Jump to content

Wiz (company)

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Ajshul (talk | contribs) at 16:46, 27 December 2021 (added citations and updated info). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

  • Comment: This draft has a disambiguated title.
    If this draft is accepted, an entry will need to be added to the disambiguation page for the primary name.
    The disambiguation page for the primary name is Wiz (disambiguation). Robert McClenon (talk) 20:18, 26 December 2021 (UTC)

Wiz is a cloud computing security startup headquartered in New York, New York. The company was founded in January 2020 by Assaf Rappaport, Yinon Costica, Roy Reznik, and Ami Lutwak, all of whom previously founded Adallom.[1] Rappaport serves as CEO, Costica as VP of Product, Reznik as VP of Engineering, and Lutwak as CTO. As of October 2021, Wiz has around 160 employees, with most sales and marketing personnel scattered across North America and Europe while most engineering personnel are based in Tel Aviv, Israel.[2][3] The company's platform analyzes computing infrastructure hosted in AWS, Azure, GCP and Kubernetes for combinations of risk factors that could allow malicious actors to gain control of assets and/or exfiltrate valuable data.

Funding

Wiz has raised a total of $600 million from a combination of venture capital funds and private investors:

  • Series A - In December 2020, Wiz emerged from stealth by raising $100 million from Index Ventures, Sequoia Capital, Insight Partners and Cyberstarts.[4]
  • Series B - In April and May 2021, Wiz raised $130 million and $120 million (respectively) on a $1.7 valuation from Index Ventures, Sequoia Capital, Insight Partners, and Cyberstarts.[5]
  • Series C - In October 2021, Wiz raised $250 million on a $6 billion valuation[6][7] from venture capital funds Insight Partners, Greenoaks Capital, Sequoia Capital, Salesforce Ventures, and CyberStarts, and individual investors Bernard Arnault and Howard Schultz.[8]

Research

Wiz researchers have discovered and responsibly disclosed several cloud vulnerabilities that garnered significant media coverage:

  • ChaosDB - A series of flaws in Microsoft Azure's Cosmos DB that made it possible to download, delete, or manipulate databases belonging to thousands of Azure customers.[9][10]
  • OMIGOD - Bugs in Open Management Infrastructure (OMI), a ubiquitous but poorly documented agent embedded in many popular Azure services, that allowed for unauthenticated remote code execution and privilege escalation.[11]
  • NotLegit - Insecure default behavior in the Azure App Service that exposed the source code of some customer applications.[12]

These findings (and others) have been presented at several conferences, including BlackHat[13][14][15] and DEF CON[16][17]

References

  1. ^ Novet, Jordan (2021-03-22). "A tiny security start-up founded by engineers who sold their last company to Microsoft is already worth $1.7 billion". CNBC. Retrieved 2021-12-26.
  2. ^ "Wiz goes (even more) global". Wiz Blog. 2021-09-14. Retrieved 2021-12-26.
  3. ^ Ben-David, Ricky. "Israeli cybersecurity firm Wiz raises $250m, soaring to $6b valuation". www.timesofisrael.com. Retrieved 2021-12-27.
  4. ^ "Israeli cloud security co Wiz raises $100m". Globes. 2020-09-12. Retrieved 2021-12-26.
  5. ^ "Cloud security co Wiz raises $250m at $6b valuation". Globes. 2021-11-10. Retrieved 2021-12-26.
  6. ^ Shulman, Sophie (2021-10-13). "Six reasons for Wiz's $6 billion valuation". CTECH - www.calcalistech.com. Retrieved 2021-12-26.
  7. ^ "Wiz unveils new security tool to protect code in development pipeline". TechCrunch. Retrieved 2021-12-27.
  8. ^ Reuters (2021-10-11). "Wiz raises $250 mln, values Israeli cyber firm at $6 bln". Reuters. Retrieved 2021-12-26. {{cite news}}: |last= has generic name (help)
  9. ^ "ChaosDB Vulnerability Exposes Thousands of Microsoft Azure Databases". PCMAG. Retrieved 2021-12-26.
  10. ^ "ChaosDB vulns saw Wiz researchers utterly pwn Azure Cosmos". www.theregister.com. Retrieved 2021-12-26.
  11. ^ "OMIGOD: Microsoft Azure VMs exploited to drop Mirai, miners". BleepingComputer. Retrieved 2021-12-26.
  12. ^ "Microsoft notifies customers of Azure bug that exposed their source code". The Record by Recorded Future. 2021-12-22. Retrieved 2021-12-26.{{cite web}}: CS1 maint: url-status (link)
  13. ^ https://www.blackhat.com/
  14. ^ "Black Hat". www.blackhat.com. Retrieved 2021-12-26.
  15. ^ "Black Hat". www.blackhat.com. Retrieved 2021-12-26.
  16. ^ https://defcon.org/
  17. ^ "DEF CON 29 Speakers". DEF CON. Retrieved 2021-12-26.{{cite web}}: CS1 maint: url-status (link)