Wiz: From $0 to $500M ARR in Four Years and Acquired by Google for $32 Billion

Origin

The founding team previously established Adallom in 2012, focusing on cloud application security. After it was acquired by Microsoft for $320 million in 2015, the four founders formed the Guardicom cloud security team within Microsoft but struggled with the limitations of a large corporate structure, which hindered rapid iteration. In 2020, Rappaport led the team to leave Microsoft to start a new venture. They observed that the public cloud security market was undergoing a radical transformation driven by Infrastructure as Code and containerization, while traditional agent-based scanning solutions suffered from deployment cycles lasting weeks, causing significant pain for customers. They decided to use an agentless API-based architecture to connect to cloud environments, enabling minute-level deployment and full asset visibility, directly addressing the core blind spot pain points for AWS and Azure customers.

Milestones

Turning Points

• In 2020, the first agent-based product had a deployment cycle of several weeks and slow payment cycles, prompting the team to decisively scrap the existing architecture and pivot to an agentless solution.
• In February 2021, Morgan Stanley served as the first benchmark customer, completing a full cloud asset scan deployment within two weeks, which validated the feasibility of the agentless architecture and pushed MRR past $1 million that month.
• In July 2024, Wiz management rejected Google's initial $23 billion acquisition offer, citing higher valuation expectations for an independent IPO and antitrust risks, choosing to complete a $1 billion Series E round instead.
• Twelve months later, Google increased its offer by $9 billion, ultimately acquiring Wiz for $32 billion in an all-cash deal, making it the largest M&A transaction in cybersecurity history.

Failures & Pitfalls

• In the early stages, the agent-based cloud security product was difficult to deploy in customer environments and had extremely slow payment cycles; 2020 revenue was nearly zero, nearly exhausting seed funding.
• After the agent-based product was launched, it lacked differentiated advantages compared to legacy vendors like Microsoft, forcing the team to fully reconstruct the product and miss a market window of about 9 months.
• Wiz rejected Google's initial $23 billion acquisition offer in July 2024, a move widely criticized at the time for being overly optimistic regarding valuation and ignoring antitrust risks, placing the team under immense public pressure.
• During the rapid expansion phase, the team grew from a few dozen in 2021 to about 1,000 in 2024, leading to internal management coordination pressures and issues with resource fragmentation due to multiple parallel product roadmaps.

Core Data

• Annual Recurring Revenue 2022：$100 million (based on public data, not independently verified)
• Annual Recurring Revenue 2024：$350 million (based on public data, not independently verified)
• Annual Recurring Revenue 2025：$500 million (based on public data, not independently verified)
• Seed Round Funding：$10 million (based on public data, not independently verified)
• Cumulative Funding Total：$1.9 billion (based on public data, not independently verified)
• Valuation After Fifth Round：$12 billion (based on public data, not independently verified)
• Final Acquisition Amount by Google：$32 billion (based on public data, not independently verified)
• Fortune 100 Customer Penetration：40% (based on public data, not independently verified)
• Team Size 2025：Approximately 1,700 (based on public reports at the time of the March 2025 acquisition announcement, not independently verified)
• Time to Reach $100M ARR from Zero：18 months (based on public data, not independently verified)

Competitors / Peers

Wiz's primary competitors in Cloud Security Posture Management (CSPM) and Cloud Workload Protection include Palo Alto Networks' Prisma Cloud (formed by the merger of RedLock and Twistlock), which uses a hybrid agent and agentless architecture and has an ARR exceeding $2 billion, though its growth has slowed. CrowdStrike's Falcon Cloud Security is growing rapidly by leveraging cross-selling through its endpoint security channels. Lacework saw its valuation shrink significantly after its assets were acquired in 2024, serving as a negative case study for the sector. Orca Security is also positioned as an agentless cloud security provider but lags behind Wiz by 2 to 3 times in funding scale and customer volume. After Google's acquisition of Wiz, Prisma Cloud and Orca were placed at a clear competitive disadvantage, accelerating consolidation in the cloud security market.