Salesforce Switch Highlights Wiz Momentum
Wiz
This switch shows that cloud security buying is moving away from incumbent bundle logic and toward the product that gets deployed fastest and gives the clearest view of risk across AWS, Azure, and GCP. Wiz wins when a large enterprise wants to connect read only APIs, scan everything without rolling out agents first, and hand security teams one ranked list of the issues most likely to matter.
-
Palo Alto Networks came into cloud security with Prisma Cloud as part of a much broader security suite, and it has used platform scale and aggressive pricing to defend those accounts. But Wiz built around one simpler workflow, connect cloud accounts, inventory assets, map attack paths, and prioritize fixes, which has helped it displace incumbents in top down enterprise deals.
-
The account economics explain why these wins matter. Wiz was at about $396M ARR and roughly 800 customers in April 2024, or about $495K ACV, versus Palo Alto Networks at about $8B ARR and 85,000 customers, or about $94K ACV. Each enterprise replacement win can therefore be very large for Wiz, even if Palo Alto remains much bigger overall.
-
This is also a product architecture story. Wiz documentation describes connecting through read only cloud access for agentless scanning, while Palo Alto documentation shows Prisma Cloud supports both agentless and agent based protection. In practice, that means Wiz can land on ease of rollout and interface clarity, while Palo Alto sells breadth and tighter bundle fit with the rest of its stack.
Going forward, more cloud security spend will be decided inside large platform replacement cycles, not just greenfield tool adoption. If Wiz keeps turning a single posture management entry point into a broader CNAPP and runtime suite, it can keep pulling high value accounts out of incumbent bundles. Palo Alto Networks will respond by pushing harder on bundle pricing and platform integration.