Highlights:

  • An application security posture management, or ASPM, platform that checks developers’ code for vulnerabilities and offers repair guidance is how Dazz makes money.
  • Dazz offers to assist developers in resolving a variety of problems, including programs that store encryption keys in an accessible manner and unsafe configuration scripts.

Wiz Inc. acquired Dazz Inc., a cybersecurity startup that assists businesses in detecting coding vulnerabilities.

When the firms announced the deal recently, they did not reveal the financial specifics. However, according to the sources, Dazz is valued at USD 450 million in the deal. Following its most recent round of fundraising in June, the business was valued at over USD 400 million.

Wiz, a well-known technology for protecting public cloud environments, was founded in 2020. A variety of workloads, including Kubernetes clusters and AI models, can be safeguarded by the software. Wiz expects to surpass USD one billion in recurring revenue next year, with its platform now bringing in USD 500 million annually.

According to reports, Dazz’s clientele of over 100 businesses brings in “tens of millions” of dollars a year. Additionally, the business asserts that its top line is increasing by 500% annually.

Dazz generates income through application security posture management or ASPM, a platform that scrutinizes developers’ code for discrepancies and offers precautionary advice.

“ASPM goes prime time with the announcement of Wiz acquiring Dazz,” said Nikhil Gupta, Chief Executive of ASPM provider ArmorCode. “This deal highlights the two dramatically different approaches to ASPM. Wiz leading the scanner-centric camp, and ArmorCode leading the vendor-agnostic team.”

By examining security data from cloud environments, code repositories, and other systems, Dazz can identify vulnerabilities. Read-only application programming interfaces, which provide the ability to access but not alter records, are used to gather that data. The likelihood of cybersecurity incidents is decreased by this structure.

Dazz ranks the vulnerabilities in a company’s network after mapping them out. The platform may advise admins to put the vulnerability at the top of their list of things to do if hackers are aggressively targeting it. Other considerations, such as whether a vulnerability impacts multiple applications or just one, are also taken into consideration by Dazz’s priority system.

The technology generates remediation guidance using large language models. Dazz offers to assist developers in resolving a variety of problems, including programs that store encryption keys in an accessible manner and unsafe configuration scripts. Sometimes the platform creates the required code revisions in addition to offering troubleshooting advice.

Wiz will improve its recently announced Wiz Code service by utilizing the company’s technologies. Similar to Dazz, the product is intended to assist businesses in identifying and resolving code vulnerabilities. The development effort will concentrate on giving Wiz Code AI-powered tools for risk mitigation and prioritization.

Approximately seven months have passed since the company’s last acquisition. Wiz acquired Gem Security Inc., a cloud security software provider for USD 350 million reportedly. Before that, it had acquired Raftt Systems Ltd., which created a toolkit for debugging Kubernetes infrastructures.