Generalist VCs in Cyber

Sequoia backed Wiz early, in 2020 — a generalist megafund underwriting a cloud-infrastructure opportunity sold to security buyers rather than a dedicated cybersecurity bet. Five and a half years later that position anchored Google's ~$32B acquisition of Wiz, completed March 11, 2026, the largest cybersecurity acquisition to date. The Wiz arc illustrates how generalist capital wins in security: not by out-knowing the specialists at the seed, but by out-scaling everyone once a category-defining company is visible, and by underwriting outcomes too large for any dedicated cyber fund to lead alone.

How generalists approach security

A generalist fund — a16z, Sequoia, Lightspeed, Index, Greylock, Accel, Bessemer, Insight — allocates across SaaS, fintech, infra, AI, and security from a single large pool. Security is one sub-thesis competing for capital against every other. That structural fact produces a recognizably different playbook:

• They concentrate at the growth stage, where capital scale is the edge. A $20B fund can lead a $150M Series D and still own a meaningful stake — a check no $1B specialist can write without breaking concentration limits. Generalists therefore capture the largest, latest, lowest-variance rounds, while specialists own the riskier early upside.
• They cross-pollinate theses. The same partner who funded a data-infrastructure company sees cloud security as adjacent and can underwrite a Wiz or a Cyera as an "infra company with a security wrapper." This is an advantage precisely where security overlaps platform shifts (cloud, data, AI) — and a disadvantage in narrow, domain-deep niches (OT, email security, GRC) where a specialist's CISO network matters more than capital.
• They platformize their value-add. a16z's go-to-market network, Sequoia's "Arc," Bessemer's cloud benchmarks — generalists offer operating infrastructure rather than a single partner's security Rolodex. For a growth-stage company building enterprise sales, that scaffolding can outweigh domain intimacy.

The economics are identical to specialists (2-and-20, carry over a hurdle), but the risk shape differs: generalists trade lower hit-rate-per-deal for the ability to deploy enormous checks into proven winners — the security deals where the category is no longer in doubt and only execution and scale remain.

The named firms

The largest cyber winners tend to be syndicates of generalists stacked on top of an early specialist or foundry lead. Wiz's cap table — YL/Cyberstarts-adjacent early money, then Sequoia, Index, Insight, a16z, Lightspeed at scale — is the template.

Current signal (Jun 23 2026): the generalist scale game is being reset upward by the AI supercycle. Menlo Ventures closed $3B across two new vehicles — Menlo Ventures XVII (seed–Series A) and Menlo Inflection IV (growth) — its largest haul in 50 years, on the back of an Anthropic position worth ~$14B as the lab's valuation crossed >$900B (Menlo Ventures, Bloomberg, TechCrunch, all Jun 23 2026). The cyber echo is in the aggregate: Crunchbase counted ~$4.9B into cybersecurity & privacy startups in Q1 2026 alone, 13 rounds ≥$100M, majority AI-tagged (Crunchbase News). It cuts two ways: for a genuine category creator the growth round has rarely been easier to fill; for others, abundant capital raises the risk of a peak-multiple growth check into a category a platform is about to bundle.

Relevance to M&A

Generalist behavior is a leading indicator of both supply and price. Three signals matter:

• A large growth round from a generalist syndicate resets the clock. A company that raised $100M+ at a premium 2–4 years ago, now decelerating, faces a fund that needs DPI and a valuation it must grow into. That tension is among the more reliable predictors of a sale process, since the investor will eventually need liquidity.
• Crossover and growth investors price the private market. When Insight, Coatue, or Iconiq mark a round, that valuation becomes the anchor (and sometimes the ceiling in a reset) for the next deal in the sub-segment. See 12b.

The bear case

The generalist-in-cyber model could underperform for three reasons. (1) Domain blindness in narrow niches. Generalists win where security overlaps platform shifts (cloud, data, AI) but systematically misprice domain-deep categories — OT, email security, GRC, identity governance — where a specialist's CISO network beats capital. A generalist-heavy strategy is therefore concentrated in the most contested, most bundling-exposed parts of the market. (2) The reset punishes the latest money. Generalists wrote the largest checks at 2021–2022 peak multiples; in the 2026 multiple reset, the growth-stage rounds are exactly where markdowns concentrate, compressing returns on the deals generalists led. (3) AI dilutes the security thesis. As frontier AI labs and infra-AI generalists treat "security for AI" as a wrapper on their core bet, capital may flow to AI-infrastructure framings that strand purpose-built security companies — the same risk the AI-security and bear-case pages test. The generalist thesis holds only while security keeps producing outcomes large enough to justify megafund-scale checks; if exits compress, the capital that made Wiz possible rotates elsewhere first.

See also: Cyber-Specialist VCs · Company Formation & the Israeli Foundry · M&A Deals & Comps · Capital Markets & Macro · Buy-Side Prospect Framework

Sources: Google completes $32B acquisition of Wiz (TechCrunch, Mar 11 2026); cap-table histories of Wiz, Snyk, SentinelOne (public disclosures).

Updated 2026-08-16 18:13 UTC · © El Dorado Capital · el-doradocapital.com · Market intelligence for informational purposes only; not investment advice.