WIZ

The four Wiz co-founders — Assaf Rappaport, Ami Luttwak, Yinon Costica, and Roy Reznik — had already built and sold a cybersecurity company together. Their previous startup, Adallom, was a cloud security company that Microsoft acquired in 2015 for $320 million.

After the acquisition, all four worked at Microsoft leading the Cloud Security Group.

By 2020, they were ready to leave and build again. They saw a gap in cloud security: as companies rushed workloads to AWS, Azure, and Google Cloud, security tools hadn't kept pace.

Existing solutions required installing agents on every server and generated floods of alerts that security teams couldn't process. The cloud was a mess of misconfigurations, exposed credentials, and hidden vulnerabilities — and nobody had a clear picture of it all.

Wiz launched in January 2020 — literally weeks before COVID-19 shut the world down. Instead of slowing them, the pandemic accelerated their market.

Every company on Earth was rushing to the cloud, and Wiz's agentless approach meant customers could deploy it in minutes with zero infrastructure changes. Connect your cloud account, and Wiz scans everything — VMs, containers, serverless functions, databases, identity configurations — building a complete risk map.

Wiz sells annual subscriptions based on the number of cloud workloads (virtual machines, containers, serverless functions) protected. Pricing scales with cloud consumption — as customers use more cloud, they pay Wiz more.

This aligns perfectly with the broader trend of growing cloud spend.

The agentless model is a key pricing advantage. Traditional security tools require installing software agents on every server, which creates deployment costs, performance overhead, and maintenance burden.

Wiz connects via API to cloud provider accounts and scans everything externally. Deployment takes minutes instead of months, which dramatically shortens the sales cycle.

ARR growth was record-breaking: $1 million within months of launch, $100 million in 18 months, $350 million by 2023, and reportedly over $500 million by 2024. No enterprise SaaS company has ever scaled this fast.

Wiz Cloud Security Platform — the core product that provides agentless visibility across AWS, Azure, Google Cloud, and Oracle Cloud. Scans for vulnerabilities, misconfigurations, malware, exposed secrets, and identity risks.

Wiz Runtime Sensor — a lightweight agent (optional) that adds real-time threat detection to the agentless scanning foundation. Wiz Code — security scanning integrated into the developer pipeline, catching vulnerabilities before they reach production.

Wiz Defend — a cloud detection and response product that identifies and helps contain active threats in real time. Wiz Security Graph — a visual map of an organization's entire cloud environment showing how every resource connects and where attack paths exist.

Wiz grew through a combination of product excellence and founder credibility. The four co-founders had already sold a company to Microsoft and led cloud security there.

When they said "we built a better way," CISOs believed them because of the track record.

The product sold itself through demonstrations. Wiz's 15-minute deployment — connect your cloud account, see your risk map immediately — was the most effective sales tool.

Security vendors typically require weeks or months of setup. Wiz showed results in a single meeting.

Landing massive logos early created a cascade. Within two years, Wiz had 40% of the Fortune 100 as customers.

When one CISO at a major bank buys Wiz, every other bank CISO hears about it. Enterprise security is a trust-based market, and early customer logos created a self-reinforcing credibility loop.

The Google acquisition decision dominated 2024. Wiz turned down Google's $23 billion offer in July 2024, with Rappaport saying they wanted to pursue an IPO and build an independent company.

Then they accepted a $32 billion offer later — the largest cybersecurity acquisition in history. The deal raised questions about cloud neutrality: Wiz secures AWS, Azure, and GCP equally, but becoming owned by Google could make AWS and Azure customers nervous.

Before the acquisition, the competitive landscape was intensifying. Palo Alto Networks acquired cloud security startups aggressively.

CrowdStrike expanded from endpoint security into cloud. AWS, Azure, and Google all improved their native security tools.

Wiz's lead was real but competitors were closing in.

Sequoia Capital led early rounds and was the most prominent backer. Index Ventures, Insight Partners, and Greenoaks Capital participated in growth rounds.

Cyberstarts (an Israeli cyber-focused VC) was an early seed investor. Andreessen Horowitz invested in later rounds.

The final private valuation of $12 billion came in a 2024 funding round before the $32 billion Google acquisition.