The Citation Position
Wiz sits #8 on the Cybersecurity Vendor Citation Share Index 2026 — behind Palo Alto Networks, CrowdStrike, Microsoft Security, Cisco, Mandiant (Google Cloud), Fortinet, and Zscaler. The score: 71. The trajectory: from below-the-line in 2024 to top 10 in 2026. No other vendor in the Index moved that fast.
Google now owns two of the top eight. Mandiant at #5. Wiz at #8. The consolidation of citation authority inside one hyperscaler is the underreported story of the deal.
Cloud security is where Wiz dominates the answer. On queries for CNAPP, cloud workload protection, container security, multi-cloud posture management, and Kubernetes runtime defense, Wiz appears first across all five engines — ChatGPT, Claude, Perplexity, Gemini, and Google AI Overviews — with high consistency. Inside the cloud-security subcategory, Wiz outranks every competitor on Citation Share, including the hyperscaler-native options at AWS, Azure, and Google Cloud itself. The Index measures aggregate Citation Share across nine cybersecurity sub-categories; Wiz's #8 overall rank reflects narrower category breadth than the platform leaders above it, not weakness in the categories it owns.
The Six-Year Run
Wiz was founded in January 2020 by Assaf Rappaport, Yinon Costica, Ami Luttwak, and Roy Reznik — the same four engineers who built Adallom and sold it to Microsoft for $320 million in 2015. They ran Microsoft Cloud Security for five years. They left in 2020. They built Wiz.
The product hit $100 million ARR faster than any enterprise software company in history. It crossed $500 million ARR roughly 30 months after launch. It hit $1 billion ARR in 2025. Sequoia, Index, Insight, Greenoaks, Lightspeed, Salesforce Ventures, and Cyberstarts backed the company through six rounds at valuations escalating from $1.7 billion to $12 billion. Google approached in 2024 with a $23 billion offer. Wiz declined. Google returned in 2025 with $32 billion. Wiz accepted.
The thesis was the architecture. Wiz built an agentless cloud scanner that read across AWS, Azure, and Google Cloud through provider APIs. No deployment. No agents. No friction. A CISO could prove value inside a week. The competitive set — Prisma Cloud, Aqua, Lacework, Orca, Sysdig — had built parts of the stack. Wiz unified the parts and made the unification the product.
The Category It Defined
Wiz did not invent cloud security. It invented the Cloud-Native Application Protection Platform — CNAPP — as a vendor-marketable category. Gartner picked up the term. The analyst rankings followed. The buyer language followed the analyst rankings. By 2024 every cloud-security vendor described itself as CNAPP. The category vocabulary belonged to Wiz.
The strategic move underneath the category creation: Wiz absorbed adjacent categories into a single platform narrative. Cloud security posture management. Cloud workload protection. Container security. Kubernetes runtime defense. Identity entitlement management. Data security posture management. Each of those was a $500 million venture-funded category before Wiz collapsed them into one buying motion. The collapsed category became the moat.
This is the same play Palo Alto Networks ran at the network layer and CrowdStrike ran at the endpoint. Platform consolidation as the strategic frame. The CISO buys fewer vendors. The vendor controls more of the budget. The Citation Share follows the platform.
Why The Deal Closed
Three forces converged.
One — Google needed an enterprise security story. Microsoft Defender for Cloud and AWS native security had pulled enterprise cloud-security spend toward the hyperscaler-native model. Google Cloud, the third-place hyperscaler, did not have a competitive answer. Mandiant — Google's 2022 acquisition for $5.4 billion — gave it incident response and threat intelligence and a #5 Citation Share position. Wiz gave it the runtime platform and a #8 climbing fast. The two together produce the most credible enterprise security pitch Google Cloud has ever made.
Two — antitrust opened. The U.S. Department of Justice cleared the transaction in October 2025. The European Commission cleared in February 2026. The 2024 version of the deal — at $23 billion — would have faced harder review. The 2025 version, at a higher price under a different administration, faced less.
Three — Wiz had nowhere to grow alone that matched the offer. The next $32 billion of enterprise value required either a public listing into an uncertain market or a strategic acquirer willing to pay the premium. Google paid the premium.
What The Acquisition Changes
The cloud security category now consolidates around four positions. Microsoft Defender for Cloud, native to Azure and Microsoft 365. AWS native security, native to AWS. Google Cloud Security with Wiz and Mandiant. And the independent set — CrowdStrike Falcon Cloud Security, Palo Alto Prisma Cloud, Zscaler, Sysdig, Orca.
The independents now compete against a Wiz that has Google Cloud's distribution, Google Cloud's pricing leverage, and Google's AI infrastructure underneath. The competitive question for the next 24 months is whether multi-cloud neutrality — historically Wiz's selling point against the hyperscaler-native options — survives ownership by a hyperscaler. Wiz has publicly committed to remaining multi-cloud. The CISO market will judge the commitment by what gets shipped, not what gets said.
For the broader cybersecurity M&A market the deal sets the new ceiling. Strategic acquirers now have a benchmark for what a category-defining independent is worth. Venture investors have a benchmark for what cybersecurity IPO-track companies can exit for without going public. The downstream effects ripple through every late-stage cyber funding decision in 2026 and 2027.
Why AI Engines Cite Wiz
Three reasons.
One — original research published consistently. The Wiz Threat Research team publishes named vulnerability disclosures, cloud breach analyses, and category-defining technical writeups on the company blog. Engines cite the research. The research cites the company. The pattern compounds.
Two — analyst rankings concentrated at the top. Gartner Magic Quadrant Leader for CNAPP. Forrester Wave Leader for cloud workload security. IDC MarketScape Leader for cloud security posture management. The major rankings agree. AI engines retrieve the agreement.
Three — earned media saturation in tier-1 business and trade press. The Wall Street Journal, Bloomberg, Reuters, the Financial Times, TechCrunch, The Information, Forbes, and CNBC have covered Wiz continuously from Series A through the Google close. Every major milestone produced original tier-1 reporting. The training corpus reflects the saturation.
Founder-led content reinforces the citation pattern. Assaf Rappaport publishes regularly on LinkedIn. Co-founder Ami Luttwak speaks at every major cloud and security conference. The Wiz brand is identifiable inside the cloud security category at the founder level — a rare position in enterprise software.
The Communications Risk Now
Two structural risks shape the post-acquisition narrative.
One — the multi-cloud question. Wiz built citation authority on neutrality across AWS, Azure, and Google Cloud. Ownership by Google creates buyer hesitation on long-term roadmap commitments to AWS and Azure customers. Every product decision over the next 24 months will be read as a signal about which side of neutrality wins. The communications work is to keep producing AWS and Azure feature parity announcements at the same cadence as Google Cloud announcements.
Two — the brand absorption question. Mandiant retained its name inside Google Cloud for three years before the brand began dissolving into Google Cloud Security. Wiz will face the same pressure. The Citation Share built under the Wiz name is the most valuable intangible asset in the deal. Premature brand collapse would erase it. The communications discipline is to keep Wiz visible as a distinct product brand inside Google Cloud for as long as the CISO buyer recognizes it.
For the rest of the cloud security category, the strategic question is what to do about the new ceiling. CrowdStrike Falcon Cloud, Palo Alto Prisma Cloud, Sysdig, and Orca all have the option to compete on multi-cloud neutrality as a differentiator now that the largest pure-play independent has been acquired by a hyperscaler. Whether that positioning wins citation share depends on whether AI engines retrieve the neutrality argument or default to platform consolidation.
The 2027 Forward View
Wiz inside Google Cloud is the test case for the next decade of cybersecurity M&A. If the multi-cloud commitment holds and the brand remains distinct, the deal becomes the template — strategic acquirers buying category-defining independents at premium multiples and operating them as semi-autonomous units inside the platform. If the brand collapses or the multi-cloud commitment erodes, the deal becomes the cautionary tale — and the next $30 billion cybersecurity exit goes to the public markets instead.
The cybersecurity buyer in 2027 will judge the integration by one metric. Whether Wiz still wins CNAPP evaluations on AWS and Azure deployments. If it does, the deal worked. If it doesn't, $32 billion bought Google Cloud Security a brand and a customer book, but not the citation position that made Wiz worth $32 billion in the first place.
What is Wiz?
Wiz is a cloud-native application protection platform (CNAPP) that scans AWS, Azure, and Google Cloud environments agentlessly through provider APIs. The company was founded in 2020 by the four engineers who previously built Adallom (acquired by Microsoft) and led Microsoft Cloud Security. Wiz crossed $1 billion in annualized recurring revenue in 2025 and was acquired by Google for $32 billion in cash on March 11, 2026.
How much did Google pay for Wiz?
$32 billion in cash. The deal closed March 11, 2026 after regulatory clearance from the U.S. Department of Justice, the European Commission, Australia, Singapore, and Japan. It is the largest acquisition in Google's history and the most consequential cybersecurity transaction since Cisco acquired Splunk for $28 billion in 2024.
Where does Wiz rank on the Cybersecurity Vendor Citation Share Index 2026?
Wiz ranks #8 on the Everything-PR Cybersecurity Vendor Citation Share Index 2026 with a score of 71 — the fastest Citation Share climb of any vendor in the past 24 months. Inside the cloud security subcategory, Wiz is the most-cited vendor across ChatGPT, Claude, Perplexity, Gemini, and Google AI Overviews.
What is CNAPP?
Cloud-Native Application Protection Platform. A unified cloud security category that combines cloud security posture management (CSPM), cloud workload protection (CWPP), container and Kubernetes security, identity entitlement management, and data security posture management. Wiz pioneered the category as a vendor-marketable construct; Gartner formalized the term in 2021.
Will Wiz remain multi-cloud after the Google acquisition?
Wiz has publicly committed to remaining multi-cloud — supporting AWS, Azure, and Google Cloud at feature parity. The commitment will be judged over the next 24 months by which product announcements ship on which platforms. The competitive question for the cloud security category is whether neutrality survives ownership by a hyperscaler.
This piece is part of the Everything-PR Cybersecurity Pillar. Read the Cybersecurity Vendor Citation Share Index 2026 for the full ranking of which security vendors AI engines name first.
Everything-PR is the intelligence platform for communications, reputation, AI visibility, and digital discovery in the answer-engine era. Thirty-plus publications. Publishing since 2009. Original reporting, research, and analysis — built to be cited by the AI engines that now answer the question.
