For enterprise security teams, finding a vulnerability is only part of the job. The harder question is whether that weakness creates a path into a live system, what other components it affects and how quickly the organization can respond. Upwind Security has built its cloud security business around that distinction, and its latest funding round gives the company more capital to pursue the approach.
The company announced a $400 million Series C at a $3.8 billion valuation, led by Bessemer Venture Partners. The financing follows a year in which Upwind quadrupled its revenue in 2026, as enterprises increasingly seek security platforms capable of accounting for complex cloud infrastructure and AI-powered workloads.
Canapi Ventures joined the round alongside existing investors Cyberstarts, Greylock Partners, Craft Ventures, Leaders Fund, Salesforce Ventures, TCV, Alta Park Capital, Penny Jar Capital, Cerca Partners, Swish Ventures and Picture Capital.
The latest valuation is a substantial increase from the $1.5 billion valuation attached to Upwind’s Series B in January 2026. Founded in 2022, the company now plans to use the new funding to accelerate product development and expand its go-to-market operations.
The Case for Seeing What Is Actually Running
Upwind’s approach starts with a limitation in conventional cloud security: periodic assessments and static scans do not necessarily reveal how systems behave in production. A vulnerability may exist on paper without being reachable, while activity across workloads, APIs and applications can change the significance of a finding.
The company’s Cloud and AI Security Platform combines runtime intelligence with contextual information from cloud workloads, APIs and AI agents. Security, development and DevOps teams can use that information to prioritize exposures, determine which risks warrant attention and detect attacks in real time.
Customer feedback suggests that this distinction can affect how teams allocate their time.
“Upwind gave us visibility into what is actually running, not just what a scan found. That changed which risks we spend our time on.” – Michael Cannizzo, CISO of HedgeServ
Ping’s CISO, Russ Kirby, highlighted both deployment and the operational impact of the platform. “Setup took days. What stood out after that was visibility into live workloads rather than a snapshot, and that redirected where our team spends effort.”
The platform also supports Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure. Through its AWS Security Hub integration, customers can access Upwind from within the AWS console, with simplified onboarding and unified billing through AWS.
AI Adds Another Layer of Complexity
The expansion of AI-powered applications is changing the operating environment that security teams must protect. Employees are using large language models to build software, attackers are using AI to scale their activities, and autonomous agents are beginning to operate within enterprise systems.
Those developments can make isolated alerts less useful without the surrounding context needed to understand an agent’s behavior or determine whether a vulnerability creates a reachable exposure.
“AI is fundamentally changing both the cloud infrastructure architecture and the scale of cyber threats and how organizations build and operate software,” said Amiram Shachar, CEO and Co-Founder of Upwind. “Context is key to managing internal and external risks, security teams need to understand how cloud, and AI interact in real time. We built Upwind to unify those signals and eliminate complexity, helping organizations identify their most critical exposures, fix risks proactively, and detect attacks as they happen.”
Upwind is also developing specialized AI agents to investigate threats autonomously, validate attack-surface findings through red-team activity and help remediate infrastructure risks. The aim is to reduce manual triage as environments become more dynamic, without removing human judgment from security decisions.
Turning Growth Into a Broader Enterprise Footprint
Upwind’s customer roster includes Siemens, Roku, Carvana, Nubank, Supabase and ClickUp. Tushar Dalvi, Deputy CISO at Confluent, described the impact of the platform on his organization’s cloud security strategy: “Upwind gives us the exact visibility and context we need to stay ahead of cloud threats with complete confidence” says Tushar Dalvi, Deputy CISO at Confluent. “It has removed the complexity from cloud security to give us a clear, high-impact defense strategy with minimal overhead.”
The company will use its new financing to build on that enterprise adoption while expanding its platform capabilities. Shachar said the investment would help Upwind respond to the changing requirements of customers operating cloud and AI infrastructure.
“Our investors have backed our vision and the traction we’re seeing in the market,” Shachar said. “This round gives us the opportunity to accelerate our momentum, expand our capabilities, and continue delivering the innovation customers need to secure cloud and AI infrastructure in the agentic era.”
Upwind’s quadrupled revenue and increased valuation provide a strong foundation for its next phase. The longer-term test will be whether the company can maintain that growth as enterprises consolidate security workflows and demand clearer evidence of which exposures matter most in their live environments.