Upwind Security
Upwind Security provides a runtime-first CNAPP that uses eBPF sensors and AI agents to deliver real-time cloud, application, and AI workload security for large enterprises across regulated and cloud-native industries, distributed primarily through channel partners and hyperscaler marketplaces.
- Company typePrivate
- Founded2022
- HeadquartersSan Francisco, United States
- Headcount251–500
- GTM typeB2B
- OfferingSoftware
What Upwind Security does
Upwind Security, founded in 2022 and headquartered in San Francisco, provides a unified runtime-first Cloud-Native Application Protection Platform (CNAPP) that combines cloud and AI security capabilities for large enterprises operating dynamic, containerized infrastructure. The platform is built on an eBPF-based runtime sensor that monitors in-memory execution, network behavior, and API activity in real time, and applies an "inside-out" model that correlates signals from agentless scanners, runtime sensors, cloud activity logs, and APIs into a live map of inventory, networks, identities, and data flows. Upwind monetizes primarily through quote-based annual enterprise SaaS subscriptions, delivered via a partner-first go-to-market in which over 50% of revenue flows through resellers, MSPs, and MSSPs; distribution is reinforced by AWS Marketplace and Microsoft Azure Marketplace listings with co-sell status, as well as integrations with hyperscaler ecosystems such as AWS Security Hub Extended, Microsoft Sentinel/Defender for Cloud, Cisco Cloud Control Studio, and Nvidia. The product portfolio spans CSPM, CIEM, DSPM, vulnerability management, container and Kubernetes security, IaC scanning, serverless security, CDR, API security, DAST, and an emerging AI security surface (AI-SPM, shadow AI detection, malicious LLM-prompt detection) wrapped by the AI Agentic Pack of specialized Blue, Green, Red, and Choppy agents. Named enterprise customers include Roku, Carvana, Waste Management, Siemens, Nubank, Peloton, Wix, Nextdoor, Agoda, Bill.com, ClickUp, CAVA, Litera, TheRealReal, and Vestiaire Collective, with the company targeting financial services, healthcare, and AI-adopting organizations as priority verticals.
Upwind Security firmographics
Firmographics- Name
- Upwind Security
- Legal name
- Upwind Security Inc.
- Website
- https://upwind.io
- Company type
- Private
- Founded year
- 2022
- Operating status
- Operating
- Headcount range
- 251–500 employees
- Short description
- Upwind Security provides a runtime-first CNAPP that uses eBPF sensors and AI agents to deliver real-time cloud, application, and AI workload security for large enterprises across regulated and cloud-native industries, distributed primarily through channel partners and hyperscaler marketplaces.
- Ownership category
- akta.pro rank
Upwind Security industry classification
Industry- Product category
- Cloud-Native Application Protection Platform (CNAPP) / Cloud Security
- NAICS
- Computer Systems Design and Related Services (5415), Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ)
- akta.pro secondary industries
- Cloud Network Security (Microsegmentation, Cloud Firewall) (HDADADAH), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK), Attack Surface Management (EASM/CAASM) (HDADAHAC)
Keywords
Where Upwind Security is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices7 records
Markets served
Upwind Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Cloud Security Platform Subscription: SaaS subscription-based cloud-native application protection platform (CNAPP) with runtime security, posture management, and AI security capabilities. Revenue model based on subscription with consumption elements for enterprise deployments.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise Platform - Cloud & AI Security Platform |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels6 records
Upwind Security product offering
Product offeringCore offering
Upwind Security provides a runtime-first Cloud-Native Application Protection Platform (CNAPP) that uses eBPF-based sensors combined with cloud telemetry and API integrations to deliver real-time visibility, threat detection, vulnerability management, posture management, and AI workload security across multi-cloud environments. The platform unifies application security (IaC scanning, supply chain, container admission), security posture (CSPM, CIEM, DSPM, AI-SPM), and real-time protection (CDR, API security, DAST, attack surface management), and is augmented by an AI Agentic Pack of specialized agents that automate investigation, validation, and remediation for enterprise security teams.
Product overview
Upwind Security offers a unified runtime-first Cloud & AI Security Platform built around its CNAPP (Cloud-Native Application Protection Platform). The platform combines multiple security capabilities including Application Security (IaC Security, Supply Chain Security, Container Admission Controller), Security Posture (CSPM, CIEM, Vulnerability Management, DSPM, Container & Kubernetes Security, AI-SPM, Serverless Security, Attack Path Analysis), and Realtime Protection (CDR, Attack Surface Management, API Security, DAST, MDR). The portfolio is enhanced by the AI Agentic Pack featuring specialized AI agents (Blue, Green, Red, Choppy AI) for automated investigation, validation, and remediation. The platform uses eBPF technology and runtime context to provide visibility into cloud environments, reducing false positives by up to 98% according to company claims.
Differentiator
Problem solved
Functional benefit
Brands
- Upwind Cloud & AI Security Platform: The main cloud and AI security platform offering runtime-first protection across cloud infrastructure and applications
- AI Agentic Pack
- Upwind CNAPP
Products and services
- Upwind Cloud & AI Security Platform A unified runtime-first cloud and AI security platform that combines visibility, protection, and runtime context across cloud, code, identity, AI stack, and attack surface with specialized AI agents for investigation, validation, and remediation. Sold to enterprise security teams as the umbrella subscription product.
- Upwind CNAPP Cloud-Native Application Protection Platform that unifies application security, security posture, and real-time protection on a single platform, giving teams visibility, runtime context, and enforcement from development through production.
- AI Agentic Pack Suite of four AI agents (Blue, Green, Red, and Choppy AI) integrated into the Cloud and AI Security Platform to investigate threats, validate real exposure, and accelerate remediation for enterprise security teams.
- Upwind AI Sensor for Endpoints Endpoint sensor that extends Upwind's runtime-first visibility and threat detection to endpoint workloads, addressing accidental secret commits, data exposure, and cloud/AI-era endpoint threat models.
- Inside-Out AI Security Suite AI security suite within the CNAPP platform that protects enterprise AI workloads with real-time security, posture management, AI agents, and runtime protection.
- Exposure Validation Engine AI-driven Dynamic Exposure Validation Engine that improves cloud exposure detection and validation, reducing false positives by 90% for security, engineering, and compliance teams.
- Open Source Security Model Open source security model designed to enhance cloud risk management through transparency, customization, and real-time risk control.
- Managed Detection & Response (MDR) Managed detection and response service powered by runtime visibility, expert threat hunters, and instant incident war rooms, with 24/7 expert access, a 2-minute SLA for major incidents, and collaborative remediation guidance for enterprise customers.
Quantifiable outcome
- 900% year-over-year revenue growth
- +6 more outcomes
Companies that use Upwind Security
Customer profileNamed customers18 records
Segments5 records
Ideal customer profiles6 records
Upwind Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration9 records
AI capability10 records
Feature5 records
Upwind Security partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered flagship, core and major.
- Cisco (Cloud Control Studio)flagshipUpwind became a launch partner for Cisco Cloud Control Studio, integrating real-time cloud and AI security intelligence into Cisco's AI Canvas workspace. Selected as one of the first security platforms for this launch, enabling joint customers to access security findings within Cisco platform.
- NvidiacoreCollaboration with Nvidia at RSAC Conference to identify malicious commands targeting language models in real time. Demonstrated 95% precision in detecting malicious LLM prompts using Nvidia technology with sub-millisecond inference.
- Microsoft AzurecoreUpwind partnered with Microsoft to integrate its runtime cloud security platform into Azure environments, available through Microsoft Marketplace. Solution has co-sell status and full Azure Consumption Commitment decrement eligibility, connecting with Azure Sentinel and Defender for Cloud.
- Amazon Web Services (AWS)coreUpwind integrated its CNAPP with AWS Security Hub Extended plan as Select CNAPP Partner, providing real-time visibility across AWS workloads with unified billing through AWS Marketplace. One of approximately ten companies globally selected for this partnership.
- Bessemer Venture PartnerscoreCo-hosting exclusive CISO Sunset Circle events with Upwind, including event in Bengaluru, India on April 24, 2026. Partnership for community building among security leadership through intimate practitioner conversations.
- ForbesmajorPartnership through Forbes Cyber60 recognition for three consecutive years (2024-2026).
Scale indicators11 records
Recent moves10 records
Expansion highlights6 records
Upwind Security competitors and assessment
Company assessmentDirect peers
- Wiz: Wiz is the leading CNAPP vendor and the explicitly named direct competitor Upwind is positioned against per Bessemer's Series B framing. Both offer unified cloud security platforms spanning posture management, vulnerability detection, and runtime protection for cloud-native workloads.
- Orca Security: Orca Security is an agentless CNAPP competitor targeting the same cloud security buyer. While Orca pioneered side-scanning without agents, Upwind differentiates via eBPF-based runtime sensors — both compete for posture, vulnerability, and runtime consolidation deals.
- Sysdig: Sysdig is a runtime cloud security and observability platform focused on container and Kubernetes protection with eBPF technology. It is one of the closest direct comparables to Upwind's runtime-first approach and competes for the same DevSecOps buyer.
- Aqua Security: Aqua Security provides cloud-native application protection with deep container and Kubernetes security focus. It competes with Upwind's container, runtime, and supply chain security modules, though Aqua is more narrowly focused on the container layer.
- Lacework: Lacework is a CNAPP competitor offering cloud security and compliance across posture, workload, and identity. Both target cloud-native enterprise buyers, though Lacework has undergone strategic restructuring that may affect competitive intensity.
Broad incumbents
- Palo Alto Networks (Prisma Cloud): Palo Alto Networks' Prisma Cloud is a broad CNAPP suite from a public cybersecurity incumbent. Both target the same cloud-native security buyer with overlapping posture, runtime, and AI-driven security capabilities — though Prisma Cloud sits within a much wider portfolio.
- CrowdStrike (Falcon Cloud Security): CrowdStrike's Falcon Cloud Security extends its endpoint incumbent into CNAPP and cloud detection & response. Both compete for enterprise SOC budget, with CrowdStrike offering a broader platform that includes endpoint and identity alongside cloud.
- Microsoft Defender for Cloud: Microsoft Defender for Cloud is the native hyperscaler CNAPP offering integrated with Azure Sentinel and Defender suite. It represents both a key distribution partner for Upwind (via co-sell) and a structural competitive threat given Azure's native bundling.
- Tenable Cloud Security: Tenable expanded from vulnerability management into cloud security with its Tenable Cloud Security platform. It competes with Upwind in posture management, vulnerability prioritization, and attack surface management from a broader exposure management incumbent position.
Emerging players
- Snyk: Snyk is a developer security platform with growing cloud and IaC security capabilities. While more developer-focused than Upwind's SOC-buyer motion, Snyk overlaps in IaC scanning, supply chain security, and cloud posture — and could expand into runtime CNAPP.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Upwind Security social profiles
Digital presenceUpwind Security compliance and trust
Trust signalCompliance11 records
Upwind Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Upwind Security leadership team
Management profileNumber of profiles
Profiles10 records
Upwind Security funding detail
Funding detailFunding overview
Funding rounds6 records
Investors13 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Upwind Security M&A and investment
M&A and investmentM&A2 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Upwind Security
What does Upwind Security do?
Upwind Security provides a runtime-first Cloud-Native Application Protection Platform (CNAPP) that uses eBPF-based sensors combined with cloud telemetry and API integrations to deliver real-time visibility, threat detection, vulnerability management, posture management, and AI workload security across multi-cloud environments. The platform unifies application security (IaC scanning, supply chain, container admission), security posture (CSPM, CIEM, DSPM, AI-SPM), and real-time protection (CDR, API security, DAST, attack surface management), and is augmented by an AI Agentic Pack of specialized agents that automate investigation, validation, and remediation for enterprise security teams.
Is Upwind Security a public or private company?
Upwind Security is a private company. It is classified as venture growth investor backed and is currently operating.
When was Upwind Security founded?
Upwind Security was founded in 2022. It employs 251 to 500 people.
Where is Upwind Security based?
Upwind Security is headquartered in San Francisco, United States, in the North America region.
How does Upwind Security make money?
One revenue line is on record: cloud Security Platform Subscription.
Who are Upwind Security's main competitors?
Direct peers on record are Wiz, Orca Security, Sysdig, Aqua Security and Lacework. Broad incumbents are Palo Alto Networks (Prisma Cloud), CrowdStrike (Falcon Cloud Security), Microsoft Defender for Cloud and Tenable Cloud Security. Snyk is listed as an emerging player.
Does Upwind Security have an API?
No public API is recorded for Upwind Security.
What industry is Upwind Security in?
Upwind Security's product category is Cloud-Native Application Protection Platform (CNAPP) / Cloud Security. Its primary akta.pro industry code is HDADAGAJ, Attack Detection & Response for Cloud/SaaS (SOC for Cloud), with a secondary code of HDADADAH, Cloud Network Security (Microsegmentation, Cloud Firewall). Its NAICS code is 5415 and its SIC code is 7372.