Google’s $32bn Wiz Acquisition Shakes Up Cybersecurity Landscape
The short version:
- Google’s Acquisition of Wiz: Google agreed in March 2025 to buy Wiz for $32 billion in cash, its largest deal ever.
- Focus on Cloud Security: Wiz scans cloud accounts on all the major platforms, Google Cloud included, for risky settings and exposed workloads.
- Market Expansion: Google Cloud trails AWS and Microsoft and wants a stronger security offer.
- Innovation and Integration: Wiz will join Google Cloud and keep supporting other clouds.
- Industry Reaction: The deal still needs regulatory approval and was expected to close in 2026.
Google bets $32 billion on Wiz
Google announced on March 18, 2025, that it had agreed to acquire Wiz for $32 billion. Wiz, founded in 2020, had become one of the fastest-growing security startups by selling tools that show companies where their cloud accounts are exposed. A year earlier it had turned down a $23 billion offer from Google.
For Google, the deal is about winning business from companies that use several clouds. Wiz also works on AWS and Microsoft Azure as well as Oracle Cloud. Google has said that will continue.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Why cloud security is worth so much
Most large companies now run workloads in more than one cloud. Misconfigured storage is a common cause of breaches, and so are exposed keys and overprivileged accounts. Wiz connects to cloud accounts through APIs without installing agents and builds a map of assets and risks, which security teams then use to decide what to fix first. It is a simple idea.
Alphabet CEO Sundar Pichai described the goal in one line when the deal was announced: “Together, Google Cloud and Wiz will turbocharge improved cloud security and the ability to use multiple clouds.”
How it changes the cloud race
Google Cloud is the third-largest cloud provider. Adding Wiz to Mandiant, which Google bought in 2022 for about $5.4 billion, gives it a security portfolio it can sell to companies that do not run mainly on Google.
Rivals have their own tools. Microsoft sells Defender for Cloud, and AWS has Security Hub and GuardDuty. Wiz’s appeal is that it is not tied to any one of them.
Folding Wiz into Google Cloud
Wiz will become part of Google Cloud after closing. Google has said the products will stay available on other clouds and through partners, which existing Wiz customers will watch closely.
Earlier versions of this article referred to quotes from unnamed industry leaders. We could not find them and have removed the reference.
How the industry reacted
Investors read the price as a signal that cloud security companies are worth a premium. Some customers worried about the opposite problem. A tool they chose because it was neutral now belongs to one of the three big cloud providers, and they want proof that it will treat AWS and Azure as well as it treats Google.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Regulators are the next step. The deal needs antitrust approval in the U.S. and other countries before it can close.
What to watch next
The first test will be regulatory approval. After that, the question is whether Wiz keeps its pace of product releases inside a much larger company.
Customers should watch for any change to multicloud support, pricing or contract terms after closing.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.