Upwind
Upwind helps enterprises secure cloud workloads with runtime visibility.
Upwind Security is a cloud security platform that protects cloud infrastructure, workloads, applications, and APIs through a runtime-first approach using eBPF technology. The platform combines posture management, vulnerability and identity security, container and serverless protection, and cloud detection and response in a single environment. Its key differentiator is reducing alert noise by ~95%, enabling security teams to focus on critical threats. The company serves enterprise customers globally including Waste Management, Siemens, Carvana, Roku, and others.
Problem solved
Security teams are overwhelmed by alert noise and lack runtime visibility into actual cloud threats, making it difficult to prioritize remediation efforts efficiently.
Target customer
Enterprise organizations running cloud-native infrastructure across AWS, Azure, and GCP; DevSecOps and security teams managing containerized and serverless workloads.
Founders
A
Amiram Shachar
Co-Founder & CEO
Founded Spot.io (acquired by NetApp for $450M in 2020) and previously served as VP/GM at NetApp; earlier led infrastructure and virtualization at IDF's Mamaram unit.
L
Liran Polak
Co-Founder
Co-founder of Spot.io, acquired by NetApp for $450 million.
L
Lavi Ferdman
Co-Founder
Co-founder of Spot.io, acquired by NetApp for $450 million.
T
Tal Zuri
Co-Founder
Co-founder of Spot.io, acquired by NetApp for $450 million.
Funding history
Series A
$100M
December 2, 2024
Led by Craft Ventures
· TCV, Alta Park Capital, Greylock, Cyberstarts, Leaders Fund, Sheva Fund, Penny Jar
Series B
$250M
January 26, 2026
Led by Bessemer Venture Partners
· Salesforce Ventures, Picture Capital
Total raised:
$430M
Pricing
Subscription-based model with pricing determined by number of cloud assets or deployment scale. Multiple tiers available. Specific pricing provided via custom quote.
Notable customers
Waste Management, Siemens, Carvana, Roku, ClickUp, Wix, Nubank, Agoda, Peloton, Fiverr, BILL, EvenUp, Cogniteam
Integrations
AWS Security Hub, cloud APIs, cloud logs, sensors
Tech stack
React (JavaScript frameworks)
jQuery UI (JavaScript libraries)
jQuery Migrate (JavaScript libraries)
jQuery (JavaScript libraries)
core-js (JavaScript libraries)
Swiper (JavaScript libraries)
Vimeo (Video players)
Webpack
LottieFiles
RSS
Open Graph
HTTP/3
WordPress (Blogs)
ShareThis (Widgets)
Site Kit (Analytics)
Google Analytics (Analytics)
HSTS (Security)
Twitter Emoji (Twemoji)
Google Font API (Font scripts)
PHP (Programming languages)
Apple iCloud Mail (Webmail)
Google Workspace (Email)
Amazon S3 (CDN)
Cloudflare (CDN)
MySQL (Analytics)
Google Tag Manager (Tag managers)
Elementor (Page builders)
Yoast SEO (SEO)
Amazon Web Services (PaaS)
WP Engine (PaaS)
CookieYes (Cookie compliance)
Amazon SES (Email)
Hello Elementor (WordPress themes)
Gravity Forms (WordPress plugins)
Priority Hints (Performance)
Website
Competitors
Wiz
Also focuses on cloud security but Upwind differentiates through runtime-first approach and eBPF technology with superior alert prioritization.
Vanta
Broader compliance and governance platform; Upwind specializes in runtime threat detection and response.
Secureframe
Focuses on compliance automation; Upwind emphasizes real-time threat detection and vulnerability management.
CyCognito
External attack surface management; Upwind provides inside-out security from workload perspective.
Forcepoint
Broader security platform; Upwind specializes in cloud-native and containerized workload protection.
Why this matters: Founded by the team behind Spot.io (sold to NetApp for $450M), Upwind reached unicorn status within two years of launch and has achieved 900% YoY revenue growth. The company's runtime-first approach using eBPF technology and recent $250M Series B (raising total to $430M) demonstrates strong market validation for solving a critical pain point in cloud security.
Best for: Enterprise security teams managing large-scale cloud infrastructure who need to reduce alert fatigue and accelerate threat remediation through runtime visibility.
Use cases
Alert Noise Reduction
A large financial services company using multiple cloud providers receives thousands of daily security alerts, making it impossible to prioritize actual threats. By implementing Upwind's runtime-first approach, they reduce alert noise by 95%, allowing their security team to focus only on active, exploitable vulnerabilities in running workloads.
Consolidated Cloud Security
An organization running containers and serverless functions across development and production environments struggles with fragmented visibility across multiple security tools. Upwind consolidates posture management, vulnerability detection, and threat response into one platform, replacing 3-4 point solutions and reducing operational complexity.
Faster Threat Remediation
A SaaS company needs to remediate security issues quickly to maintain compliance and reduce mean-time-to-resolution. Using Upwind's runtime data and contextual threat assessment, they achieve 7x faster remediation times by understanding which vulnerabilities actually pose risk in their active services.
Alternatives
Wiz
Similar runtime cloud security focus but Upwind offers tighter alert prioritization and eBPF-based visibility.
Vanta
Better for compliance-driven organizations; Upwind is superior for threat detection and response teams.
Secureframe
Choose if compliance automation is primary need; choose Upwind for active threat hunting and remediation.
FAQ
What does Upwind Security do? +
Upwind provides a cloud security platform that protects cloud infrastructure, workloads, applications, and APIs using runtime data to deliver real-time visibility and threat detection. The platform combines posture management, vulnerability and identity security, container and serverless protection, and cloud detection/response in a single environment. Its key benefit is reducing alert noise by ~95% so teams focus on real threats.
How much does Upwind cost? +
Upwind uses a subscription-based pricing model determined by the number of cloud assets or deployment scale. The company offers multiple tiers suited to different organizational needs. Specific pricing is typically provided through a customized quote process.
What are alternatives to Upwind? +
Top alternatives include Wiz (similar runtime cloud security), Vanta (compliance-focused alternative), and Secureframe (also compliance-driven). CyCognito, Forcepoint, and Exabeam are other competitors depending on specific use cases.
Who uses Upwind Security? +
Enterprise organizations with cloud-native infrastructure, including companies like Waste Management, Siemens, Carvana, Roku, ClickUp, Wix, Nubank, Agoda, Peloton, Fiverr, and BILL. The platform is designed for DevSecOps teams and security engineers managing containerized and serverless workloads across AWS, Azure, and GCP.
How does Upwind compare to Wiz? +
Both platforms focus on cloud security using runtime approaches. Upwind differentiates through its eBPF-based technology providing deeper visibility into active services and superior alert prioritization, achieving ~95% noise reduction. Wiz offers a broader platform but Upwind specializes more specifically in runtime threat detection and remediation acceleration.
Tags
cloud security
runtime protection
eBPF
CNAPP
vulnerability management
cloud posture
alert prioritization