In July 2024, Assaf Rappaport sent a note to his employees. The message was simple: Wiz was walking away from $23 billion. Google had made a generous offer. The answer was no.
The reasoning, according to reporting at the time, was that Wiz believed it could go bigger on its own. An IPO. Independence. A shot at building something generational without disappearing into a tech giant's portfolio.
Eight months later, Google was back at the table. This time, the number was $32 billion.
On March 11, 2026, the deal closed. Google completed the largest acquisition in its 27-year history, absorbing the Israeli cloud security company that had once turned it down. The transaction redraws the competitive map of enterprise cloud security and hands Google Cloud a weapon it has been missing for years.
The Company Google Could Not Stop Chasing
Wiz was founded in 2020 by four Israeli engineers who had previously sold a cloud security company called Adallom to Microsoft. That exit gave them credibility, capital connections, and — crucially — a clear view of how broken enterprise cloud security was.
Their insight was blunt: as enterprises moved workloads to AWS, Azure, and Google Cloud simultaneously, security tools became fragmented. Every cloud had its own native console, its own threat model, its own alert format. Security teams were drowning in disconnected signals.
Wiz built something different. The platform connects agentlessly across cloud environments, constructing a unified security graph that maps relationships between workloads, identities, data, and vulnerabilities. Instead of triggering hundreds of individual alerts, Wiz surfaces the specific attack paths — the precise sequences of misconfigurations and vulnerabilities that, if combined, would let an attacker reach your most sensitive data.
By 2024, more than 50% of the Fortune 100 were customers. Morgan Stanley, Siemens, BMW, Colgate-Palmolive, Salesforce, and Snowflake all appear on the customer list. The platform scans 230 billion files daily across 5 million cloud workloads. No other cloud security company had grown this fast, this cleanly.
Wiz had raised $1 billion at a $12 billion valuation in May 2024 — just two months before walking away from Google's $23 billion offer.
Why Wiz Said No, and Then Said Yes
The first rejection, in July 2024, came down to timing and ambition. Wiz was growing fast enough that a $23 billion exit felt like leaving money on the table. An IPO looked possible, maybe even imminent. Rappaport wanted to see how high the company could fly without a ceiling.
What changed? A few things converged.
The IPO market for cybersecurity companies cooled in late 2024. Antitrust conditions tightened globally, making large tech acquisitions harder to execute — which, paradoxically, made a completed deal more valuable than an attempted one. And Google came back with a number that addressed the core objection: $32 billion in cash, $9 billion more than the original offer, is harder to walk away from a second time.
Google also reportedly agreed to let Wiz maintain its independent brand and continue operating as a multi-cloud platform — meaning Wiz products would still work with AWS, Azure, and Oracle Cloud. For Rappaport, that commitment mattered. The company's value proposition rests on being the neutral security layer across all clouds. Locking it to Google Cloud would have destroyed the product.
A Year Under Regulatory Scrutiny
From announcement to close took almost exactly twelve months.
The deal was announced in March 2025. Regulators on both sides of the Atlantic spent the better part of a year examining it. The core concern was predictable: would Google use Wiz to advantage its own cloud and disadvantage competitors? Could the world's most comprehensive multi-cloud security platform become a tool for steering enterprise customers toward GCP?
The U.S. Department of Justice cleared the deal in November 2025. The European Union followed in February 2026. Neither regulator imposed substantial conditions on the record — a notable outcome given the Biden-era scrutiny that had previously blocked or complicated large tech acquisitions.
The fact that Wiz explicitly committed to maintaining multi-cloud support appears to have been central to winning approval. It gave regulators a concrete, enforceable commitment that the platform's competitive neutrality would be preserved.
What Google Is Actually Buying
Wiz is not a simple security scanner. It is closer to a universal threat intelligence layer for multi-cloud infrastructure.
The platform has three core products. Wiz Code secures software from the moment it is written, scanning repositories, CI/CD pipelines, and container images before anything ships to production. Wiz Cloud provides agentless visibility across cloud environments — it connects via API rather than requiring software agents on every machine, which is why large enterprises adopt it quickly. Wiz Defend adds runtime detection and response, using eBPF-powered sensors to block live threats and collect forensic context.
The connective tissue between these products is the Security Graph. By mapping the relationships between every workload, identity, network path, and data store in an environment, Wiz can identify the handful of attack paths that actually matter in a sea of thousands of theoretical vulnerabilities. Security teams stop chasing individual CVEs and start patching the paths that could lead to a breach.
That capability has become especially valuable as AI workloads proliferate. Large language models introduce new attack surfaces: poisoned training data, exposed model endpoints, misconfigured inference APIs. Traditional security tools were not designed for these patterns. Wiz was.
What the Executives Said
Thomas Kurian, CEO of Google Cloud, described the deal in strategic terms: "We want to make security a catalyst for innovation, not a barrier. With this acquisition, we will deliver a unified security platform that simplifies the complex task of protecting multicloud environments in the AI era, making a strong security posture accessible to more companies and governments."
Rappaport, for his part, focused on scale: "Joining Google Cloud allows us to scale our mission of protecting customers wherever they operate — at machine speed. We remain committed to our open approach, ensuring Wiz continues to support all major cloud and code environments."
The phrase "at machine speed" is not incidental. It points to Google's infrastructure. Running Wiz's Security Graph over petabytes of cloud telemetry is a compute-intensive operation. Google's data centers and AI accelerators could let Wiz do things that are computationally impractical today.
The Competitive Calculus
Before this deal, Google Cloud was the weakest of the three hyperscalers on security. AWS has Security Hub, GuardDuty, and Macie. Microsoft has Defender for Cloud, Sentinel, and a deeply integrated security stack built on decades of enterprise relationships.
Google had Security Command Center, which is competent but not market-leading. It lacked the cross-cloud credibility that enterprise security buyers demand.
Wiz changes that calculus immediately.
The irony is that Wiz's value to Google is partly its relationships with Google's rivals. The company's customers include enterprises running primarily on AWS or Azure. Those customers chose Wiz precisely because it was not affiliated with any single cloud provider. Google is betting that it can maintain that reputation even after absorbing the company.
It is a real tension. Microsoft faced the same dynamic after acquiring GitHub: enterprise customers worried that Microsoft would use GitHub telemetry to advantage Azure. Those concerns largely subsided as Microsoft kept GitHub independent.
Google will need to manage Wiz's neutrality with the same care. If AWS customers start to feel that Wiz is quietly steering them toward GCP, the platform's credibility collapses — and so does much of the $32 billion rationale.
Worth noting: Google's previous record acquisition was Motorola Mobility in 2012 for $12.5 billion. That deal was largely considered a failure; Google sold Motorola to Lenovo two years later for $2.9 billion. The Wiz acquisition carries a very different strategic logic, but the comparison is not flattering to Google's M&A track record at scale.
The AI Security Angle
There is a second thesis embedded in this deal, beyond the cloud security competition.
Wiz's blog post announcing the acquisition was titled "Welcoming a new era of Cloud and AI Security." That framing is deliberate. AI infrastructure — the training clusters, inference endpoints, vector databases, and model registries that enterprises are building at speed — is the fastest-growing attack surface in enterprise computing.
Wiz already scans AI workloads the same way it scans traditional cloud workloads. Its Security Graph can map an LLM endpoint's access permissions, identify misconfigured training data buckets, and flag exposed model APIs just as readily as it flags an open S3 bucket. For Google, which is selling AI infrastructure to enterprises through Vertex AI, that capability is a product differentiator.
The combined offering — build and run your AI on Google Cloud, secure it with Wiz — gives enterprise sales teams a clear story. Security concerns are one of the most common reasons enterprises delay AI deployment. A credible answer to that concern, embedded in the platform itself, is commercially valuable.
The Bottom Line
Google spent $32 billion to fix a problem it could not solve internally: it was losing enterprise security deals to Microsoft and AWS, and it lacked the multi-cloud credibility to compete for customers who had already spread workloads across multiple clouds.
Wiz solves both problems in a single acquisition. It brings the security graph technology Google could not build, the Fortune 100 customer relationships Google did not have, and the multi-cloud positioning that makes all of it credible to buyers who do not want to trust their security posture to their primary cloud vendor.
Whether the deal delivers on that premise depends on what happens next. Can Google keep Wiz's engineering team together? Will AWS and Azure customers stay on the platform after Wiz is officially inside Google? Will the multi-cloud commitment hold when Google's sales team is in the room?
The answers will take years to emerge. For now, the cloud security market woke up on March 12 in a fundamentally different shape than it was in on March 10.
Sources
- Google wraps up $32B acquisition of cloud cybersecurity startup Wiz (March 11, 2026)
- Google Completes Acquisition of Wiz — Press Release (March 11, 2026)
- It's Official: Wiz Joins Google (March 11, 2026)
- Google gets the US government's green light to acquire Wiz for $32B (November 5, 2025)
- Google revives talks to acquire Wiz at higher valuation (March 17, 2025)
- Confirmed: Google buys Wiz for $32B to beef up in cloud security (March 18, 2025)
- Wiz walks away from Google's $23B acquisition offer (July 22, 2024)
- Wiz Platform Overview (accessed March 2026)