Chief Product Officer
Upwind Security
Upwind Security provides a runtime-powered Cloud Native Application Protection Platform (CNAPP) that secures cloud workloads, APIs, and AI agents across multi-cloud environments. The platform combines real-time runtime intelligence with graph-based inventory and AI-specific security controls to help security, DevOps, and engineering teams prioritize critical risks and respond to threats as they occur.
- Cybersecurity
- Artificial Intelligence
- Software Only
- Developer Tools
- Enterprise Software
Updated 6 days ago
Funding
Raised to date
$800MRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
across 3 rounds
+9$400M · Series C
Announced Oct 2026 · from article date
Disclosed cumulative: $650M
2/2
Not on chart (date unknown): Series A $100M
RoundDateAmountValuationInvestors
Founders
Product
Problem
Cloud environments are increasingly complex and dynamic, making it difficult for security teams to gain comprehensive visibility and accurately prioritize risks. Traditional security tools rely on static configurations and external scans, leading to alert fatigue and slow response times to emerging threats. The rise of AI agents and ephemeral compute further expands the attack surface, creating blind spots across models, identities, and data flows that static tools cannot address.
Solution
Upwind offers a runtime-powered Cloud Native Application Protection Platform (CNAPP) that leverages real-time data to provide enhanced security across multi-cloud environments, including VMs, containers, and serverless functions. By taking an "inside-out" approach, Upwind analyzes actual API usage, network activity, and data flows to identify critical risks with clear root causes. The platform consolidates multiple security tools, enabling security, DevOps, and engineering teams to collaborate effectively, reduce alert noise, and accelerate remediation efforts. Upwind also extends its runtime visibility to AI workloads, providing complete inventory of AI resources, detection of shadow AI, and real-time protection against prompt injection and data exfiltration.
Target Audience
Upwind is designed for security, DevOps, and engineering teams responsible for securing cloud-native applications and infrastructure in multi-cloud environments, as well as organizations deploying AI agents and models that need runtime visibility and protection.
Features
- Runtime sensors that provide real-time visibility into cloud workloads, including network, APIs, and data flows
- Graph-based inventory and vulnerability management for comprehensive asset discovery
- Cloud Detection and Response (CDR) capabilities for detecting and preventing threats in real-time
- eBPF-powered workload protection for securing hosts, containers, VMs, and serverless functions
- AI inventory and AI BOM for complete mapping of models, datasets, packages, and dependencies behind AI applications
- Shadow AI detection for discovery of unsanctioned models, tools, and third-party AI services
- Agent scanning for inspection of agents, their tools, MCP connections, and instructions for risky configurations and prompt injection paths
- AI-SPM for continuous posture assessment of AI configurations against best practices, benchmarks, and regulatory frameworks
- AI-DR for monitoring across the AI stack, including prompt injection, data exfiltration, and agent misuse
- Integration with CI/CD pipelines for continuous security monitoring and vulnerability assessment