Google reportedly in talks to buy infosec outfit Wiz for $23 billion
(2024/07/15)
- Reference: 1721018375
- News link: https://www.theregister.co.uk/2024/07/15/google_wiz_acquisition/
- Source link:
Ask any techie to name who leads the market for OSes, databases, networks or ERP and the answers are clear: Microsoft, Oracle, Cisco, and SAP.
Security? That's a tougher question. But Google appears to be attempting a play for the crown, as it is reportedly poised to acquire infosec upstart Wiz.
Wiz was founded in just 2020 by folks who cut their teeth at Microsoft and then, deliciously, made a name [1]finding several very nasty flaws in Azure – such as the [2]ChaosDB flaw that allowed unauthorized read and write access to Azure Cosmos DB, and the [3]"OMIGOD" flaws that permitted unauthorized code execution inside Microsoft's cloudy rental servers. The startup also created fine cloud security products and services.
[4]
According to the [5]New York Times and [6]Wall Street Journal , Google is deep in talks to buy Wiz for $23 billion – the largest-ever sum its parent company Alphabet has paid for prey.
[7]
[8]
If the deal comes off (both reports suggest it's not a sure thing yet) Google would emerge as owner of both [9]Mandiant and Wiz – and that would give its cloudy division a claim to be at least near a position of security strength that its rivals couldn't obviously match.
Only a pair of pure-play security vendors – Palo Alto and Fortinet – boast annual revenue beyond $5 billion. Cisco was a billion short for its pre-Splunk security portfolio, but doesn't divulge the contribution security makes to its $29 billion "Secure, Agile Networks" business. IBM also doesn't reveal the true extent of its security business – nor do hyperscalers.
[10]
With Mandiant and Wiz aboard, Google could point to a strong portfolio of products and services drawn from the security market itself – rather than built as part of a portfolio of cloud services – and therefore a different approach to both cloud and security.
Claiming to be the world's top security vendor would be hard, because Google's portfolio would not match rivals' for breadth. But Microsoft can't claim to be the world's pre-eminent cloud for security, given its services have been [11]sternly criticized by lawmakers after multiple failures. And while AWS is strong in security, its colossal portfolio means it stands more for generic cloudiness than security.
[12]Google: We're still working to defeat Microsoft's 'anticompetitive' cloud policy
[13]Apple, Google, ease cross-cloud data transfers, perhaps with costly catch
[14]So much for green Google ... Emissions up 48% since 2019
[15]Google festoons Chrome Enterprise browser with more controls
Whether buying Wiz would Google Cloud into revenue or technical leadership is another matter: the unit's closeness to Kubernetes didn't make it the natural first choice for containerized apps, or propel it to undisputed leadership of the cloud-native IaaS market.
Or maybe security leadership isn't something Google wants right now – given the antitrust attention its integration of search and ads has rightly earned.
But whether or not Google takes a Wiz, the throne of security leader remains vacant. And eventually someone will try to take it – perhaps more forcefully than current players. ®
Get our [16]Tech Resources
[1] https://www.theregister.com/2021/12/24/azure_app_service_not_legit_source_code_leak/
[2] https://www.theregister.com/2021/08/27/chaos_db_azure_cosmos_flaw/
[3] https://www.theregister.com/2021/09/15/microsoft_patch_tuesday/
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZpTzOYaeZABCR-KFSvo-vQAAAA4&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://www.nytimes.com/2024/07/14/technology/google-readies-23-billion-deal-for-wiz-a-start-up-despite-antitrust-scrutiny.html
[6] https://www.wsj.com/business/deals/google-near-23-billion-deal-for-cybersecurity-startup-wiz-622edf1a
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZpTzOYaeZABCR-KFSvo-vQAAAA4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZpTzOYaeZABCR-KFSvo-vQAAAA4&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[9] https://www.theregister.com/2022/09/12/google_closes_mandiant_acquisition/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZpTzOYaeZABCR-KFSvo-vQAAAA4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://www.theregister.com/2024/06/14/brad_smith_microsoft_hearing/
[12] https://www.theregister.com/2024/07/11/google_on_microsoft_cispe_deal/
[13] https://www.theregister.com/2024/07/11/apple_gogle_photo_cloud_interoperability/
[14] https://www.theregister.com/2024/07/02/google_datacenter_emissions/
[15] https://www.theregister.com/2024/06/26/google_chrome_enterprise/
[16] https://whitepapers.theregister.com/
Security? That's a tougher question. But Google appears to be attempting a play for the crown, as it is reportedly poised to acquire infosec upstart Wiz.
Wiz was founded in just 2020 by folks who cut their teeth at Microsoft and then, deliciously, made a name [1]finding several very nasty flaws in Azure – such as the [2]ChaosDB flaw that allowed unauthorized read and write access to Azure Cosmos DB, and the [3]"OMIGOD" flaws that permitted unauthorized code execution inside Microsoft's cloudy rental servers. The startup also created fine cloud security products and services.
[4]
According to the [5]New York Times and [6]Wall Street Journal , Google is deep in talks to buy Wiz for $23 billion – the largest-ever sum its parent company Alphabet has paid for prey.
[7]
[8]
If the deal comes off (both reports suggest it's not a sure thing yet) Google would emerge as owner of both [9]Mandiant and Wiz – and that would give its cloudy division a claim to be at least near a position of security strength that its rivals couldn't obviously match.
Only a pair of pure-play security vendors – Palo Alto and Fortinet – boast annual revenue beyond $5 billion. Cisco was a billion short for its pre-Splunk security portfolio, but doesn't divulge the contribution security makes to its $29 billion "Secure, Agile Networks" business. IBM also doesn't reveal the true extent of its security business – nor do hyperscalers.
[10]
With Mandiant and Wiz aboard, Google could point to a strong portfolio of products and services drawn from the security market itself – rather than built as part of a portfolio of cloud services – and therefore a different approach to both cloud and security.
Claiming to be the world's top security vendor would be hard, because Google's portfolio would not match rivals' for breadth. But Microsoft can't claim to be the world's pre-eminent cloud for security, given its services have been [11]sternly criticized by lawmakers after multiple failures. And while AWS is strong in security, its colossal portfolio means it stands more for generic cloudiness than security.
[12]Google: We're still working to defeat Microsoft's 'anticompetitive' cloud policy
[13]Apple, Google, ease cross-cloud data transfers, perhaps with costly catch
[14]So much for green Google ... Emissions up 48% since 2019
[15]Google festoons Chrome Enterprise browser with more controls
Whether buying Wiz would Google Cloud into revenue or technical leadership is another matter: the unit's closeness to Kubernetes didn't make it the natural first choice for containerized apps, or propel it to undisputed leadership of the cloud-native IaaS market.
Or maybe security leadership isn't something Google wants right now – given the antitrust attention its integration of search and ads has rightly earned.
But whether or not Google takes a Wiz, the throne of security leader remains vacant. And eventually someone will try to take it – perhaps more forcefully than current players. ®
Get our [16]Tech Resources
[1] https://www.theregister.com/2021/12/24/azure_app_service_not_legit_source_code_leak/
[2] https://www.theregister.com/2021/08/27/chaos_db_azure_cosmos_flaw/
[3] https://www.theregister.com/2021/09/15/microsoft_patch_tuesday/
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZpTzOYaeZABCR-KFSvo-vQAAAA4&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://www.nytimes.com/2024/07/14/technology/google-readies-23-billion-deal-for-wiz-a-start-up-despite-antitrust-scrutiny.html
[6] https://www.wsj.com/business/deals/google-near-23-billion-deal-for-cybersecurity-startup-wiz-622edf1a
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZpTzOYaeZABCR-KFSvo-vQAAAA4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZpTzOYaeZABCR-KFSvo-vQAAAA4&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[9] https://www.theregister.com/2022/09/12/google_closes_mandiant_acquisition/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZpTzOYaeZABCR-KFSvo-vQAAAA4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://www.theregister.com/2024/06/14/brad_smith_microsoft_hearing/
[12] https://www.theregister.com/2024/07/11/google_on_microsoft_cispe_deal/
[13] https://www.theregister.com/2024/07/11/apple_gogle_photo_cloud_interoperability/
[14] https://www.theregister.com/2024/07/02/google_datacenter_emissions/
[15] https://www.theregister.com/2024/06/26/google_chrome_enterprise/
[16] https://whitepapers.theregister.com/
Re: Like I always say
Peter-Waterman1
Expert.
Re: Like I always say
CowHorseFrog
Someone at G owns enough shares of Wiz, and now they want a payday.
Re: Like I always say
Like a badger
Quite remarkable that Google think that splurging billions is going to make them a name in security. If there's one corporation I don't trust with data, it's Google.
:D
Anonymous Coward
"Takes a Wiz"
"Throne"
"vacant"
Re: :D
TheMaskedMan
Excellent! Came here to see if anyone had done "takes a Wiz" yet - the unfortunate name is just begging for double intenders, as Nanny Ogg might say - but I didn't notice Throne and Vacant. My only excuse is that I haven't had my coffee yet.
CowHorseFrog
So G like their other big mates only pay a few thousand for finding vuls, so why would they pay billions for Wiz ?
Why would they pay billions per vuln when they normally only pay thousands ?
Someone at G must own part of Wiz and they now want a payday.
by revenue, criticality, virtue, resilience or what?
NohSpam
It's trite to say Microsoft leads OSs in world where Linux rules from supercomputers to IoT endpoints and IBM’s Z/OS just keeps the world working, more reliably, faster and cheaper than all that distributed nonsense Microsoft peddles!
Oxymoron?
Anonymous Coward
The terms Google and security just don't sound right together. I can see Google using expertise from Wiz in two ways:
1) To make their cloud service as hard to break into as possible - potentially being able to claim it's the most secure against external attack; and
2) To find new ways to scan user data without anyone else knowing.
Like I always say
Large acquisitions are just burning cash. Maybe 5% of acquisitions over $10 billion have worked out well for shareholders, and at least half have cost them a lot.
This is even worse, because this is a company that was founded in 2020. There's no way any 4 year old business - I don't care WHAT it does - is worth remotely close to what Google is putting up. If I was a shareholder of theirs I would pitch a fit. But I'm not so I'll just laugh and be happy that Apple has avoided all that stupidity despite the ridiculous ideas that come up every few years that they should buy Netflix or buy Disney or buy Sun or whatever.