Allytics Tech Perspectives

Allytics Tech Perspectives

Allytics Tech Perspectives

Upwind

Upwind Security, Inc. is a cloud and AI security company built around runtime intelligence. Its approach unifies code, posture, application, identity, network, and workload signals into a single operational layer so security teams can understand what is actually running in production, what is exposed, and which risks are truly exploitable.

Upwind Security, Inc. positions this inside-out model as a faster way to reduce alert noise, prioritize remediation, and respond to threats in real time. Its portfolio spans secure-by-design controls for development, posture and exposure management for cloud environments, runtime detection and response, and agentic workflows that help teams investigate, validate, and remediate risk across modern cloud-native and AI-powered environments.

Offerings, Capabilities, and Integrations

Upwind Security, Inc. delivers a runtime-powered security architecture that combines agentless scanners, runtime sensors, cloud activity logs, APIs, and topology mapping to give teams live context across cloud, applications, identities, data, and AI services. Its capabilities cover the build, run, and protect lifecycle, helping organizations connect development findings with production behavior and business impact.

The platform is designed to fit into existing cloud and DevSecOps workflows rather than replace them. Upwind Security, Inc. supports integrations across CI/CD, ticketing, messaging, SIEM, SOAR, data security, and cloud provider ecosystems, including tools such as GitHub Actions, GitLab, ArgoCD, Jira, Slack, Tines, Workato, Sumo Logic, Panther, and Coralogix, alongside native integrations with major cloud security services.

Products and Services

  • Upwind Cloud & AI Security Platform: Unified cloud and AI security platform that brings together visibility, protection, runtime context, and agentic workflows across cloud, code, identity, AI, and attack surface.
  • Upwind AI Agentic Pack: Agentic security offering with specialized AI agents for investigation, validation, remediation, and attack-path analysis across cloud environments.
  • Upwind CNAPP: Cloud-native application protection platform that unifies application security, security posture, and realtime protection across development and production.
  • Application Security: Shift-left application security offering for code, AI-generated code, secrets, infrastructure as code, and deployment controls, with runtime context for prioritization.
  • Security Posture: Posture and exposure management layer for cloud inventory, misconfigurations, identities, vulnerabilities, and asset relationships using runtime context.
  • Realtime Protection: Threat detection and response capability that uses eBPF sensors and cloud activity logs to detect, investigate, and stop threats in real time.
  • IaC Security: Infrastructure-as-code security controls that identify risky configurations before deployment and help enforce secure cloud build practices.
  • Supply Chain Security (SCA & SBOM): Software supply chain security capabilities for dependency analysis, vulnerability discovery, and SBOM-driven risk assessment.
  • Containers Admission Controller: Admission control capability that governs which container images and workloads are allowed to run in Kubernetes environments.
  • AI Security Posture Management (AI-SPM): AI-specific posture management that discovers AI services and agents, applies guardrails, and identifies misconfigurations that expose AI workloads and data.
  • Data Security Posture Management (DSPM): Data security capability for discovering, classifying, and monitoring sensitive data exposure and access across cloud workloads and data stores.
  • API Security: Runtime API security for discovering and cataloging APIs, monitoring behavior, and identifying vulnerabilities and anomalous traffic patterns.
  • Cloud Detection & Response (CDR): Cloud threat detection and response module that correlates runtime telemetry, logs, and behavioral baselines to speed investigation and containment.

Target Customers

Upwind Security, Inc. sells to organizations that run cloud-native, multi-cloud, and increasingly AI-enabled environments. Its buyers include security leaders and practitioners across cloud security, application security, DevSecOps, SecOps, and incident response, as well as platform engineering and DevOps teams that need shared context from code through runtime.

The company serves a mix of fast-growing cloud-native businesses, mid-market organizations, and large enterprises. It is especially relevant for teams operating Kubernetes, containers, serverless workloads, public cloud services, APIs, and AI services that need stronger prioritization, lower false-positive volume, and faster remediation across complex production environments.

Cloud Integrations and Marketplace

  • AWS Marketplace: Upwind Security, Inc. offers transactable AWS Marketplace purchasing and native AWS coverage across services such as EKS, RDS, Aurora, and Bedrock, with additional AWS-specific partner support including EKS add-on deployment.
  • Azure Marketplace: Upwind Security, Inc. is transactable and IP co-sell ready on Azure Marketplace, with Azure-focused support spanning AKS, databases, Entra, and AI Foundry, plus integrations with Microsoft Defender for Cloud and Microsoft Sentinel.
  • Google Cloud Marketplace: Upwind Security, Inc. is available through Google Cloud Marketplace and supports Google Cloud environments including GKE, Cloud Run, Gemini, and Vertex AI, while complementing Security Command Center, Chronicle, and Google Cloud IAM.
  • Oracle Cloud Marketplace: Upwind Security, Inc. has Oracle Cloud Marketplace presence through the Oracle ISV ecosystem and provides OCI-focused support across OKE, OCI Functions, VCNs, IAM, and data services, alongside integrations with Oracle Cloud Guard and Oracle Security Zones.

Key People

  • Amiram Shachar: CEO
  • Tal Zur: CTO
  • Tomer Hadassi: COO
  • Lavi Ferdman: Co-Founder & SVP Growth
  • Rinki Sethi: CSO
  • Yarin Pinyan: VP Product
  • Nadav Naor: SVP Engineering
  • Dan Yahav: SVP Platforms
  • Max Stevens: SVP Worldwide Sales
  • Jonathan Cohen: SVP Product Strategy
  • Moran Sher Ronat: SVP People
  • Aviv Globman: VP Finance

Key Facts

  • Headquarters: San Francisco, California, United States
  • Employees: 400+
  • Annual Revenue: $25M-$100M
  • Parent Company: None
  • Subsidiaries: Upwind Security Ltd.; Upwind Security UK Ltd.
  • Publicly Listed: Private

Analyst Recognitions

  • Gartner: 2025 Gartner Market Guide for Cloud-Native Application Protection Platforms – Included vendor. 2025 Gartner Hype Cycle for Workload and Network Security – Sample Vendor in the Cloud-Native Application Protection Platforms category. 2025 Gartner Hype Cycle for Container Technologies – Sample Vendor in the Cloud-Native Application Protection Platforms category. 2025 Gartner Hype Cycle for Platform Engineering – Sample Vendor in the Cloud-Native Application Protection Platforms category.
  • Forrester: 2025 Forrester Cloud-Native Application Protection Solutions Landscape, Q3 2025 – Included vendor.
upwind

Enter a search