What happened
Google announced on 11 March 2026 that it had completed its acquisition of the cloud security company Wiz, first announced in March 2025. Google's own announcement states that Wiz will keep operating under its existing brand inside Google Cloud and commits that Wiz's products will continue to work across Amazon Web Services, Microsoft Azure and Oracle Cloud, not only Google's own platform. A separate press release quotes Google Cloud's chief executive describing plans for a unified platform spanning cloud security, threat detection and AI-related risk, built in part on Wiz's existing multicloud footprint and Google's earlier Mandiant acquisition.
Reporting from SecurityWeek, which Google's own materials do not themselves state, puts the deal's value at $32 billion in cash and describes it as the largest all-cash acquisition in Google's history and the largest acquisition of a standalone cybersecurity company on record. The same reporting places the deal's path to closing across roughly a year, with antitrust clearance in the United States in November 2025 followed by unconditional European Commission approval in February 2026, ahead of the March 2026 close.
Confidence and limits
The closing date and Google's stated commitments to Wiz's continued independent brand and multicloud operation are confirmed directly from Google's own announcements. The $32 billion valuation and the specific regulatory clearance dates rest on SecurityWeek's reporting rather than on a source disclosing deal financials directly, and are treated here as reported figures corroborating, rather than replacing, Google's own account of the transaction.
Why it mattered
The deal is one of several large security platform consolidations completed in recent years, alongside acquisitions that folded smaller, specialised vendors into a handful of larger cloud and security platforms. For a buyer, that pattern raises a concentration question distinct from any single vendor's product quality: when a cloud security posture tool, an identity provider, an endpoint agent and a detection platform increasingly trace back to a small number of parent companies, a single vendor's outage, breach or strategic pivot can touch more of a customer's stack at once than it could when those tools were independently owned.
Defensive takeaway
Map how many of your critical security controls now depend on vendors that share a parent company, and treat that concentration as a specific risk factor in your continuity planning, separate from your ordinary evaluation of each product on its own merits.
- How many of your organisation's security tools, across posture management, identity, endpoint and detection, now trace back to the same handful of parent companies?
- Have you confirmed directly with your vendor, rather than assumed, that a newly acquired tool's multicloud or multi-platform support will continue unchanged?
- Does your incident and continuity planning account for a single vendor group's outage or compromise affecting more than one layer of your security stack at once?
Google's commitments on continued multicloud support address customers' immediate concern about lock-in, but they do not remove the broader structural question consolidation raises: fewer, larger security vendors mean fewer, larger points of shared failure.