Company:Wiz, Inc.

From HandWiki
Wiz, Inc.
TypePrivate
Industry
  • Cybersecurity
FoundedJanuary 2020; 6 years ago (January 2020)
Founders
  • Assaf Rappaport
  • Yinon Costica
  • Roy Reznik
  • Ami Luttwak
Headquarters
New York City
,
US
Key people
RevenueIncrease US$500 million [2] (2024)
OwnerAlphabet Inc.
Number of employees
c. 1800 (2025)[3]
Websitewiz.io

Wiz, Inc. is an Israeli-American cloud security company, headquartered in New York City, that has been part of Google Cloud since March 2026.[1] The company was founded in January 2020 by Assaf Rappaport, Yinon Costica, Roy Reznik, and Ami Luttwak, all of whom previously founded Adallom.[4][5] The company's platform analyzes computing infrastructure hosted in Amazon Web Services, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure, and Kubernetes for combinations of risk factors that could allow malicious actors to gain control of cloud resources and/or exfiltrate valuable data.

As of November 2024, Wiz employed about 1,995 people, with most sales and marketing personnel scattered across North America and Europe while most engineering personnel are based in Tel Aviv, Israel.[6][7] In August 2022, Wiz claimed to be the fastest startup ever to scale from $1 million to $100 million in annual recurring revenue (ARR), from February 2021 to approximately July 2022.[8] In February 2024, the company claimed to have reached $350M in ARR, with a 45% market share of Fortune 100 companies.[1][9]

On 11 March 2026, Alphabet Inc. acquired Wiz in a $32 billion deal.[10][11]

History

Wiz was founded in January 2020 by Assaf Rappaport, Yinon Costica, Roy Reznik, and Ami Luttwak, all of whom previously founded Adallom.[4][5] Rappaport is CEO, Costica is VP of Product, Reznik is VP of Engineering, and Luttwak is CTO.

Wiz agreed to acquire Tel Aviv-based Raftt, a cloud-based developer collaboration platform, for $50 million in December 2023.[12] In April 2024, the company acquired cloud detection and response startup, Gem Security, for around $350 million.[13] Also that month, reports indicated that Wiz intended to purchase Lacework, but in May the deal fell through during the due diligence process.[14] In November 2024, the company acquired security remediation and risk management startup Dazz for a cash-and-share deal valued at $450 million.[15]

Acquisition by Alphabet Inc.

In March 2024, Google and Alphabet CEO Sundar Pichai reached out to Rappaport via email to express interest in a potential bid to acquire the company. Rappaport initially missed the email until May, when he met with Pichai and Google Cloud CEO Thomas Kurian at the Googleplex in Mountain View, California. Less than a month later,[16] Google made an offer to acquire the company at a valuation of $23 billion. Initially, Wiz turned down the offer in favor of going public.[17][18] However, the deal was revived due to weakness in the IPO market and a more mergers and acquisitions–friendly Trump administration, and on March 18, 2025, Google announced an all-cash acquisition of Wiz for $32 billion.[19][20][16] Once closed, Wiz will join Google Cloud.[21] The deal "represent[ed] the largest cybersecurity acquisition of all time [and] the most expensive acquisition Google has ever made in any sector".[16]

In February 2026, the acquisition received unconditional approval from the European Union’s antitrust authorities, removing the final major regulatory hurdle for the deal. The European Commission concluded that the transaction would not substantially lessen competition in the cybersecurity and cloud computing markets. The clearance allowed the acquisition to proceed without any conditions in the European Economic Area, paving the way for Wiz to fully integrate into Google Cloud. It is the largest technology acquisition involving an Israeli-founded company.[22][23]

On March 11, 2026, the acquisition was completed.[10][24]

Funding

Wiz has raised a total of $1.9 billion from a combination of venture capital funds and private investors:

  • Series A — In December 2020, Wiz emerged from stealth by raising $100 million from Index Ventures, Sequoia Capital, Insight Partners and Cyberstarts.[25]
  • Series B — In April and May 2021, Wiz raised $130 million and $120 million (respectively) on a $1.7 billion valuation from Greenoaks Capital ({{{2}}}), Index Ventures, Sequoia Capital, Insight Partners, and Cyberstarts.[26]
  • Series C — In October 2021, Wiz raised $250 million on a $6 billion valuation[27][28] led by Greenoaks, and with participation from Insight Partners, Capital, Sequoia Capital, Salesforce Ventures, and CyberStarts, and individual investors Bernard Arnault and Howard Schultz.[29]
  • Series D — In February 2023, Wiz raised $300 million on a $10 billion valuation[30] led by venture capital fund Greenoaks Capital, with participation from Lightspeed Venture Partners, along with individual investors including Bernard Arnault and Howard Schultz.
  • Series E — In May 2024, Wiz raised $1 billion on a $12 billion valuation[31] from Andreessen Horowitz, Lightspeed Venture Partners, Thrive Capital, Greylock Partners, Wellington Management, Cyberstarts, Greenoaks, Index Ventures, Salesforce Ventures, Sequoia Capital and Howard Schultz.

Research

Wiz researchers have discovered and publicly disclosed numerous cloud vulnerabilities that garnered significant media coverage:

  • ChaosDB – A series of flaws in Microsoft Azure's Cosmos DB that made it possible to download, delete, or manipulate databases belonging to thousands of Azure customers.[32][33]
  • OMIGOD – Bugs in Open Management Infrastructure (OMI), a ubiquitous but poorly documented agent embedded in many popular Azure services, that allowed for unauthenticated remote code execution and privilege escalation.[34]
  • NotLegit – Insecure default behavior in the Azure App Service that exposed the source code of some customer applications.[35]
  • ExtraReplica – A chain of critical vulnerabilities found in the Azure Database for PostgreSQL Flexible Server that could let malicious users escalate privileges and gain access to other customers' databases after bypassing authentication.[36][37]
  • AttachMe – A cloud isolation vulnerability that, before it was patched by Oracle Cloud Infrastructure, could have allowed attackers to access and modify other users' OCI storage volumes without authorization.[38]
  • Hell's Keychain – A first-of-its-kind cloud service provider supply-chain vulnerability in IBM Cloud Databases for PostgreSQL that, before it was patched, could have allowed malicious actors to remotely execute code in victims' environments.[39]
  • BingBang – A misconfiguration in Azure Active Directory (AAD) that allowed Wiz researchers to modify Bing.com search results in a way that malicious actors could use to steal Office 365 credentials granting access to countless users' private emails and documents.[40]
  • DeepSeek – Wiz said it had found a trove of sensitive information in a key database from the artificial intelligence startup DeepSeek which was inadvertently exposed to the open internet.[41][42][43]

References

  1. 1.0 1.1 1.2 Levingston, Ivan; Hammond, George (2024-03-08). "Israeli cyber start-up in talks to raise funds valuing it at over $10bn". Financial Times. https://www.ft.com/content/4c914acd-b088-40ce-be2b-a50125e24978. 
  2. "The Wiz Playbook — How They Dominated". 22 October 2024. https://softwareanalyst.substack.com/p/the-wiz-playbook-how-they-dominated. 
  3. "Wiz eyes $20 billion valuation in potential $500-$700 million share sale". Calcalist. 25 September 2024. https://www.calcalistech.com/ctechnews/article/r1o1cbzra. 
  4. 4.0 4.1 Novet, Jordan (2021-03-22). "A tiny security start-up founded by engineers who sold their last company to Microsoft is already worth $1.7 billion" (in en). https://www.cnbc.com/2021/03/22/security-start-up-wiz-valued-at-1point7-billion-after-a-year-of-existence.html. 
  5. 5.0 5.1 Roof, Katie; Benmeleh, Yaacov (2021-10-11). "Cyber Startup Wiz Raises Funds at $6 Billion Valuation". Bloomberg News. https://www.bloomberg.com/news/articles/2021-10-11/cyber-security-startup-wiz-raises-funds-at-6-billion-valuation. 
  6. Ben-David, Ricky. "Israeli cybersecurity firm Wiz raises $250m, soaring to $6b valuation" (in en-US). ISSN 0040-7909. https://www.timesofisrael.com/israeli-cybersecurity-firm-wiz-raises-250m-soaring-to-6b-valuation/. 
  7. "Cybersecurity has 53 unicorns. Here are 10 to watch" (in en-US). 2022-03-17. https://venturebeat.com/2022/03/17/cybersecurity-has-53-unicorns-here-are-10-to-watch/. 
  8. "Cloud security startup Wiz reaches $100M ARR in just 18 months" (in en). 2022-08-10. https://techcrunch.com/2022/08/10/cloud-security-startup-wiz-reaches-100m-arr-in-just-18-months/. 
  9. "Wiz reports $350m revenue in 2023, hiring 400 in 2024" (in en). Globes. 2024-05-02. https://en.globes.co.il/en/article-wiz-reports-350m-revenue-in-2023-hiring-400-in-2024-1001469549. 
  10. 10.0 10.1 Cite error: Invalid <ref> tag; no text was provided for refs named blog.google
  11. "Google completes acquisition of Wiz" (in en-us). Google. 11 March 2026. https://blog.google/innovation-and-ai/infrastructure-and-cloud/google-cloud/wiz-acquisition/. 
  12. Martin, Andrew (2023-12-04). "Cyber Firm Wiz Buys Cloud-Based Developer Raftt in Roughly $50 Million Deal". Bloomberg News. https://www.bloomberg.com/news/articles/2023-12-04/wiz-buys-cloud-native-platform-raftt-in-first-acquisition. 
  13. Garfinkle, Allie (2024-04-10). "Wiz acquires Gem Security". Fortune. https://fortune.com/2024/04/10/exclusive-wiz-acquires-gem-security/. 
  14. Orbach, Meir (2024-05-02). "Wiz deal to acquire Lacework collapses" (in en). https://www.calcalistech.com/ctechnews/article/hj3v0algc. 
  15. Lunden, Ingrid (2024-11-21). "Wiz acquires Dazz for $450M to expand its cybersecurity platform". TechCrunch. https://techcrunch.com/2024/11/21/wiz-acquires-dazz-for-450m-to-expand-its-cybersecurity-platform/. Retrieved 2024-11-21. 
  16. 16.0 16.1 16.2 Lev-Ram, Michal (October 21, 2025). "How Wiz Won Big". Fortune 192 (2): 93–97. ISSN 0015-8259. 
  17. Grant, Nico; Hirsch, Lauren (2024-07-14). "Google Close to Its Biggest Acquisition Ever, Despite Antitrust Scrutiny" (in en-US). The New York Times. ISSN 0362-4331. https://www.nytimes.com/2024/07/14/technology/google-wiz-deal.html. 
  18. Doan, Lynn; Love, Julia (July 23, 2024). "Wiz Rejects Google's $23 Billion Offer, Seeks IPO Instead". Bloomberg News. https://www.bloomberg.com/news/articles/2024-07-23/cyber-firm-wiz-rejects-alphabet-s-23-billion-offer-seeks-ipo. 
  19. "Google announces agreement to acquire Wiz". March 18, 2025. https://blog.google/inside-google/company-announcements/google-agreement-acquire-wiz/. 
  20. Jin, Lauren Thomas and Berber. "Google Strikes $32 Billion Deal for Cybersecurity Startup Wiz" (in en-US). https://www.wsj.com/business/deals/alphabet-back-in-deal-talks-for-cybersecurity-startup-wiz-41cd3090. 
  21. Sophia, Deborah; Hu, Krystal (March 18, 2025). "Alphabet to buy Wiz for $32 billion in its biggest deal to boost cloud security". Reuters. https://www.reuters.com/technology/cybersecurity/google-agrees-buy-cybersecurity-startup-wiz-32-bln-ft-reports-2025-03-18/. 
  22. Chee, F. Y. (2026, February 10). Google secures EU antitrust approval for $32 billion Wiz acquisition. Reuters.
  23. "EU clears Google's $32 billion bid for Wiz cybersecurity company". The Economic Times. 2026-02-10. ISSN 0013-0389. https://economictimes.indiatimes.com/tech/technology/eu-clears-googles-32-bn-bid-for-wiz-cybersecurity-company/articleshow/128166636.cms. 
  24. "Google completes acquisition of Wiz" (in en-us). Google. 11 March 2026. https://blog.google/innovation-and-ai/infrastructure-and-cloud/google-cloud/wiz-acquisition/. 
  25. "Israeli cloud security co Wiz raises $100m" (in en). Globes. 2020-09-12. https://en.globes.co.il/en/article-israeli-cloud-security-co-wiz-raises-100m-1001352545. 
  26. "Cloud security co Wiz raises $250m at $6b valuation" (in en). Globes. 2021-11-10. https://en.globes.co.il/en/article-cloud-security-co-wiz-raises-250m-at-6b-valuation-1001386887. 
  27. Shulman, Sophie (2021-10-13). "Six reasons for Wiz's $6 billion valuation". https://www.calcalistech.com/ctech/articles/0,7340,L-3919663,00.html. 
  28. "Wiz unveils new security tool to protect code in development pipeline" (in en-US). 8 December 2021. https://techcrunch.com/2021/12/08/wiz-unveils-new-security-tool-to-protect-code-in-development-pipeline/. 
  29. "Wiz raises $250 mln, values Israeli cyber firm at $6 bln" (in en). Reuters. 2021-10-11. https://www.reuters.com/world/middle-east/wiz-raises-250-mln-values-israeli-cyber-firm-6-bln-2021-10-11/. 
  30. Wiggers, Kyle (2023-02-27). "Cloud security startup Wiz, now valued at $10B, raises $300M" (in en-US). https://techcrunch.com/2023/02/27/cloud-security-startup-wiz-now-valued-at-10b-raises-300m/. 
  31. Rosenbush, Steven (2024-05-07). "Cyber Startup Wiz Raises $1 Billion on Path to IPO" (in en-US). https://www.wsj.com/articles/cyber-startup-wiz-raises-1-billion-on-path-to-ipo-500f9145. 
  32. "ChaosDB Vulnerability Exposes Thousands of Microsoft Azure Databases" (in en). https://www.pcmag.com/news/chaosdb-vulnerability-exposes-thousands-of-microsoft-azure-databases. 
  33. "ChaosDB vulns saw Wiz researchers utterly pwn Azure Cosmos" (in en). https://www.theregister.com/2021/11/12/chaos_db_wiz_azure_cosmos_research_pwnage/. 
  34. "OMIGOD: Microsoft Azure VMs exploited to drop Mirai, miners" (in en-us). https://www.bleepingcomputer.com/news/security/omigod-microsoft-azure-vms-exploited-to-drop-mirai-miners/. 
  35. "Microsoft notifies customers of Azure bug that exposed their source code" (in en). 2021-12-22. https://therecord.media/microsoft-notifies-customers-of-azure-bug-that-exposed-their-source-code. 
  36. "Microsoft fixes ExtraReplica Azure bugs that exposed user databases" (in en-us). https://www.bleepingcomputer.com/news/security/microsoft-fixes-extrareplica-azure-bugs-that-exposed-user-databases/. 
  37. msrc. "Azure Database for PostgreSQL Flexible Server Privilege Escalation and Remote Code Execution – Microsoft Security Response Center" (in en-US). https://msrc-blog.microsoft.com/2022/04/28/azure-database-for-postgresql-flexible-server-privilege-escalation-and-remote-code-execution/. 
  38. "Oracle Cloud at one point would let you access any other customer's data" (in en-US). https://www.theregister.com/2022/09/21/oracle_fixes_critical_cloud_vuln/. 
  39. Montalbano, Elizabeth (2022-12-01). "IBM Cloud Supply Chain Vulnerability Showcases New Threat Class" (in en). https://www.darkreading.com/cloud/ibm-cloud-supply-chain-vulnerability-showcases-new-threat-class. 
  40. Weatherbed, Jess (2023-03-30). "Microsoft exploit allowed access to private Office 365 data" (in en-US). https://www.theverge.com/2023/3/30/23661426/microsoft-azure-bing-office365-security-exploit-search-results. 
  41. "Wiz finds serious information leak at DeepSeek". January 30, 2025. https://en.globes.co.il/en/article-wiz-finds-1001500985. 
  42. Satter, Raphael. "Sensitive DeepSeek data exposed to web, cyber firm says". https://www.reuters.com/technology/artificial-intelligence/sensitive-deepseek-data-exposed-web-israeli-cyber-firm-says-2025-01-29/. 
  43. "Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History" (in en-us). 2025-01-29. https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak.