The $32B Wiz-Google Deal: What It Means for Cloud Security
Google closed its acquisition of Wiz on March 11, 2026. The price: $32 billion, all cash. That makes it the largest cybersecurity acquisition in history, the largest acquisition Google has ever made, and the kind of number that makes every cloud security startup recalculate their TAM slides.
To put $32 billion in context: Broadcom acquired Symantec's enterprise security division for $10.7 billion in 2019. Thoma Bravo bought Proofpoint for $12.3 billion in 2021. Google itself bought Mandiant for $5.4 billion in 2022. The Wiz deal isn't just bigger. It's a different category.
What makes this deal worth understanding isn't just the number. It's what it reveals about where cloud security is heading, why Google was willing to pay a 39% premium over the $23 billion Wiz rejected in 2024, and what happens to the rest of the market now.
The Wiz Story in Numbers
Wiz was founded in 2020 by four former Microsoft engineers who had previously built Adallom, which Microsoft acquired in 2015. In five years, they built a company that crossed $100 million in annual recurring revenue faster than almost any enterprise software company in history, then blew past $500 million, and reportedly crossed $1 billion ARR in 2025.
$1 billion ARR in five years is extraordinary. For comparison, CrowdStrike took about 8 years to reach that mark. Palo Alto Networks took over a decade. Wiz did it in roughly half the time by focusing on a single problem — cloud security posture management — and executing relentlessly.
The company raised over $1.9 billion in venture funding at a peak valuation of $12 billion before the acquisition. Investors included Sequoia Capital, Insight Partners, Index Ventures, and Andreessen Horowitz. At a $32 billion exit, even late-stage investors made substantial returns.
Why Google Paid $32 Billion
Google Cloud is the third-largest cloud provider behind AWS and Azure, with roughly 12% market share compared to AWS's 31% and Azure's 25%. That gap has been stubbornly persistent despite Google's technical capabilities.
Security is the wedge Google is using to close the gap. The Mandiant acquisition in 2022 gave Google threat intelligence and incident response. Wiz gives them the leading cloud security platform that already integrates with AWS and Azure, not just GCP.
This is the critical detail: Wiz protects workloads across all major clouds. Google didn't buy a GCP-only security tool. They bought the dominant multicloud security platform, which gives them a relationship with companies running workloads on AWS and Azure. That's a distribution channel Google Cloud has struggled to build organically.
Google has committed to keeping Wiz multicloud. Assaf Rappaport, Wiz's CEO, confirmed the company will continue operating as an independent platform within Google Cloud, supporting AWS, Azure, and other cloud providers. Whether that commitment holds long-term is one of the deal's biggest open questions.
The Rejected $23 Billion Offer
In July 2024, Wiz walked away from a $23 billion acquisition offer from Google. At the time, Wiz's CEO reportedly decided to pursue an IPO instead, citing the company's growth trajectory and the belief that Wiz could be worth more as a public company.
Eighteen months later, they took $32 billion. That's a 39% increase, but the decision to reject the first offer wasn't just about price. In mid-2024, the regulatory environment for large tech acquisitions was more hostile. The FTC had challenged Microsoft's Activision deal. The DOJ was scrutinizing Google. Walking away was partly a bet that either the price would go up or the IPO market would cooperate.
Both happened. The regulatory climate shifted after the 2024 US election. The EU approved the Wiz deal in February 2026 without conditions. And Google, having watched Wiz's ARR nearly double in the interim, was willing to pay significantly more.
What This Means for Cloud Security Startups
The Wiz exit is both inspiring and concerning for the cloud security ecosystem.
The good news: A $32 billion exit validates the cloud security market and proves that cloud-native security companies can reach escape velocity. Every investor evaluating cloud security startups just saw the best possible outcome. Funding in the space will likely increase.
The concerning part: Google now owns the dominant platform. Wiz integrates with over 100 cloud services and has thousands of enterprise customers. Startups competing directly with Wiz's core product — cloud security posture management — now compete with a Google-backed product that can bundle with GCP credits and enterprise agreements.
The opportunity for startups shifts to adjacent areas: runtime security, API security, identity-first security, and cloud-native application protection. Companies that were competing with Wiz directly need to reposition. Companies in adjacent spaces may benefit from the ecosystem attention the deal brings.
The Multicloud Question
Google says Wiz stays multicloud. The market is skeptical, and history justifies that skepticism.
When large platforms acquire multicloud tools, the incentives gradually shift. Features get prioritized for the parent platform. Integration depth becomes uneven. It doesn't happen overnight — it happens over 2-3 years as engineering priorities align with the parent company's strategic goals.
The counter-argument: Google needs Wiz to stay multicloud because that's where Wiz's value lies. If Wiz only worked on GCP, it would serve 12% of the cloud market instead of 100%. Google paid for the market reach, not just the technology.
The enterprises running Wiz on AWS and Azure are watching closely. If integration quality degrades on non-Google clouds, they'll look for alternatives. That creates an opening for competitors like Orca Security, Lacework, and newcomers to pick off anxious customers.
The Regulatory Precedent
The EU approved the deal in February 2026 without demanding concessions. That's significant for several reasons.
It signals that European regulators are becoming more comfortable with large tech acquisitions in security. The argument that consolidation in cybersecurity improves overall security posture appears to have resonated. Google successfully framed the deal as pro-competitive: giving GCP customers better security helps them compete with AWS and Azure.
For future acquisitions in the security space, this creates a favorable precedent. Companies eyeing large security acquisitions — Microsoft, Amazon, CrowdStrike — now have a roadmap for regulatory approval.
What to Watch Next
Three things to monitor in the 12 months following the close:
Wiz's integration pace with GCP. If deep GCP integrations ship significantly faster than AWS/Azure integrations, the multicloud commitment is weakening. Watch the release notes.
Customer retention on non-Google clouds. If major enterprises start evaluating alternatives for their AWS/Azure workloads, that's the market voting on whether they trust Google's multicloud promise.
The next wave of cloud security funding. Expect a spike in venture funding for cloud security startups positioning themselves as the "multicloud alternative" to Wiz. The deal just created a gap in the market for independent, vendor-neutral cloud security platforms.
If you're tracking cloud security and enterprise tech developments, tools like twixb can monitor the relevant industry sources and surface news matching your specific interests. But even following a handful of cybersecurity publications will keep you informed on how this deal reshapes the market. The story is far from over.
The Bottom Line
The $32 billion Wiz acquisition is a landmark deal that reshapes cloud security. Google gets the leading multicloud security platform to strengthen GCP's enterprise pitch. Wiz's investors and team get a historic exit. The market gets a signal that cloud security is worth building in.
The question that matters now isn't whether the deal was smart. It's whether Google can keep Wiz's multicloud promise while integrating a $32 billion acquisition into its cloud strategy. That tension will define cloud security's next chapter.