Google buys Wiz for AI security

Google closed its $32 billion purchase of Wiz on March 11, 2026, turning a fast-growing cloud security startup into a Google Cloud business. (blog.google) Google first announced the all-cash deal on March 18, 2025, and said Wiz would keep working across Amazon Web Services, Microsoft Azure, Oracle Cloud, and Google Cloud after the acquisition closed. (blog.google) Wiz’s core product maps code, cloud settings, and running workloads into a single “security graph,” which is a connected view of how one weakness can lead to another. Google says that graph gives customers the context to automate risk reduction and threat response across cloud environments. (cloud.google.com) Google is plugging that graph into a broader security push built around AI agents, software that can triage alerts, investigate incidents, and carry out response steps with human oversight. At Google Cloud Next on April 22, 2026, Chief Executive Thomas Kurian said Google’s new “Agentic Defense” combines Google threat intelligence and security operations with Wiz’s cloud and AI security platform. (cloud.google.com) Google has been building toward that combination for months. At RSA Conference in March 2026, Google Security said its “agentic security operations center” would use Gemini models and new security agents to help defenders focus on the most important threats. (cloud.google.com) The timing tracks a wider shift in corporate computing. Google said businesses and governments are moving more critical systems into multicloud setups while adopting AI tools, and attackers are using AI to move faster and with more sophistication. (blog.google) Google is also framing Wiz as part of its answer to “shadow AI” and “shadow agents,” meaning unapproved consumer AI tools or workplace agents that employees deploy outside company controls. Google Cloud has argued that blocking those tools outright does not work and that companies need governance and security controls around them instead. (cloud.google.com) Wiz gives Google a larger foothold in cloud security at a time when Google Cloud is trying to sell customers a full stack: infrastructure, AI models, security operations, and now a multicloud security layer. Google said the combined platform is meant to provide one set of tools and policies from code to cloud to runtime. (blog.google) The pitch is straightforward: if companies are going to run AI agents across several clouds, Google wants to be the company watching the whole map — and increasingly, the company helping respond when something goes wrong. (cloud.google.com)