Wiz

Wiz is a cloud-native application protection platform (CNAPP), founded in 2020 by four Israeli cybersecurity veterans (Assaf Rappaport, Ami Luttwak, Yinon Costica, Roy Reznik) after they sold their prior company, Adallom, to Microsoft. Its through-line is a single architecture bet: connecting to cloud environments agentlessly was simultaneously the product differentiator, the wedge into enterprise buyers, and the sales accelerant, and that one choice compounded into the fastest revenue ramp in software history and a $32B exit to Google.

Differentiation: Agentless when everyone else shipped agents

The problem. Legacy cloud security from incumbents like Palo Alto Networks required installing an agent on every workload. That model was slow to deploy, consumed compute resources, and forced security teams to negotiate with every application owner before they could see any risk, so buyers endured months of friction before value.

The approach. Wiz built an agentless, API-driven platform that connects directly to a cloud account (AWS, Azure, GCP) and scans the entire environment in minutes with nothing installed on customer workloads. It then fed the findings into a Security Graph that correlated misconfigurations, identities, vulnerabilities, and network exposure into actual attack paths, rather than the flat vulnerability lists rivals produced.

How it solved it. The wedge was that a buyer got a full risk picture within minutes of connecting, versus the incumbents' agent-on-every-workload rollout. That architectural gap was hard to copy: competitors had to re-engineer their products around Wiz's model, and Wiz today scans roughly 230 billion files per day across more than 5 million cloud workloads.

Beachhead: Cloud-native security teams at large enterprises

The problem. A young security vendor cannot sell to everyone at once, and the broad market still had to be educated about a new category. Wiz needed an entry point where the pain was already acute, the budgets were already allocated, and it would not have to evangelize before it could sell.

The approach. Wiz aimed narrowly at cloud-native security teams inside large enterprises, organizations that had already moved infrastructure to the cloud and were sitting on concentrated, well-funded security pain. Rather than chasing SMBs or consumer-flavored self-serve adoption, it went straight at the Fortune 100 with enterprise sales.

How it solved it. The concentrated entry point produced fast, large contracts and marquee reference logos. Wiz reached roughly 40% of the Fortune 100 early on, later climbing past 50%, including leaders in financial services, healthcare, and technology, and those reference customers compounded credibility that pulled in the rest of the market.

GTM: The frictionless pilot that collapsed the sales cycle

The problem. Enterprise security sales are notoriously slow: long proofs of concept, agent deployments, and internal politics stretch deals across quarters. Wiz needed to convert its narrow, high-value beachhead into revenue faster than an incumbent selling the same buyers could.

The approach. Wiz turned the agentless architecture into a go-to-market weapon. Because a pilot required only an API connection and no software installation, a prospect could see live, prioritized risk in their own environment within minutes, letting buyers experience value before committing. This was enterprise sales executed exceptionally well, not product-led growth, but with a demo that sold itself.

How it solved it. The near-zero-friction pilot compressed the deal cycle and drove 100%+ year-over-year growth even at large scale. Wiz went from roughly $1M to $100M ARR in 18 months, the fastest any software company had ever reached that mark (beating the prior record by two months), then $200M by May 2023, $500M by October 2024, and past $1B ARR in 2025.

Moats: A deepening risk graph plus ownership of the CNAPP category

The problem. A single clever architecture invites imitation. To stay ahead, Wiz needed defensibility that grew rather than eroded as rivals copied the agentless idea and as the CNAPP space filled with competitors.

The approach. Wiz built a unified Security Graph that correlates cloud risk with source code across multi-cloud environments, and it deepened with every new integration and every customer data point. In parallel, Wiz helped define and then own the CNAPP category narrative, so buyers evaluated the market on Wiz's terms.

How it solved it. Owning both the category story and an architecture rivals had to rebuild around created a position worth more than the revenue alone. Google acquired Wiz for $32B, a deal completed in March 2026 and the largest cybersecurity acquisition ever (surpassing Cisco's $28B purchase of Splunk), at a valuation that priced the strategic position, not just the ARR.