In July 2026, Google Cloud and Wiz announced a joint AI-powered threat defense platform that integrates Google's Gemini foundation models with Wiz's cloud security posture management and runtime protection capabilities.
The Platform Architecture
The joint platform operates across three layers. The foundation layer uses Wiz's cloud security graph as the context for AI analysis. The intelligence layer applies Gemini models to analyze this graph in real-time, identifying anomalous patterns, misconfigurations, and potential attack paths. The action layer automates response workflows.
What distinguishes this platform is its integration of runtime telemetry with configuration data. Rather than analyzing logs after an incident, the platform continuously evaluates the attack surface, identifying vulnerabilities before they can be exploited.
Capabilities
Predictive Threat Modeling: Using Gemini's reasoning capabilities, the platform can simulate potential attack paths through a cloud environment, identifying vulnerabilities that traditional scanners miss.
Natural Language Investigation: Security analysts can interact with the platform using natural language queries, asking questions like "What are the most likely attack vectors against our production Kubernetes cluster?"
Automated Incident Response: For common threat patterns, the platform can execute pre-approved response workflows without human intervention, reducing mean time to containment from hours to minutes.
Market Context
The partnership responds to a critical challenge in cloud security: the volume and complexity of cloud environments have outpaced human analysts' ability to monitor and protect them. Google's investment reflects its broader strategy of positioning Gemini as the intelligence layer for enterprise security.
