensor, which blocks workload threats in real time, is an add-on to Wiz Cloud and Wiz Defend (s3, s5).

Wiz bought cloud detection and response startup Gem Security for around $350 million and security remediation startup Dazz for $450 million (s14). In Wiz's account of Forrester's Q1 2026 Wave, Wiz received the highest score in the current-offering category (s13). [s3, s4, s5, s6, s14, s13]

Competitive Positioning Wiz competes with large security vendors for the cloud security budget…

Wiz competes with large security vendors for the cloud security budget. Palo Alto Networks' fiscal 2025 annual report lists Wiz beside Check Point, Fortinet, CrowdStrike and Zscaler among the independent security vendors it competes with (s20). Orca Security is a direct rival, and the two companies ended dueling patent suits in which Orca asserted six patents and Wiz asserted five (s26).

Google's purchase places Wiz inside a cloud provider. CNBC reported that the deal would help Google compete with Microsoft, which also sells security software (s15). Wiz still states that it secures AWS, Azure and Oracle Cloud as well as Google Cloud (s18).

Google says Wiz keeps its brand and its reach across clouds. SecurityWeek reported at the close that Wiz will continue to provide security for all major cloud platforms, and SiliconANGLE reported that Google plans to integrate Wiz's technology into its broader security platform (s18, s27). [s20, s26, s15, s18, s27]

Go-to-Market & Traction Wiz sells to large enterprises at scale by its own count…

Wiz sells to large enterprises at scale by its own count. Its homepage and customers page put the share of the Fortune 100 it serves at 65%, and the homepage names Morgan Stanley, Siemens, Salesforce and BMW among Wiz's customers (s1, s7). The customers page also says Wiz serves businesses of every size, from startups to the Fortune 100 (s7).

Revenue figures come from outside Wiz's marketing. CNBC reported that Wiz hit $100 million in annual recurring revenue after 18 months, and TechCrunch reported, citing a source, that Wiz crossed $1 billion in ARR in 2025 (s15, s17). Alphabet's 10-Q records the completed purchase at $29.5 billion (s19).

Federal agencies have authorized the government offering. The FedRAMP Marketplace lists Wiz for U.S. Government as FedRAMP Certified as of September 25, 2025, with seven authorizations to operate or use it (s12). [s1, s7, s15, s17, s19, s12]

Team & Credibility Wiz was founded in January 2020 by Assaf Rappaport, Yinon Costica, Roy Reznik and Ami Luttwak, who previously founded Adallom together (s14)…

Wiz was founded in January 2020 by Assaf Rappaport, Yinon Costica, Roy Reznik and Ami Luttwak, who previously founded Adallom together (s14). Wiz's about page lists all four in its leadership after the close, with Rappaport as CEO, Luttwak as CTO, Costica as VP Product and Reznik as VP R&D (s10).

The same team built Wiz into a $29.5 billion sale. Alphabet's filing records its $29.5 billion purchase of Wiz, and SecurityWeek reported that Google committed $1.5 billion in retention bonuses for staff who stay (s19, s18).

Wiz Research adds a public research record. Wiz named the IngressNightmare flaws, and its researchers discovered a critical remote code execution flaw in GitHub (s22, s24). [s14, s10, s19, s18, s22, s24]

Trust Readiness Wiz publishes commercial audit reports…

Wiz publishes commercial audit reports. Its trust center announces ISO 27001, 27017, 27018 and 27701 recertification, SOC 2 Type II plus HIPAA and SOC 3 reports, and a PCI DSS v4.0.1 attestation (s8).

The government offering adds a federal authorization. Wiz announced that Wiz for Government achieved FedRAMP High authorization, and the FedRAMP Marketplace lists Wiz for U.S. Government as FedRAMP Certified as of September 25, 2025 (s11, s12).

Ownership is the item a cautious buyer may weigh. Wiz now describes itself as part of Google Cloud, and Cybersecurity Dive reported that it continues under its own brand across AWS, Azure and Oracle Cloud (s10, s16). [s8, s11, s12, s10, s16]

Competitors Palo Alto Networks, CrowdStrike, Microsoft, Orca Security, Aqua Security, Cyera…
Company Relationship Note Compare
Palo Alto Networks competes with Palo Alto Networks' annual report names Wiz among the independent security vendors it competes with. N/AWe scored these companies at different scopes, so the totals measure different things.
CrowdStrike competes with Competes with Wiz for the same cloud security budget.
Microsoft competes with CNBC framed the Wiz deal as helping Google compete with Microsoft in security software. N/AMicrosoft is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product.
Orca Security competes with A cloud security rival with which Wiz ended dueling patent suits.
Aqua Security competes with Competes for the same buyer of cloud-native application security. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.
Cyera adjacent Adjacent, overlapping with Wiz on data security posture for cloud data.

Add analyzed competitors to compare them side by side with Wiz.

Strategy Deep Dive

A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.

Defensibility

Defensible 15 /21 Defensible: Defensibility of 15 or above. A position that stays hard for rivals to replicate. press the advantage

Wiz's defenses are its customer base, its federal authorization and its patents. Wiz says it serves 65% of the Fortune 100. Wiz for U.S. Government has FedRAMP High authorization and seven agency authorizations. Wiz holds a granted patent on encrypted-disk inspection and asserted five patents against Orca Security. Its agentless graph ties code, cloud and runtime into attack paths. Google now owns Wiz and plans to integrate its technology into a broader security platform.

Dimension Score Rationale
Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. 1/3 The customer's team operates Wiz and owns the security outcomes. Wiz licenses a platform the customer connects to its clouds by API and uses to find and fix risk, with add-ons such as the Wiz Sensor, rather than a service in which Wiz accepts accountability for results (s2, s9, s3).
Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. 2/3 Leaving Wiz means rewiring its cloud connections, the developer integrations in coding assistants, IDEs and pipelines, and the remediation workflows built on its graph, which is meaningful friction (s2, s4). The cited record documents no live traffic that depends on Wiz, no non-portable tuned state and no vendor-bound regulatory constraint, and it does not size a migration.
Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. 2/3 Wiz for U.S. Government holds FedRAMP High authorization, and the FedRAMP Marketplace counts seven agency authorizations for it. Obtaining the same authorization for a replacement would take time and government review but remains feasible (s11, s12). The commercial ISO, SOC 2 and PCI DSS attestations are ordinary enterprise preparation (s8).
Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. 3/3 Building an agentless graph that correlates misconfigurations, vulnerabilities, permissions and data exposure across clouds into attack paths, links running resources back to the code that built them, and adds eBPF runtime detection takes years of specialized engineering (s2, s3, s5).
Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. 3/3 Wiz's evidenced buyers include government agencies and large enterprises. The FedRAMP Marketplace counts seven agency authorizations for Wiz for U.S. Government, and Wiz names Morgan Stanley and Bridgewater Associates among the customers it serves across 65% of the Fortune 100 (s12, s1).
Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. 2/3 Wiz is a platform customers work in. It reads cloud resources through APIs and ranks risk out of band, and the Wiz Sensor that blocks workload threats in real time is an optional add-on (s2, s3, s5). The cited record does not show applications or workloads depending on Wiz to run.
Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. 2/3 The evidenced asset is intellectual property. Google Patents lists US12219048B1, a granted patent on encrypted-disk inspection by disk cloning, as assigned to Wiz and active, and Wiz asserted five of its patents against Orca Security in litigation the two ended (s25, s26). Alphabet's filing lists patents and developed technology among the intangible assets it acquired with Wiz (s19). No cross-customer dataset appears in the cited record.
Strategic Market Segmentation Wiz sells to large enterprises…

Wiz sells to large enterprises. Its customers page puts its reach at 65% of the Fortune 100, and its homepage names Morgan Stanley, Salesforce and BMW among its customers (s7, s1).

The offer reaches beyond that base. The customers page says Wiz serves businesses of every size, from startups to the Fortune 100, and the pricing page lists Wiz One, Wiz Go and à la carte options (s7, s9).

Within an account, the lines reach different teams. Wiz Code works in developers' coding assistants, IDEs and pipelines, Wiz Defend serves detection and response, and Wiz AI-SPM covers AI services and pipelines (s4, s5, s6). Federal agencies form a separate segment served through Wiz for U.S. Government (s12).

Product Capabilities & AI Advantages The core is an agentless graph…

The core is an agentless graph. Wiz connects to cloud accounts through APIs, covers resources from virtual machines and containers to agents, models and pipelines, and its security graph analyzes the relationships between them to surface the paths to a breach (s2).

The graph extends to code and runtime. Wiz correlates running cloud resources back to the code, pipeline and developer that built them, and Wiz Defend adds eBPF runtime signals and cloud and SaaS log analysis for detection (s2, s5).

For AI, Wiz AI-SPM builds an AI bill of materials without agents, finds misconfigured AI services and attack paths to models, and adds runtime detection of prompt injection and rogue agents (s6). Wiz named the IngressNightmare flaws, and its researchers discovered a critical GitHub flaw (s22, s24). Both concern other vendors' software.

Sales Engagement & Go-to-Market Wiz's go-to-market reaches large enterprises…

Wiz's go-to-market reaches large enterprises. Wiz reports serving 65% of the Fortune 100, and TechCrunch reported, citing a source, that Wiz crossed $1 billion in ARR in 2025 (s7, s17).

The packaging lets an account move usage between capabilities. Wiz's pricing page describes unified offerings that let teams shift usage between capabilities as needs evolve, plus à la carte options. The cited pages describe that packaging rather than observed account expansion (s9).

Google will shape the motion from here. SiliconANGLE reported that Google plans to integrate Wiz's technology into its broader platform, while SecurityWeek reported that Wiz keeps its brand and its coverage of AWS, Azure and Oracle Cloud (s27, s18).

Pricing Model Wiz quotes prices rather than publishing them…

Wiz quotes prices rather than publishing them. Buyers request a custom quote through a form on its pricing page, and Wiz shows no list prices on the captured page (s9).

The packaging comes in three shapes. Wiz names Wiz One, Wiz Go and à la carte options on that page and says its unified offerings let teams shift usage between capabilities as their needs change (s9).

Add-ons extend the base subscriptions. Wiz sells the Wiz Sensor for runtime protection as an add-on to Wiz Cloud and to Wiz Defend (s3, s5).

Product Delivery & Operations Wiz delivers a platform the customer connects by API…

Wiz delivers a platform the customer connects by API. Wiz says it connects in minutes and covers cloud and AI resources without disrupting operations or requiring ongoing maintenance (s2).

Runtime protection adds an agent. The eBPF Wiz Sensor blocks cloud threats in real time on VMs, containers and serverless containers, and Wiz sells it as an add-on (s3, s5).

AI coverage combines posture with runtime detection. Wiz AI-SPM discovers AI services and misconfigurations, and the AI-SPM page lists runtime detection of prompt injection and rogue agents plus AI agents that investigate threats and guide remediation (s6). The cited pages describe detection and investigation, and they do not document Wiz sitting between an application and its model to pass or block each request (s6).

Earning Customers' Trust Wiz carries the commercial attestations enterprise buyers check…

Wiz carries the commercial attestations enterprise buyers check. Its trust center announces ISO 27001, 27017, 27018 and 27701 recertification, SOC 2 Type II plus HIPAA and SOC 3 reports, and a PCI DSS v4.0.1 attestation (s8).

The federal record goes further. Wiz announced FedRAMP High authorization for Wiz for Government, and the FedRAMP Marketplace lists Wiz for U.S. Government as FedRAMP Certified as of September 25, 2025, with seven authorizations to operate or use it (s11, s12).

Google now owns Wiz. Wiz describes itself as part of Google Cloud, Alphabet reports Wiz's results inside its Google Cloud segment, and Cybersecurity Dive reported that Wiz continues under its own brand across AWS, Azure and Oracle Cloud (s10, s19, s16).

Platform Strategy & Ecosystem Positioning Wiz positions its graph as one platform across clouds…

Wiz positions its graph as one platform across clouds. Wiz Cloud covers any cloud, platform or AI environment, and Cybersecurity Dive reported that Wiz works across AWS, Azure and Oracle Cloud (s3, s16).

Developer tooling is part of the reach. Wiz Code applies security policies across coding assistants, IDEs, version control, pull requests and CI/CD pipelines (s4).

The open ecosystem question is what Google does with Wiz. SecurityWeek reported that Wiz keeps its brand and its coverage of the major clouds, and SiliconANGLE reported Google's plan to integrate Wiz technology into its broader security platform (s18, s27).

Team & Execution Capability Wiz was founded in January 2020 by Assaf Rappaport, Yinon Costica, Roy Reznik and Ami Luttwak, who previously founded Adallom together (s14)…

Wiz was founded in January 2020 by Assaf Rappaport, Yinon Costica, Roy Reznik and Ami Luttwak, who previously founded Adallom together (s14). Wiz's about page lists all four in its leadership after the close, with Rappaport as CEO and Luttwak as CTO (s10).

The same founders built Wiz into a company Alphabet bought for $29.5 billion, after Wiz hit $100 million in annual recurring revenue within 18 months, by CNBC's account (s19, s15).

Continuity through the integration is the open team question. SecurityWeek reported that Google committed $1.5 billion in retention bonuses for staff who stay after the acquisition (s18).

Sources

Company Detail Sources (7)
Id Source Tier Accessed
f1 Wiz: homepage official 2026-10-20
f2 Google announces agreement to acquire Wiz, March 18 2025 official 2026-06-18
f3 Wiz, Inc. (Wikipedia) research 2026-10-20
f4 Google to acquire cloud security startup Wiz for $32 billion (CNBC) press 2026-10-20
f5 AI Defense Matrix Catalog entry other 2026-06-08
f6 AI Defense Matrix Catalog mapping other 2026-10-20
f7 Wiz Cloud platform page official 2026-10-20
Profile Analysis Sources (27)
Id Source Tier Accessed
s1 Wiz: homepage official 2026-10-20
s2 Wiz: platform page official 2026-10-20
s3 Wiz: Wiz Cloud product page official 2026-10-20
s4 Wiz: Wiz Code product page official 2026-10-20
s5 Wiz: Wiz Defend product page official 2026-10-20
s6 Wiz: Wiz AI-SPM solution page official 2026-10-20
s7 Wiz: customers page official 2026-10-20
s8 Wiz: Public Trust Center official 2026-10-20
s9 Wiz: platform pricing page official 2026-10-20
s10 Wiz: about page official 2026-10-20
s11 Wiz blog: Wiz for Government FedRAMP High announcement official 2026-10-20
s12 FedRAMP Marketplace: Wiz for U.S. Government listing regulatory 2026-10-20
s13 Wiz blog: Forrester Wave CNAPP Q1 2026 announcement official 2026-10-20
s14 Wikipedia: Wiz, Inc. research 2026-10-20
s15 CNBC: Google to acquire Wiz for $32 billion press 2026-10-20
s16 Cybersecurity Dive: Google completes Wiz acquisition press 2026-10-20
s17 TechCrunch: Google completes Wiz acquisition press 2026-10-20
s18 SecurityWeek: Wiz joins Google Cloud as acquisition closes press 2026-10-20
s19 SEC EDGAR: Alphabet Inc. Form 10-Q for the quarter ended June 30, 2026 regulatory 2026-10-20
s20 SEC EDGAR: Palo Alto Networks Form 10-K for fiscal 2025 regulatory 2026-10-20
s21 NVD: CVE-2025-1974 record (API) other 2026-10-20
s22 The Hacker News: Ingress NGINX Controller vulnerabilities press 2026-10-20
s23 CyberScoop: Kubernetes ingress component defects press 2026-10-20
s24 SecurityWeek: GitHub vulnerability CVE-2026-3854 press 2026-10-20
s25 Google Patents: US12219048B1 research 2026-10-20
s26 BankInfoSecurity: Orca and Wiz end patent lawsuits press 2026-10-20
s27 SiliconANGLE: Google Cloud security strategy with Wiz integration press 2026-10-20
Deep-Dive Sources (27)
Id Source Tier Accessed
s1 Wiz: homepage official 2026-10-20
s2 Wiz: platform page official 2026-10-20
s3 Wiz: Wiz Cloud product page official 2026-10-20
s4 Wiz: Wiz Code product page official 2026-10-20
s5 Wiz: Wiz Defend product page official 2026-10-20
s6 Wiz: Wiz AI-SPM solution page official 2026-10-20
s7 Wiz: customers page official 2026-10-20
s8 Wiz: Public Trust Center official 2026-10-20
s9 Wiz: platform pricing page official 2026-10-20
s10 Wiz: about page official 2026-10-20
s11 Wiz blog: Wiz for Government FedRAMP High announcement official 2026-10-20
s12 FedRAMP Marketplace: Wiz for U.S. Government listing regulatory 2026-10-20
s13 Wiz blog: Forrester Wave CNAPP Q1 2026 announcement official 2026-10-20
s14 Wikipedia: Wiz, Inc. research 2026-10-20
s15 CNBC: Google to acquire Wiz for $32 billion press 2026-10-20
s16 Cybersecurity Dive: Google completes Wiz acquisition press 2026-10-20
s17 TechCrunch: Google completes Wiz acquisition press 2026-10-20
s18 SecurityWeek: Wiz joins Google Cloud as acquisition closes press 2026-10-20
s19 SEC EDGAR: Alphabet Inc. Form 10-Q for the quarter ended June 30, 2026 regulatory 2026-10-20
s20 SEC EDGAR: Palo Alto Networks Form 10-K for fiscal 2025 regulatory 2026-10-20
s21 NVD: CVE-2025-1974 record (API) other 2026-10-20
s22 The Hacker News: Ingress NGINX Controller vulnerabilities press 2026-10-20
s23 CyberScoop: Kubernetes ingress component defects press 2026-10-20
s24 SecurityWeek: GitHub vulnerability CVE-2026-3854 press 2026-10-20
s25 Google Patents: US12219048B1 research 2026-10-20
s26 BankInfoSecurity: Orca and Wiz end patent lawsuits press 2026-10-20
s27 SiliconANGLE: Google Cloud security strategy with Wiz integration press 2026-10-20

Disclaimer

This content is provided "as is" with no warranties.

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.