K
Kevin John
Guest
Upwind Security has closed a $400 million Series C funding round at a $3.8 billion valuation, according to information shared directly with this writer. The financing marks a significant step forward for the cloud and AI security company as enterprises reassess how they protect increasingly complex infrastructure. The company, which reports having quadrupled its revenue in 2026, plans to use the new capital to accelerate product development and expand its go-to-market operations.
The round was led by Bessemer Venture Partners, with participation from Canapi Ventures and existing investors including Cyberstarts, Greylock Partners, Craft Ventures, Leaders Fund, Salesforce Ventures, TCV, Alta Park Capital, Penny Jar Capital, Cerca Partners, Swish Ventures and Picture Capital.
The new valuation represents a substantial increase from the $1.5 billion valuation Upwind secured in its Series B round in January 2026. The latest financing reflects the company's momentum as businesses confront a growing combination of cloud infrastructure complexity, AI-driven applications and emerging security threats.
Founded in 2022, Upwind was built around the premise that cloud security requires visibility into live environments, not simply periodic assessments or static scans. That approach is becoming increasingly relevant as organizations introduce AI-powered applications and autonomous agents into their operations.
These changes are creating new challenges for security teams. AI tools are helping attackers scale their operations, while employees are using large language models to develop applications and agents are beginning to perform tasks autonomously across enterprise systems. Security teams must understand not only where vulnerabilities exist, but also whether those weaknesses are reachable and how they interact with active workloads.
Upwind's platform combines runtime intelligence with contextual information from cloud workloads, APIs and AI agents. The goal is to help security, development and DevOps teams identify critical exposures, prioritize remediation and detect attacks as they happen.
“AI is fundamentally changing both the cloud infrastructure architecture and the scale of cyber threats and how organizations build and operate software,” said Amiram Shachar, CEO and Co-Founder of Upwind. “Context is key to managing internal and external risks, security teams need to understand how cloud, and AI interact in real time. We built Upwind to unify those signals and eliminate complexity, helping organizations identify their most critical exposures, fix risks proactively, and detect attacks as they happen.”
The company argues that bringing these signals together can help security teams move beyond disconnected alerts toward decisions informed by what is actually happening inside their environments.
Upwind's customer base includes organizations such as Siemens, Roku, Carvana, Nubank, Supabase and ClickUp. Customer testimonials point to runtime visibility as a differentiator in how security teams prioritize their work.
“Upwind gave us visibility into what is actually running, not just what a scan found,” said Michael Cannizzo, CISO of HedgeServ. “That changed which risks we spend our time on.”
Russ Kirby, CISO of Ping, described a similar experience, highlighting the shift from static assessments to live workload visibility. “Setup took days. What stood out after that was visibility into live workloads rather than a snapshot, and that redirected where our team spends effort.”
The platform supports Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure. Its integration with AWS Security Hub Extended also allows customers to access Upwind within the AWS console, with simplified onboarding and unified billing through AWS.
Tushar Dalvi, Deputy CISO at Confluent, said the platform had helped simplify the company's approach to cloud defense. “Upwind gives us the exact visibility and context we need to stay ahead of cloud threats with complete confidence,” Dalvi said. “It has removed the complexity from cloud security to give us a clear, high-impact defense strategy with minimal overhead.”
The $400 million round will support further product development and go-to-market expansion as Upwind builds on its enterprise traction. The company is also developing specialized AI agents that can investigate threats autonomously, validate attack-surface findings through red-team activity and help remediate infrastructure risks.
“Security needs to keep pace with environments that AI agents can change at a speed and scale that human teams alone cannot match,” Shachar said. “By combining real-time intelligence at runtime with the context needed to understand and remediate risk, we’re helping organizations move beyond alert management toward proactive security.”
For Upwind, the next phase will test whether its rapid revenue growth can translate into sustained adoption as cloud and AI environments become more difficult to secure. The latest financing gives the company additional resources to pursue that opportunity while expanding a platform designed for infrastructure that increasingly changes in real time.
This article was published as a press release by the author under HackerNoon's Business Blogging program.
The round was led by Bessemer Venture Partners, with participation from Canapi Ventures and existing investors including Cyberstarts, Greylock Partners, Craft Ventures, Leaders Fund, Salesforce Ventures, TCV, Alta Park Capital, Penny Jar Capital, Cerca Partners, Swish Ventures and Picture Capital.
The new valuation represents a substantial increase from the $1.5 billion valuation Upwind secured in its Series B round in January 2026. The latest financing reflects the company's momentum as businesses confront a growing combination of cloud infrastructure complexity, AI-driven applications and emerging security threats.
A Higher Valuation Amid an AI Security Shift
Founded in 2022, Upwind was built around the premise that cloud security requires visibility into live environments, not simply periodic assessments or static scans. That approach is becoming increasingly relevant as organizations introduce AI-powered applications and autonomous agents into their operations.
These changes are creating new challenges for security teams. AI tools are helping attackers scale their operations, while employees are using large language models to develop applications and agents are beginning to perform tasks autonomously across enterprise systems. Security teams must understand not only where vulnerabilities exist, but also whether those weaknesses are reachable and how they interact with active workloads.
Upwind's platform combines runtime intelligence with contextual information from cloud workloads, APIs and AI agents. The goal is to help security, development and DevOps teams identify critical exposures, prioritize remediation and detect attacks as they happen.
“AI is fundamentally changing both the cloud infrastructure architecture and the scale of cyber threats and how organizations build and operate software,” said Amiram Shachar, CEO and Co-Founder of Upwind. “Context is key to managing internal and external risks, security teams need to understand how cloud, and AI interact in real time. We built Upwind to unify those signals and eliminate complexity, helping organizations identify their most critical exposures, fix risks proactively, and detect attacks as they happen.”
The company argues that bringing these signals together can help security teams move beyond disconnected alerts toward decisions informed by what is actually happening inside their environments.
Customer Adoption and Cloud Integrations
Upwind's customer base includes organizations such as Siemens, Roku, Carvana, Nubank, Supabase and ClickUp. Customer testimonials point to runtime visibility as a differentiator in how security teams prioritize their work.
“Upwind gave us visibility into what is actually running, not just what a scan found,” said Michael Cannizzo, CISO of HedgeServ. “That changed which risks we spend our time on.”
Russ Kirby, CISO of Ping, described a similar experience, highlighting the shift from static assessments to live workload visibility. “Setup took days. What stood out after that was visibility into live workloads rather than a snapshot, and that redirected where our team spends effort.”
The platform supports Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure. Its integration with AWS Security Hub Extended also allows customers to access Upwind within the AWS console, with simplified onboarding and unified billing through AWS.
Tushar Dalvi, Deputy CISO at Confluent, said the platform had helped simplify the company's approach to cloud defense. “Upwind gives us the exact visibility and context we need to stay ahead of cloud threats with complete confidence,” Dalvi said. “It has removed the complexity from cloud security to give us a clear, high-impact defense strategy with minimal overhead.”
Where the New Capital Goes
The $400 million round will support further product development and go-to-market expansion as Upwind builds on its enterprise traction. The company is also developing specialized AI agents that can investigate threats autonomously, validate attack-surface findings through red-team activity and help remediate infrastructure risks.
“Security needs to keep pace with environments that AI agents can change at a speed and scale that human teams alone cannot match,” Shachar said. “By combining real-time intelligence at runtime with the context needed to understand and remediate risk, we’re helping organizations move beyond alert management toward proactive security.”
For Upwind, the next phase will test whether its rapid revenue growth can translate into sustained adoption as cloud and AI environments become more difficult to secure. The latest financing gives the company additional resources to pursue that opportunity while expanding a platform designed for infrastructure that increasingly changes in real time.
This article was published as a press release by the author under HackerNoon's Business Blogging program.