Growth

Investing in Wiz

Sarah Wang Posted May 7, 2024

As more workloads and data move to the cloud and generative AI takes over the enterprise, cybersecurity is more critical today than ever. And that’s because with every new paradigm shift—from the internet to cloud computing—the sheer magnitude of digital threats has exploded and threat vectors have become increasingly sophisticated. Some of the greatest software platforms in history have risen to the occasion in their respective markets to protect the enterprise against these evolving threats. Yet, while the public clouds launched nearly two decades ago, cloud security is still in its early innings. As cloud adoption continues its incredible march from a $350B+ market today toward $1T in the next five years, and $3T over the next decade,1 the opportunity to build the next iconic cybersecurity platform has arrived: Wiz, one of the global leaders in Cloud Native Application Protection Platform (CNAPP). 

A timeline from the 1990s to 2020, showing the evolution of security platforms. The companies and respective market shifts show include Splunk in 2003, for security information and event management; Palo Alto Networks in 2005 for firewalls, the AWS launch of public cloud in 2006, Zscaler's SASE products in 2007, Okta's access management tools in 2009, Crowdstrike's endpoint protection in 2011, and Wiz's cloud workload protection in 2019.

Even among an impressive set of cyber predecessors, Wiz stands out. In four short years, the company has grown to over $350M ARR, making it one of the fastest growing software companies of all time. While their growth at this scale is breathtaking, it’s not surprising. Through its unified cloud security platform that offers cloud workload protection, cloud security posture management (CSPM), cloud infrastructure entitlement management (CIEM), vulnerability management, and more, Wiz has revolutionized the way its customers secure everything they build and run in the cloud. Wiz does this by taking a modern approach to cloud security, giving companies full stack visibility into their environments on the cloud and workload layers and enabling them to identify and prioritize risks without any clunky agents. 

Since Wiz’s founding in 2020, their approach has enabled them to deploy rapidly and deliver value to their customers nearly immediately. Across the three dozen customers we spoke with, the message was consistent: Wiz’s time to value is unbeatable, with one CISO raving, “immediately upon turning it on, it provided us with rich security data that we could take action on. That’s why people love it. Within the first week, Wiz was already fixing things.” The time to value is magnified by Wiz’s best-in-class product and deep spirit of partnership with security and development teams (with their recent acquisition of Gem Security, SOC teams are also part of the equation). No one describes Wiz better than its own customers: “They’re the Porsche of security.”

To top it off, Wiz has an incredible founding team. When you meet Assaf Rappaport, Ami Luttwak, Yinon Costica, and Roy Reznik, it’s no surprise that companies reference deep partnership with the Wiz team as one of the “no-brainer” reasons to work with them. They are true partners to their customers and constantly on the road meeting with them. To put that in perspective, as we were closing this round, in just one of the weeks I spoke to Assaf while he was in three cities across two countries supporting customers. We joke about founders being “grown in a lab” to start certain companies, and the Wiz team embodies that perfectly: Assaf and his cofounders have spent two decades together, first co-founding Adallom, a CASB that they sold to Microsoft, and then building the Azure security stack as leaders at Microsoft. Over the past three years of getting to know them, we have been continually floored by the relentless drive to deliver, razor sharp product instincts and velocity, and camaraderie as a team. 

Our history with Assaf and his team gives us the utmost conviction that the future of Wiz is even brighter than its already storied beginning. When we first spoke with Wiz, they were maniacally executing on their core product offering. Now their customers rave about the developer experience on Wiz, which enables them to benefit from the shift left in security: “their developer focused perspective is why we were able to get such buy-in from our developers.” Today, more than 50% of Wiz users sit outside the security function, underscoring how development teams have embraced the platform. Wiz is also poised to benefit from another paradigm shift that may be even more massive than the move to the cloud: AI. Through partnerships like the one with Hugging Face, Wiz continues to push the frontier in identifying and mitigating the risks that come with any new piece of technology, especially one adopted at a breakneck speed like AI. 

Wiz’s rapid delivery of new capabilities into previously adjacent spaces has not been lost on its customers. In fact, many have come to rely on this velocity for their own security needs. When CISOs or heads of cloud security need something adjacent to Wiz’s current product offering, the first questions asked are becoming: does Wiz have it? Is it on their roadmap? The hallmark of the most iconic security companies is their ability to build a true platform. There is no better sign of this than customers putting together their shopping lists based on your company’s roadmap and there’s no area more important to build a security platform in than the intersection of cloud and AI. We’re thrilled to partner with Wiz in co-leading their newest round of financing and to support the company as they help businesses around the world secure increasingly complex cloud environments. 

I’d like to thank my colleague Zane Lackey who made instrumental contributions to this deal.

  1. Gartner as of November 2023.
Want More a16z Growth?

Deep dives into what makes companies truly great— from the investors and operators at a16z Growth.

Learn More
Recommended For You
Growth

Investing in Quora and Poe

David George
Growth

Investing in Character.AI

Sarah Wang

Want More Growth?

Deep dives into what makes companies truly great— from the investors and operators at a16z Growth.

Sign Up On Substack

Views expressed in “posts” (including podcasts, videos, and social media) are those of the individual a16z personnel quoted therein and are not the views of a16z Capital Management, L.L.C. (“a16z”) or its respective affiliates. a16z Capital Management is an investment adviser registered with the Securities and Exchange Commission. Registration as an investment adviser does not imply any special skill or training. The posts are not directed to any investors or potential investors, and do not constitute an offer to sell — or a solicitation of an offer to buy — any securities, and may not be used or relied upon in evaluating the merits of any investment.

The contents in here — and available on any associated distribution platforms and any public a16z online social media accounts, platforms, and sites (collectively, “content distribution outlets”) — should not be construed as or relied upon in any manner as investment, legal, tax, or other advice. You should consult your own advisers as to legal, business, tax, and other related matters concerning any investment. Any projections, estimates, forecasts, targets, prospects and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Any charts provided here or on a16z content distribution outlets are for informational purposes only, and should not be relied upon when making any investment decision. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. In addition, posts may include third-party advertisements; a16z has not reviewed such advertisements and does not endorse any advertising content contained therein. All content speaks only as of the date indicated.

Under no circumstances should any posts or other information provided on this website — or on associated content distribution outlets — be construed as an offer soliciting the purchase or sale of any security or interest in any pooled investment vehicle sponsored, discussed, or mentioned by a16z personnel. Nor should it be construed as an offer to provide investment advisory services; an offer to invest in an a16z-managed pooled investment vehicle will be made separately and only by means of the confidential offering documents of the specific pooled investment vehicles — which should be read in their entirety, and only to those who, among other requirements, meet certain qualifications under federal securities laws. Such investors, defined as accredited investors and qualified purchasers, are generally deemed capable of evaluating the merits and risks of prospective investments and financial matters.

There can be no assurances that a16z’s investment objectives will be achieved or investment strategies will be successful. Any investment in a vehicle managed by a16z involves a high degree of risk including the risk that the entire amount invested is lost. Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by a16z is available here: https://a16z.com/investments/. Past results of a16z’s investments, pooled investment vehicles, or investment strategies are not necessarily indicative of future results. Excluded from this list are investments (and certain publicly traded cryptocurrencies/ digital assets) for which the issuer has not provided permission for a16z to disclose publicly. As for its investments in any cryptocurrency or token project, a16z is acting in its own financial interest, not necessarily in the interests of other token holders. a16z has no special role in any of these projects or power over their management. a16z does not undertake to continue to have any involvement in these projects other than as an investor and token holder, and other token holders should not expect that it will or rely on it to have any particular involvement.

With respect to funds managed by a16z that are registered in Japan, a16z will provide to any member of the Japanese public a copy of such documents as are required to be made publicly available pursuant to Article 63 of the Financial Instruments and Exchange Act of Japan. Please contact compliance@a16z.com to request such documents.

For other site terms of use, please go here. Additional important information about a16z, including our Form ADV Part 2A Brochure, is available at the SEC’s website: http://www.adviserinfo.sec.gov.