Companies Using Wiz

I run the crawler that reads DNS for every domain in our index, and Wiz is one of the cleanest DNS signals in this category. A domain counts when its TXT records contain wiz-domain-verification. When I re-read the 2,762 domains in our clean set on 15 October 2026, 2,756 still had it. The headline from our October 2026 crawl is 2,717 domains, 2,450 of them matched to a company, 6th of 17 in Security Testing & Compliance. The harder question is what the record means, and the answer changes how you should use the list.

What the record proves

Wiz doesn't ask for this record to scan a website. According to a setup guide from mnemonic, a managed security provider, the code appears under SSO & Login Security, next to a list called Allowed Domains for Wiz Users. A Wiz account names the email domains its people sign in from, and the owner of each domain proves control by publishing the code. So a hit means people with that email domain were set up to log in to a Wiz account at least once. Like most verification records, it outlives the contract: nothing breaks if it stays.

Sales signal: treat the list as organisations that bought or trialled Wiz, a ceiling on current customers. The useful fact is that a security team chose a cloud-security platform and set up single sign-on for it.

Accounts, not domains

The code is the interesting part. Those 2,756 domains carry 1,788 different codes, and 1,560 domains share a code with at least one other domain. One code covers about 30 advertising-agency domains, among them Acxiom, Weber Shandwick, R/GA and omc.com. WPP's covers about 30 too, from AKQA to Ogilvy. Koç Group's covers 28, Hearst's 22, LVMH's 20 and HelloFresh's 19. Santander, Lloyds Banking Group, Kering and Aramark each verified a portfolio the same way.

The code also shows when a record belongs to somebody else's account. Expel, a managed detection firm, carries 5 codes on expel.io, and O3 Cyber carries 8, which fits analysts signing in to client accounts. Kyndryl's only code is the one on about 30 WPP domains. wiz.io itself carries 11. Cases like these are a small minority: seven security-service firms carry three or more codes each.

"Count Wiz customers by code, not by domain. One code can be about 30 agency brands, and one consultancy's domain can hold several client accounts." - David Thomson, CTO at TechnologyChecker.io

Sales signal: group the list by code before you size a territory. 2,717 domains is closer to 1,800 accounts, and a code shared by 20 brands means one central security team to call, not 20.

A flat line, read correctly

The usage chart climbs from 2,072 domains in June to 2,717 in October. Most of that is our side: the domains we crawl turn over every month, with dead sites dropping out and newly found ones added, and our DNS detection widened over the same period. Departures are rare. 32 domains dropped the record since we began recording changes on 17 March 2026; 3 still carry it on another hostname, and when I re-checked the hostnames, 28 of 33 really had removed it.

Sales signal: a removed Wiz record is a rare, specific event, and worth a look when it happens. A record that is present tells you less about this quarter than it seems to.

Who verifies with Wiz

Of the five DNS-verified security tools I covered this month, Wiz has the largest share of big companies. 31.46% of matched companies with a known size have more than 1,000 staff, 765 of 2,432, against 14.6% on SpyCloud's page and 5.9% on Detectify's. 220 have more than 10,000. Age points the same way: 33.63% were founded in the 2010s, 12.61% before 1960 and only 9.89% in the 2020s. The named rows read like an index: HSBC, Pfizer, Nike, Morgan Stanley, Capital One, Starbucks, UPS and BMW Group.

Sales signal: the buyer is a central cloud or security team in a large company, often one that owns several brands. Start from the group parent and the code it shares.

Industry and geography

Software Development leads at 16.16%, but Financial Services (10.56%), Insurance (4.1%) and Banking (1.78%) add up to 16.44%. Advertising Services is 3.48%, which comes from the two agency codes. By country, the United States has 1,246 of the 2,450 matched companies, the United Kingdom 224 and Germany 109. Israel, where most Wiz engineers sit, has 39. Turkey's 26 are all Koç Group domains under a single code.

Sales signal: regulated, multi-brand businesses in the US and UK are the core. For anything sold per country, check whether a country's count is one group before you staff it.

Overlap, not switching

We publish no migration table for Wiz. The only overlap our checks surfaced is with SafeBase, the trust-center product: 49 domains run both today, out of 53 ever seen with both. That's a shared buyer, a security team that documents its controls publicly, rather than one tool replacing the other.

"Nobody swaps a cloud-security platform for a trust page. The overlap with SafeBase tells you the same team buys both." - David Thomson, CTO at TechnologyChecker.io

Sales signal: trust-center and compliance vendors such as SafeBase and Vanta will find a warm list here. Wiz's own competitors will have to find these accounts some other way, because our category table doesn't track them.

The stack around it

On the 2,762 clean domains, Cloudflare runs on 61.69%, Google Analytics on 74.19% and OneTrust on 30.59%. 1Password's verification record is on 10.5%, more than twice its share on the Have I Been Pwned page (4.58%). Adobe Experience Manager (7.39%) and Pendo (5.76%) are enterprise marketing and product tools.

Sales signal: a Wiz domain usually belongs to a company that already pays for several security vendors. Sell into the existing programme, not around it.

Price and ownership

Wiz asks for a quote, but its AWS Marketplace listing shows $24,000 a year for Wiz Essential and $38,000 for Wiz Advanced, each for 100 cloud workloads. Since 11 March 2026 Wiz has been part of Google Cloud, and Google says it keeps the brand and keeps supporting other clouds.

Sales signal: Google says Wiz stays multi-cloud and keeps selling through partners, so the partners who run Wiz for clients are a route into these accounts.

Key takeaways

1. 2,717 domains in October 2026, 6th of 17, verified for Wiz sign-in, not website scanning.

2. About 1,800 codes behind the domains; groups such as WPP, LVMH and Koç verify dozens of domains at once.

3. 31.46% of matched companies have more than 1,000 staff.

4. Only 32 domains removed the record since March, so the list is stable but slow to show churn.

5. Overlap with SafeBase (49 domains) shows the same security teams buying trust pages.

How to use this list

Collapse the rows by code, start with the group parent and treat every row as a past verification. I explain why we read TXT records as history in our DNS statistics report. The full list of 2,717 domains, with 2,450 matched companies and their size, country and industry, is on TechnologyChecker.io.