Wiz

Cloudflare

Wiz

Wiz sells annual subscriptions based on the number of cloud workloads (virtual machines, containers, serverless functions) protected. Pricing scales with cloud consumption — as customers use more cloud, they pay Wiz more.

This aligns perfectly with the broader trend of growing cloud spend.

The agentless model is a key pricing advantage. Traditional security tools require installing software agents on every server, which creates deployment costs, performance overhead, and maintenance burden.

Wiz connects via API to cloud provider accounts and scans everything externally. Deployment takes minutes instead of months, which dramatically shortens the sales cycle.

ARR growth was record-breaking: $1 million within months of launch, $100 million in 18 months, $350 million by 2023, and reportedly over $500 million by 2024. No enterprise SaaS company has ever scaled this fast.

Cloudflare

Cloudflare operates on a freemium model with usage-based pricing. The free tier provides basic CDN, DDoS protection, and SSL for any website — this is how millions of sites use Cloudflare without paying a cent.

Paid plans start at $20/month (Pro), $200/month (Business), and custom enterprise pricing for large organizations.

The free tier is the growth engine, not charity. Every free website that routes through Cloudflare adds data to the network — more traffic patterns to analyze, more attacks to learn from, more threat intelligence to feed the machine learning models.

Free users make the paid product better.

Enterprise contracts are where the real money lives. Large organizations pay six and seven figures annually for advanced security, performance, and compliance features.

Revenue exceeded $1.7 billion in 2024, growing 30%+ year-over-year. The company has been approaching profitability with improving margins.

Wiz

The four Wiz co-founders — Assaf Rappaport, Ami Luttwak, Yinon Costica, and Roy Reznik — had already built and sold a cybersecurity company together. Their previous startup, Adallom, was a cloud security company that Microsoft acquired in 2015 for $320 million.

After the acquisition, all four worked at Microsoft leading the Cloud Security Group.

By 2020, they were ready to leave and build again. They saw a gap in cloud security: as companies rushed workloads to AWS, Azure, and Google Cloud, security tools hadn't kept pace.

Existing solutions required installing agents on every server and generated floods of alerts that security teams couldn't process. The cloud was a mess of misconfigurations, exposed credentials, and hidden vulnerabilities — and nobody had a clear picture of it all.

Wiz launched in January 2020 — literally weeks before COVID-19 shut the world down. Instead of slowing them, the pandemic accelerated their market.

Every company on Earth was rushing to the cloud, and Wiz's agentless approach meant customers could deploy it in minutes with zero infrastructure changes. Connect your cloud account, and Wiz scans everything — VMs, containers, serverless functions, databases, identity configurations — building a complete risk map.

Cloudflare

The origin story starts with Project Honey Pot, a free open-source project that Matthew Prince created in 2004 to track online spammers and hackers. The project grew to track millions of malicious IP addresses, and the Department of Homeland Security started using the data.

But Prince noticed something: he had all this threat intelligence and no good way to help website owners actually use it.

At Harvard Business School in 2009, Prince teamed up with Michelle Zatlyn for a class project exploring how to turn that threat data into a product. Their professor gave them a B — which Prince has jokingly called the most expensive B in HBS history, given what the company became.

They brought in Lee Holloway, a brilliant but unconventional systems programmer Prince had worked with previously, as the third co-founder and technical architect.

Cloudflare launched publicly at TechCrunch Disrupt in September 2010 with a bold pitch: sign up for free, change your DNS, and Cloudflare will make your website faster and more secure. No hardware to install.

No software to configure. Just a DNS change.

In the first day, thousands of websites signed up. The simplicity was the product — in an industry where security meant expensive appliances and complex configurations, Cloudflare said "just point your domain at us and we'll handle it."

Wiz

Wiz grew through a combination of product excellence and founder credibility. The four co-founders had already sold a company to Microsoft and led cloud security there.

When they said "we built a better way," CISOs believed them because of the track record.

The product sold itself through demonstrations. Wiz's 15-minute deployment — connect your cloud account, see your risk map immediately — was the most effective sales tool.

Security vendors typically require weeks or months of setup. Wiz showed results in a single meeting.

Landing massive logos early created a cascade. Within two years, Wiz had 40% of the Fortune 100 as customers.

When one CISO at a major bank buys Wiz, every other bank CISO hears about it. Enterprise security is a trust-based market, and early customer logos created a self-reinforcing credibility loop.

Cloudflare

Cloudflare grew by being free. The free tier removed every barrier to adoption.

A blogger in India and a Fortune 500 company could both sign up in five minutes. This created a massive installed base that generates word-of-mouth, training data, and upsell opportunities.

The developer community became the second growth engine. Cloudflare Workers turned the company from a security vendor into a cloud computing platform.

Developers build entire applications on Cloudflare's edge network, which creates deep technical lock-in. Once your application runs on Workers, migrating to AWS Lambda is a significant engineering effort.

Strategic pricing warfare accelerated commercial adoption. When Cloudflare launched R2 storage with zero egress fees, it directly attacked Amazon S3's most hated pricing model.

The "Bandwidth Alliance" partnered with cloud providers to eliminate data transfer fees. These moves positioned Cloudflare as the anti-AWS — the cloud company that doesn't nickel-and-dime you.

Wiz

The Google acquisition decision dominated 2024. Wiz turned down Google's $23 billion offer in July 2024, with Rappaport saying they wanted to pursue an IPO and build an independent company.

Then they accepted a $32 billion offer later — the largest cybersecurity acquisition in history. The deal raised questions about cloud neutrality: Wiz secures AWS, Azure, and GCP equally, but becoming owned by Google could make AWS and Azure customers nervous.

Before the acquisition, the competitive landscape was intensifying. Palo Alto Networks acquired cloud security startups aggressively.

CrowdStrike expanded from endpoint security into cloud. AWS, Azure, and Google all improved their native security tools.

Wiz's lead was real but competitors were closing in.

Cloudflare

AWS, Google Cloud, and Microsoft Azure are simultaneously partners and competitors. Cloudflare's network sits in front of these clouds, which makes the cloud providers uncomfortable.

As Cloudflare expands into compute (Workers), storage (R2), and databases (D1), the competitive overlap grows. The cloud providers could theoretically build or acquire similar capabilities and bundle them for free.

Profitability pressure is real. Cloudflare has prioritized growth over profits, spending aggressively on network expansion and R&D.

Operating margins have been negative for most of the company's public life, though they've been improving. Investors have tolerated this during growth-stock mania but patience may not last forever.

Content moderation controversies arise periodically. As a company that provides infrastructure to millions of websites, Cloudflare occasionally faces pressure to terminate service to controversial or harmful sites.

They removed 8chan after the El Paso shooting in 2019 and the Daily Stormer in 2017. Prince has described these decisions as uncomfortable, arguing that infrastructure providers shouldn't be arbiters of online speech but sometimes have no choice.

Wiz

Wiz Cloud Security Platform — the core product that provides agentless visibility across AWS, Azure, Google Cloud, and Oracle Cloud. Scans for vulnerabilities, misconfigurations, malware, exposed secrets, and identity risks.

Wiz Runtime Sensor — a lightweight agent (optional) that adds real-time threat detection to the agentless scanning foundation. Wiz Code — security scanning integrated into the developer pipeline, catching vulnerabilities before they reach production.

Wiz Defend — a cloud detection and response product that identifies and helps contain active threats in real time. Wiz Security Graph — a visual map of an organization's entire cloud environment showing how every resource connects and where attack paths exist.

Cloudflare

Cloudflare CDN — a content delivery network spanning 330+ cities in 120+ countries that caches and serves web content from the nearest location to each user, making websites dramatically faster. Cloudflare DDoS Protection — automatic detection and mitigation of distributed denial-of-service attacks.

Has blocked some of the largest DDoS attacks in internet history, including a 71 million requests-per-second attack in 2023. Cloudflare Workers — a serverless computing platform that lets developers deploy code to Cloudflare's edge network, running applications in 330+ locations worldwide with millisecond latency.

Cloudflare Zero Trust — a complete security platform replacing traditional VPNs and firewalls with identity-based access controls for remote workforces. Cloudflare R2 — object storage that competes with Amazon S3 but with zero egress fees, saving companies thousands on data transfer costs.

Wiz

Sequoia Capital led early rounds and was the most prominent backer. Index Ventures, Insight Partners, and Greenoaks Capital participated in growth rounds.

Cyberstarts (an Israeli cyber-focused VC) was an early seed investor. Andreessen Horowitz invested in later rounds.

The final private valuation of $12 billion came in a 2024 funding round before the $32 billion Google acquisition.

Cloudflare

New Enterprise Associates (NEA) led the Series A. Venrock, Pelion Venture Partners, and Union Square Ventures invested early.

Fidelity, Microsoft, Google Capital (now CapitalG), and Baidu all invested in later rounds — notably both Google and Baidu investing in the same company. The September 2019 IPO raised $525 million at a $4.4 billion valuation.

The stock has since grown significantly.