What Google's Finalised Wiz Acquisition Means for Security
6 min read
Google has formally completed its $32 billion all-cash acquisition of Wiz — the largest acquisition in Google's history, and the largest technology deal of 2025. Announced in March 2025, the transaction cleared US antitrust review in November 2025 and received unconditional European Commission approval under EU Merger Regulation in February 2026, before closing in March 2026. Wiz joins Google Cloud, retains its brand, and maintains its commitment to securing customers across all major cloud environments — including AWS, Azure, and Oracle Cloud — making the deal the defining event of the year for enterprise cloud and AI security.
The Deal That Almost Didn't Happen
The acquisition's path to closing is as notable as the deal itself. Google first approached Wiz in 2024 with an offer of $23 billion — a figure Wiz declined, with co-founder and CEO Assaf Rappaport signalling through an internal memo that the business could grow significantly beyond that valuation. The rejection proved prescient: Google returned to the table in early 2025 with a revised offer of $32 billion — a 39% premium over the rejected bid — and the deal was announced in March 2025. For Wiz's 1,800 global employees, the transaction represents collective equity valued at roughly $3 billion, alongside $1.5 billion in combined cash and stock retention bonuses committed by Google to retain staff post-acquisition.
"Keeping people safe online has always been part of Google's mission. This job is increasingly important today, as more companies and governments move their work to the cloud and broadly use generative AI. By bringing Wiz and Google Cloud together, we're making it easier for organizations to innovate with confidence."
— Sundar Pichai, CEO, Google
What Wiz Brings to Google Cloud
Wiz's core capability is a "code-to-cloud" security paradigm — a platform that connects code, cloud, and runtime into a single shared context, enabling security and engineering teams to understand real risk, fix issues at the source, and stop threats as they emerge. This approach maps software architecture and runtime behaviour in real time, providing continuous visibility from development through production across multicloud environments. Wiz is already trusted by 50% of the Fortune 100, with customers including Shell, BMW, LVMH, Morgan Stanley, Salesforce, Mars, Takeda, Colgate-Palmolive, and Aon.
During the year between the deal announcement and closing, the company's engineering teams continued building at pace — uncovering and disclosing a series of significant vulnerabilities across the cloud ecosystem:
- Moltbook — A viral AI agent social network that leaked millions of API keys, underscoring the security implications of AI-generated applications.
- CodeBreach — A critical supply chain vulnerability that could have compromised the AWS Console.
- RediShell — A 13-year-old critical remote code execution flaw in Redis (CVSS 10.0) affecting more than 75% of cloud environments.
- NVIDIAScape — A container escape vulnerability threatening shared AI infrastructure globally.
- Vibe coding exposure research — Wiz found that 1 in 5 organisations building with AI-generated code are exposed to systemic risks, leading to a hardening collaboration with Lovable.
"We want to make security a catalyst for innovation, not a barrier. With this acquisition, we will deliver a unified security platform that simplifies the complex task of protecting multicloud environments in the AI era, making a strong security posture accessible to more companies and governments."
— Thomas Kurian, CEO, Google Cloud
The Combined Platform: AI-Powered, Multicloud by Design
The combined security platform brings together Google's Threat Intelligence and Security Operations capabilities with Wiz's Cloud and AI Security Platform — creating an end-to-end, AI-powered defence across code, cloud, and runtime environments. The platform will serve three AI-era security functions simultaneously: detecting cybersecurity threats created using AI models, protecting against threats to AI models, and leveraging AI to accelerate threat hunting and incident response for security teams.
The combined roadmap includes several major capability expansions: the Wiz AI Security Platform to secure AI applications by providing visibility into AI usage and preventing AI-native risks; Wiz Exposure Management for a unified proactive view of risk from code to cloud to on-premises environments; AI Security Agents purpose-built to investigate, prioritise, and remediate risk at machine speed; and WizOS — hardened, near-zero-CVE container base images that give developer teams a secure foundation from the very first commit. Integration with Google's Gemini AI is expected to deliver further capability enhancements in the near term.
Multicloud Commitment: Wiz Stays Open
A critical assurance for existing Wiz customers is the explicit confirmation that Wiz will continue to support all major cloud platforms — AWS, Microsoft Azure, Oracle Cloud, and Google Cloud Platform — maintaining its status as a genuinely multicloud-neutral security provider. The platform will also remain available through an array of third-party partner security solutions via the Google Cloud Marketplace. For Wiz's enterprise and government customer base, the acquisition is designed to represent continuity of product coverage with an acceleration of capability.
"Complexity is the primary challenge in the cloud today and Google is addressing the need for a simplified 'code-to-cloud' security strategy that works across any environment. By integrating Wiz's proactive multicloud visibility and risk assessment with its own AI-driven operations, Google is positioned to deliver a unified, predictive defence customers need, raising the bar in a critical market."
— Phil Bues, Senior Research Manager of Cloud Security, IDC
Broader Implications: A CNAPP Market at Inflection Point
Beyond its immediate implications for Google Cloud and Wiz customers, the acquisition carries significant signal for the broader Cloud-Native Application Protection Platform (CNAPP) market. Wiz's journey — from a $6 billion valuation in 2021 to a $32 billion acquisition in five years — has demonstrated that cloud-native security is one of the fastest-growing and most strategically important categories in all of enterprise technology.
Industry observers note that the acquisition, alongside an escalating geopolitical climate and the rapid proliferation of AI-driven cyber attacks, is likely to catalyse an acquisition wave across the cybersecurity sector — as global enterprises and cloud providers race to secure the intelligence, platform, and talent needed to protect increasingly AI-dependent operations. Google Cloud also brings its Mandiant threat intelligence and incident response business — acquired for $5.4 billion in 2022 — into this unified security vision, making the combined Google Cloud security portfolio one of the most comprehensive in the enterprise market.
Key Takeaways
- Google has completed its $32 billion all-cash acquisition of Wiz — the largest in Google's history — after clearing US and EU antitrust reviews. Wiz retains its brand and multicloud commitment.
- Wiz is trusted by 50% of the Fortune 100 and connects code, cloud, and runtime into a single shared security context across all major cloud environments including AWS, Azure, and Oracle.
- The combined platform integrates Google Threat Intelligence, Security Operations, and Wiz's Cloud and AI Security Platform to detect, prevent, and respond to threats across all environments.
- During the deal's year-long approval process, Wiz Research uncovered RediShell (CVSS 10.0, 75% cloud exposure), NVIDIAScape, CodeBreach, and found 1 in 5 organisations using AI-generated code exposed to systemic risk.
- The acquisition signals an impending CNAPP consolidation wave — and when combined with Mandiant ($5.4B, 2022), gives Google Cloud one of the most comprehensive enterprise security portfolios in the market.