Cloud security has traditionally involved assembling information from different tools to identify weaknesses, monitor activity and investigate potential attacks. As enterprise infrastructure becomes more interconnected and AI agents begin interacting with business systems, that model is facing a new test: whether security teams can connect those signals quickly enough to understand their actual exposure.
Upwind Security is building a platform around that challenge. The company announced a $400 million Series C funding round led by Bessemer Venture Partners, reaching a $3.8 billion valuation after quadrupling its revenue in 2026.
Canapi Ventures participated alongside existing investors Cyberstarts, Greylock Partners, Craft Ventures, Leaders Fund, Salesforce Ventures, TCV, Alta Park Capital, Penny Jar Capital, Cerca Partners, Swish Ventures and Picture Capital. The funding marks a significant step up from Upwind’s $1.5 billion valuation in January 2026.
The company plans to use the investment to accelerate product development and expand its go-to-market operations.
A Different Way to Assemble the Security Picture
Security products can provide extensive data about vulnerabilities, configurations and suspicious activity. The challenge is connecting that information in a way that helps teams determine which issues require immediate attention.
Upwind’s Cloud and AI Security Platform combines runtime intelligence with context from cloud workloads, APIs and AI agents. The platform is designed to help security, development and DevOps teams understand how exposures relate to live infrastructure, prioritize remediation and detect attacks as they happen.
Founded in 2022, the company was built around the premise that periodic assessments and static snapshots cannot provide the complete picture of a changing cloud environment.
“AI is fundamentally changing both the cloud infrastructure architecture and the scale of cyber threats and how organizations build and operate software,” said Amiram Shachar, CEO and Co-Founder of Upwind. “Context is key to managing internal and external risks, security teams need to understand how cloud, and AI interact in real time. We built Upwind to unify those signals and eliminate complexity, helping organizations identify their most critical exposures, fix risks proactively, and detect attacks as they happen.”
The Platform’s Enterprise Footprint
Upwind supports Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure. Its AWS Security Hub integration enables customers to access the platform within the AWS console, with simplified onboarding and unified billing through AWS.
Its customer roster includes Siemens, Roku, Carvana, Nubank, Supabase and ClickUp. Testimonials from security leaders point to the practical value of having a clearer view of live infrastructure.
“Upwind gave us visibility into what is actually running, not just what a scan found,” said Michael Cannizzo, CISO of HedgeServ. “That changed which risks we spend our time on.”
Russ Kirby, CISO of Ping, described how the platform affected his team’s workflow: “Setup took days. What stood out after that was visibility into live workloads rather than a snapshot, and that redirected where our team spends effort.”
For enterprises, the operational question is whether combining these signals can reduce the time required to investigate exposures and make decisions about remediation.
Bringing AI Into Detection and Remediation
The expansion of AI introduces new demands for cloud security platforms. Attackers can use AI to increase the scale and sophistication of their operations, while employees build applications using large language models and autonomous agents interact with enterprise systems.
Upwind is developing specialized AI agents to investigate threats autonomously, validate attack-surface findings through red-team activity and help remediate infrastructure risks. These capabilities are intended to reduce manual triage as security teams manage increasingly dynamic environments.
“Security needs to keep pace with environments that AI agents can change at a speed and scale that human teams alone cannot match,” Shachar said. “By combining real-time intelligence at runtime with the context needed to understand and remediate risk, we’re helping organizations move beyond alert management toward proactive security.”
The approach extends the platform’s focus on visibility into the response process itself, with the aim of helping teams act on relevant information rather than simply collecting more alerts.
What the Funding Makes Possible
The $400 million Series C will support Upwind’s continued product development and commercial expansion. Its revenue quadrupled in 2026, while its valuation rose from $1.5 billion in January to $3.8 billion.
The financing gives the company room to develop its platform as enterprises reassess how they secure cloud infrastructure and AI-driven workloads. The challenge ahead is execution: maintaining growth, broadening enterprise adoption and demonstrating that a unified view of runtime risk can improve security operations at scale.
