Enterprise AI adoption is creating a new security challenge: organizations must protect systems that can change continuously as applications evolve, workloads shift and autonomous agents begin carrying out tasks. Upwind Security believes the answer starts with understanding what is happening inside those environments in real time.
The cloud and AI security company has raised $400 million in a Series C round led by Bessemer Venture Partners, reaching a $3.8 billion valuation. The announcement follows a year in which Upwind quadrupled its revenue in 2026, reflecting growing demand for security tools that account for the relationship between vulnerabilities, running workloads and active threats.
Canapi Ventures participated alongside existing investors Cyberstarts, Greylock Partners, Craft Ventures, Leaders Fund, Salesforce Ventures, TCV, Alta Park Capital, Penny Jar Capital, Cerca Partners, Swish Ventures and Picture Capital. Upwind’s latest valuation is substantially higher than the $1.5 billion valuation it reached in January 2026 during its Series B round.
The Challenge Goes Beyond Finding Vulnerabilities
AI is changing both sides of the cybersecurity equation. Attackers can use AI to scale and refine their operations, while employees use large language models to build applications and autonomous agents increasingly interact with enterprise systems.
That creates a problem for security teams that depend on disconnected tools. An alert may identify a vulnerability, but it might not reveal whether the issue is reachable, how it connects to other infrastructure or whether an AI agent’s activity represents a legitimate task or a potential threat.
Upwind’s platform combines runtime intelligence with context from cloud workloads, APIs and AI agents. Instead of treating each finding as an isolated event, it aims to help security teams understand the significance of exposures and determine where intervention is most urgent.
“AI is fundamentally changing both the cloud infrastructure architecture and the scale of cyber threats and how organizations build and operate software,” said Amiram Shachar, CEO and Co-Founder of Upwind. “Context is key to managing internal and external risks, security teams need to understand how cloud, and AI interact in real time. We built Upwind to unify those signals and eliminate complexity, helping organizations identify their most critical exposures, fix risks proactively, and detect attacks as they happen.”
Moving From Alerts to Autonomous Investigation
Upwind is extending its platform with specialized AI agents designed to investigate threats autonomously, validate attack-surface findings through red-team activity and help remediate infrastructure risks.
The objective is to reduce the manual work involved in triage, allowing security professionals to concentrate on decisions that require human judgment. That approach addresses a growing operational concern: security teams cannot necessarily investigate every alert manually at the speed automated systems can generate activity or change infrastructure.
“Security needs to keep pace with environments that AI agents can change at a speed and scale that human teams alone cannot match,” Shachar said. “By combining real-time intelligence at runtime with the context needed to understand and remediate risk, we’re helping organizations move beyond alert management toward proactive security.”
The distinction is important as businesses experiment with agentic systems. More autonomous software can increase productivity, but it also creates additional interactions among applications, APIs, identities and cloud resources that security teams must understand.
Customer Experience and Enterprise Infrastructure
Founded in 2022, Upwind was designed around the premise that cloud security should account for activity inside live environments rather than relying primarily on periodic assessments and static snapshots.
Its customers include Siemens, Roku, Carvana, Nubank, Supabase and ClickUp. The company supports Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure, giving enterprises a way to monitor security across multiple cloud providers.
Customer testimonials have emphasized the value of runtime visibility. “Upwind gave us visibility into what is actually running, not just what a scan found,” said Michael Cannizzo, CISO of HedgeServ. “That changed which risks we spend our time on.”
Ping CISO Russ Kirby also pointed to the platform’s deployment and operational benefits: “Setup took days. What stood out after that was visibility into live workloads rather than a snapshot, and that redirected where our team spends effort.”
Upwind’s AWS Security Hub integration allows customers to access the platform through the AWS console, with simplified onboarding and unified billing through AWS.
A Larger Bet on Proactive Defense
The new funding will support product development and go-to-market expansion as Upwind builds on its enterprise momentum.
“Our investors have backed our vision and the traction we’re seeing in the market,” Shachar said. “This round gives us the opportunity to accelerate our momentum, expand our capabilities, and continue delivering the innovation customers need to secure cloud and AI infrastructure in the agentic era.”
With a $3.8 billion valuation and revenue quadrupling in 2026, Upwind is entering its next phase with substantial financial backing. Its longer-term opportunity will depend on whether its combination of runtime context and AI-assisted investigation can help enterprises secure increasingly autonomous systems without adding more complexity to already demanding security operations.
