How Google Cloud and Wiz are Reshaping Multi-Cloud Security

Cloud-based infrastructures promise enterprises huge benefits – from on-demand resources to global scalability and embedded resilience. However, layering security effectively across these shifting environments has proven a challenge. For fast-rising cloud security startup Wiz – which was acquired by Google’s parent company, Alphabet, for US$32bn in March 2025 – the mission is clear: provide total visibility into all risks, without adding complexity.

Despite only being founded in 2020, Wiz has quickly become one of the world’s most in-demand cybersecurity providers, offering an agentless, graph-based cloud-native application protection platform (CNAPP). Companies deploying Wiz gain the ability to instantly scan their cloud environments – whether virtual machines, containers or serverless services – and visualise attack paths that connect seemingly minor misconfigurations into major risks.

“With the Wiz Security Graph, we provide full visibility and context into every cloud resource and the relationships between them to uncover the toxic combinations of risk that create attack paths in your cloud,” says Oron Noah, Director of Product Management at Wiz.

Building for multi-cloud from the start

After launching its initial product, Wiz immediately gained attention from large organisations operating across multiple cloud platforms. If Wiz was to meet this demand, it had to mirror their reality – multi-cloud, hybrid and distributed infrastructures. The company turned to Google Cloud not only as a core infrastructure partner but as a gateway to scale its growth.

“We support our customers wherever they are,” says Yinon Costica, VP of Product and Co-Founder of Wiz. “One of our largest customers operated a multi-cloud infrastructure and we knew that we had to adopt the same approach. With Google Cloud, we built the foundation for a security solution that could cater to the variety of cloud environments. We also benefit from our Google Cloud Marketplace partnership to reach new Google Cloud customers.”

The decision was motivated not just by customer need but by the flexibility of Google Cloud’s developer tools. Wiz quickly established its security platform within Google Cloud, taking advantage of Kubernetes - the open-source container technology originally developed at Google – to ensure portability across environments.

“The way that Google Cloud implements Infrastructure-as-a-Code principles meant that we worked very quickly,” says Scott Sumner, Cloud Services Provider Alliance Manager at Wiz. “We were up and running within a month.”

Google Cloud also offered unique tools to simplify and strengthen security. “The Identity and Access Management Recommender tool is a unique bonus of Google Cloud,” Scott adds. “We can share an incredibly rich level of detail with our customers and surface information that can very quickly identify vulnerabilities.”

Demonstrating security at speed

For Wiz, security must not come at the cost of agility. Unlike traditional security agents that burden infrastructure, Wiz connects natively to customers’ cloud environments using API-only architecture. 

“By using API-only connectors, rather than deploying agents, we can seamlessly scan our customers’ infrastructure with zero friction to the instances and no management overhead,” Oron explains.

This efficiency has proven particularly valuable for regulated industries like finance and healthcare – Wiz can scale from lightweight connections across open infrastructure to fully embedded deployments in highly sensitive environments, all without slowing operations or limiting compliance.

Automation has been just as pivotal. Google Kubernetes Engine and related managed services enable a small team at Wiz to deliver enterprise-scale solutions. “We go to market very quickly with Google Cloud,” Oron says. “We can put our energy into developing new tools that respond to our customers’ specific needs.

“The automations we get with Google Cloud are very important for us. Say a customer acquired a new company and expanded their Google Cloud environment as a result. We would automatically have scanned their cloud and be able to uncover risks within minutes, instead of days or weeks.”

Responding to global threats

Wiz’s ability to react quickly has been tested repeatedly. In December 2021, a severe vulnerability in the Log4j Java logging library shook the security community, leaving enterprises scrambling for solutions. Wiz immediately integrated detection into its platform, helping both customers and new prospects triage their risks.

“We were able to identify and visualise the Log4j vulnerability very quickly for new customers,” Scott explains.

This sheer speed has fuelled Wiz’s reputation. Within only a few years of launching, the brand has become one of the fastest-growing cybersecurity startups globally, already working with a significant roster of Fortune 500 companies.

Wiz’s trajectory is rooted not just in technology but in partnerships. Its close integration with Google Cloud services ensures the platform evolves alongside new cloud innovations.

“We’ve got a great relationship with several product teams at Google Cloud,” Oron says. “It means we can onboard new tools into our platform and make them visible to our customers. They can also learn from us about how we use their tools. We’d like to keep working side by side with Google Cloud, enhancing both sides of the partnership.”