Managing security across multiple cloud providers has become a complicated operational task for large enterprises. Applications depend on interconnected workloads, APIs and services, while development teams introduce changes continuously. As AI adds new applications and autonomous agents to the mix, security teams must determine which exposures matter most without slowing down the business.
Upwind Security is building its business around that challenge. The company announced a $400 million Series C funding round at a $3.8 billion valuation, led by Bessemer Venture Partners. Upwind also reported that its revenue quadrupled in 2026, underscoring its recent growth as enterprises look for more contextual approaches to cloud security.
Canapi Ventures participated in the round, alongside existing investors Cyberstarts, Greylock Partners, Craft Ventures, Leaders Fund, Salesforce Ventures, TCV, Alta Park Capital, Penny Jar Capital, Cerca Partners, Swish Ventures and Picture Capital. The financing represents a significant increase from the $1.5 billion valuation Upwind secured in January 2026.
A Unified View Across Cloud Environments
Founded in 2022, Upwind was designed around the idea that security tools need to understand what is happening inside live infrastructure. Static assessments can identify potential weaknesses, but they do not always establish whether a vulnerability is reachable or how it relates to activity elsewhere in an environment.
Upwind’s Cloud and AI Security Platform combines runtime intelligence with context from workloads, APIs and AI agents. It is designed to give security, development and DevOps teams a shared view of critical risks, helping them prioritize remediation and detect attacks in real time.
The platform supports Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure. For organizations already working within AWS, an integration with AWS Security Hub enables access through the AWS console, alongside simplified onboarding and unified billing through AWS.
The broader goal is to reduce the friction that can emerge when teams rely on separate systems to assess vulnerabilities, monitor runtime activity and investigate potential attacks.
Why Runtime Context Matters
A vulnerability finding does not necessarily tell a security team how much attention an issue deserves. Teams need to understand whether the affected component is exposed, whether an attacker could reach it and what other systems might be implicated.
Upwind’s approach is intended to connect those pieces of information, helping organizations distinguish between a potential weakness and an exposure that demands immediate action.
“AI is fundamentally changing both the cloud infrastructure architecture and the scale of cyber threats and how organizations build and operate software,” said Amiram Shachar, CEO and Co-Founder of Upwind. “Context is key to managing internal and external risks, security teams need to understand how cloud, and AI interact in real time. We built Upwind to unify those signals and eliminate complexity, helping organizations identify their most critical exposures, fix risks proactively, and detect attacks as they happen.”
That challenge is becoming more pronounced as companies deploy AI-powered applications and agents. AI can help attackers scale their operations, while agents operating inside enterprise environments may introduce new interactions that are difficult to assess through isolated alerts.
Upwind is developing specialized AI agents that can investigate threats autonomously, validate attack-surface findings through red-team activity and help remediate infrastructure risks. The company says these capabilities are intended to reduce manual triage and allow security teams to focus on judgment and response.
What Customers Say About Deployment
Upwind counts Siemens, Roku, Carvana, Nubank, Supabase and ClickUp among its customers. Testimonials from security leaders highlight the potential operational value of gaining visibility into live workloads.
“Upwind gave us visibility into what is actually running, not just what a scan found,” said Michael Cannizzo, CISO of HedgeServ. “That changed which risks we spend our time on.”
Russ Kirby, CISO of Ping, described the implementation process and the change in visibility: “Setup took days. What stood out after that was visibility into live workloads rather than a snapshot, and that redirected where our team spends effort.”
These experiences illustrate the problem Upwind is attempting to address: security teams need enough context to direct limited resources toward the exposures that pose the greatest risk.
Funding the Next Stage of Expansion
The $400 million Series C will support continued product development and go-to-market expansion. For Upwind, the investment arrives after a year of quadrupled revenue and a substantial increase in valuation, giving the company additional resources to expand its enterprise presence.
“Security needs to keep pace with environments that AI agents can change at a speed and scale that human teams alone cannot match,” Shachar said. “By combining real-time intelligence at runtime with the context needed to understand and remediate risk, we’re helping organizations move beyond alert management toward proactive security.”
The next stage will test how effectively Upwind can scale its platform as cloud environments become more interconnected and AI-driven workloads become more common. Its core proposition is that understanding what is happening at runtime can help organizations move from collecting security alerts to acting on the risks that matter most.