Google’s $32 Billion Bet: Wiz Acquisition Transforms Cybersecurity Landscape
Summary
- Google has agreed to acquire cloud security company Wiz for $32 billion in cash.
- It would be Google’s largest acquisition ever and one of the biggest security deals on record.
- Wiz, founded in 2020, sells cloud security tools that work across major cloud providers.
- The deal is meant to strengthen Google Cloud’s security business.
- It needs regulatory approval before it can close.
Google’s biggest deal
Google announced on March 18, 2025, that it has agreed to buy Wiz, a fast-growing cloud security startup, for $32 billion in cash. It would be the largest acquisition in Google’s history and one of the biggest ever in cybersecurity. The deal shows how central security has become to the cloud business.
Wiz was founded in 2020 and grew quickly by helping companies find risky misconfigurations and vulnerabilities across their cloud environments. Its tools work across major clouds, including Amazon Web Services and Microsoft Azure as well as Google Cloud, which made it attractive to a buyer trying to win multi-cloud customers.
Why security is the prize
Big tech companies keep spending on security. Businesses moving data and workloads to the cloud want strong protection and the freedom to use more than one provider, and Google is betting that Wiz, with its reputation for working equally well on rival clouds, helps on both counts.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Alphabet CEO Sundar Pichai said: “Together, Google Cloud and Wiz will turbocharge improved cloud security and the ability to use multiple clouds.” Google has said Wiz products will continue to work across competing clouds. An earlier version of this article attributed a different quote to Pichai that could not be found in Google’s announcement; it has been replaced with his published statement.
What it means for the industry
A deal this size will push rivals to look harder at their own security portfolios, whether through acquisitions or internal development. A quote attributed to a “cybersecurity analyst Jane Thompson” in an earlier version could not be verified and has been removed.
With Wiz, Google Cloud gets tools that scan cloud environments continuously and flag risks before attackers find them. For Google’s customers, that means more security built into the platform they already use.
Regulators and the road ahead
The deal still has to clear antitrust reviews. That could take a while.
For smaller security vendors, the deal is a signal of how much large platforms value cloud security, and a reminder that the biggest providers are building or buying much of what customers once bought separately.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
What to watch
Google’s $32 billion bet on Wiz shows how important security has become to winning cloud customers. Watch for the regulatory decisions, how Google keeps Wiz working across other clouds, and how competitors respond.
For companies using Wiz today, little changes until the deal closes. After that, the question is whether it stays truly multi-cloud.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.