Upwind Security has secured $400 million in new funding as demand grows for cybersecurity platforms designed to protect modern cloud infrastructure and AI-powered applications. The Series C round values the company at $3.8 billion, following a year in which its revenue quadrupled in 2026.
Bessemer Venture Partners led the investment, joined by Canapi Ventures and existing investors Cyberstarts, Greylock Partners, Craft Ventures, Leaders Fund, Salesforce Ventures, TCV, Alta Park Capital, Penny Jar Capital, Cerca Partners, Swish Ventures and Picture Capital. The new valuation marks a substantial increase from the $1.5 billion valuation Upwind achieved in its Series B round in January 2026.
The funding gives the company additional resources to expand its platform and pursue enterprise customers facing a changing set of security requirements. As businesses deploy more AI-powered applications and connect increasingly complex cloud environments, security teams are being asked to understand not only where vulnerabilities exist but also how those weaknesses relate to live systems.
Why Cloud Security Is Becoming More Complex
Founded in 2022, Upwind built its platform around runtime intelligence, with an emphasis on understanding activity inside live environments rather than relying primarily on periodic assessments and static snapshots.
That distinction matters because a vulnerability does not automatically translate into an exploitable security risk. Teams also need to know whether a weakness is reachable, which workloads are affected and how an attacker might move through interconnected systems.
Upwind combines contextual information from cloud workloads, APIs and AI agents to give security, development and DevOps teams a shared view of critical exposures. The platform is designed to help organizations prioritize remediation and detect attacks as they happen.
“AI is fundamentally changing both the cloud infrastructure architecture and the scale of cyber threats and how organizations build and operate software,” said Amiram Shachar, CEO and Co-Founder of Upwind. “Context is key to managing internal and external risks, security teams need to understand how cloud, and AI interact in real time. We built Upwind to unify those signals and eliminate complexity, helping organizations identify their most critical exposures, fix risks proactively, and detect attacks as they happen.”
Evidence From Enterprise Customers
Upwind counts Siemens, Roku, Carvana, Nubank, Supabase and ClickUp among the organizations that trust its platform. Customer feedback has highlighted the operational value of understanding what is actually running in production.
“Upwind gave us visibility into what is actually running, not just what a scan found,” said Michael Cannizzo, CISO of HedgeServ. “That changed which risks we spend our time on.”
Russ Kirby, CISO of Ping, described a similar shift in how his team approaches cloud security: “Setup took days. What stood out after that was visibility into live workloads rather than a snapshot, and that redirected where our team spends effort.”
The platform supports Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure. Its integration with AWS Security Hub also allows customers to access Upwind through the AWS console, with simplified onboarding and unified billing through AWS.
Extending Security Into the AI Era
The new financing comes as autonomous agents introduce additional challenges for security teams. Agents can interact with systems and execute tasks, potentially changing environments faster than manual security workflows can keep pace.
Upwind is developing specialized AI agents that can investigate threats autonomously, validate attack-surface findings through red-team activity and help remediate infrastructure risks. The company aims to reduce the manual burden of triage while allowing security professionals to focus on judgment and response.
“Security needs to keep pace with environments that AI agents can change at a speed and scale that human teams alone cannot match,” Shachar said. “By combining real-time intelligence at runtime with the context needed to understand and remediate risk, we’re helping organizations move beyond alert management toward proactive security.”
The $400 million investment will support further product development and go-to-market expansion. For Upwind, the challenge now is to translate rapid revenue growth into sustained enterprise adoption as organizations reconsider how to secure increasingly dynamic infrastructure.
