Google buys Wiz: cloud security is now everyone's business
The largest acquisition in Google's history is not an AI lab or a consumer app. It is a company that finds security gaps in cloud accounts. That says a lot about where the risks are.
By the Xuru Technologies team · 20 March 2025
Key takeaways
- On 18 March 2025 Alphabet agreed to acquire Wiz for US$32 billion in cash, subject to regulatory approval.
- Wiz scans cloud environments for misconfigurations, vulnerabilities and exposed data.
- Misconfigured cloud services and stolen credentials remain common causes of breaches.
- Small businesses using cloud tools need the basics: 2-step login, least access, backups and updates.
Most small businesses now run on the cloud without thinking of it that way: email, files, accounting, website hosting, booking systems. Each one is a door that needs a lock.
What happened
According to PBS NewsHour and Bloomberg, the deal is Google's largest ever. Wiz will join Google Cloud while continuing to support other clouds such as AWS and Microsoft Azure. Google had reportedly tried to buy Wiz in 2024 for a lower price.
What it means for businesses
- Security is moving into the platforms. Big cloud providers will bundle more protection, but you still control settings and access.
- Misconfiguration is the quiet risk. A public file link, an old admin account or an exposed database causes many breaches.
- Clients will ask more questions. Larger customers increasingly check their suppliers' security.
- Websites are part of the cloud estate. Hosting, plugins and admin logins need the same care.
Security basics checklist
| Control | Done when… |
|---|---|
| 2-step verification | On email, cloud storage, hosting, domain and website admin |
| Access review | Former staff and old suppliers removed |
| Sharing links | No sensitive files shared "with anyone with the link" |
| Backups | Automatic, off-site and tested |
| Updates | Website core, plugins and themes kept current |
See our website maintenance guide for the website side.
Frequently asked questions
Is the cloud less secure than on-premise servers?
Not inherently. Major cloud providers invest heavily in security. Most problems come from how accounts and settings are configured by users.
Do small businesses really get targeted?
Yes. Automated attacks scan the internet for weak logins and outdated software regardless of company size.
What should I fix first?
Turn on 2-step verification for email and admin accounts, then remove unused accounts and set up backups.
Hosting, logins and updates handled properly.
Our care plans keep your website patched, backed up and monitored, with 2-step admin logins as standard.
Websites, payments, digital marketing, AI automation, consultancy and practical technology training — for businesses and aspiring professionals worldwide.
Saturday – Sunday: closed
Leave a Reply