Upwind Security

Upwind Security is an Israeli cybersecurity company founded in 2022 providing cloud-native application protection through runtime visibility and threat detection. The platform implements an "inside-out" security model that operates at the network, application, and data-flow layers within running cloud environments. Rather than relying solely on static configuration scanning and vulnerability databases, Upwind monitors actual workload behavior using eBPF kernel instrumentation, API telemetry, and cloud-native logs to deliver context-aware risk prioritization, real-time threat detection, and anomaly identification in Kubernetes and cloud-native infrastructure.

The company addresses a critical architectural gap in cloud security. Traditional Cloud Native Application Protection Platform (CNAPP) solutions emphasize configuration discovery and posture management from external APIs, but miss threats, misconfigurations, and exploitability context visible only at runtime. Upwind's approach prioritizes fixing actual threats based on real traffic patterns and actual workload connections rather than theoretical attack surface. This reduces alert noise by approximately 95% according to company claims, lowering mean-time-to-remediation and improving security team efficiency in large containerized and Kubernetes environments. The platform integrates with AWS, Azure, and GCP cloud APIs, Kubernetes cluster instrumentation, network sensors, and security information and event management (SIEM) platforms used by enterprise security operations centers (SOCs).

Upwind has achieved remarkable early traction for a 2022 company foundation. The founding team includes security leaders and researchers from Wiz (which itself became a decacorn), Israeli cybersecurity talent, and international security researchers. The company has secured Series B funding and customers including Agoda, Nextdoor, TheRealReal, and other large cloud-native enterprises. Recent analyst recognition includes Gartner recognition in the CNAPP Market Guide, Frost & Sullivan Company of the Year 2025, GigaOm Leader status in container security, and QKS Group SPARK Matrix leadership position. Practitioners at a cloud security showdown voted Upwind #1 among competing CNAPP platforms, and the company holds a 4.9/5 rating on Gartner Peer Insights in the CNAPP category.

The market timing favors Upwind's approach. Cloud workload velocity, agentic AI systems, and the proliferation of ephemeral containers make static scanning increasingly ineffective. Defense and intelligence organizations increasingly operate classified and operational systems on commercial cloud platforms (AWS, Azure, GCP, OCI) under government contracts, driving demand for runtime security solutions that integrate with production Kubernetes and serverless infrastructure while supporting compliance requirements like FedRAMP and specific DoD cloud security certifications. The company's ability to operate with minimal performance overhead (a critical requirement for production systems) and provide unified visibility across heterogeneous cloud environments aligns with trends in modern infrastructure security.

Competitive dynamics are intensifying. Pure-play competitors include Wiz (which has a broader posture and scanning focus), Orca Security (acquired by Darktrace in 2024), Lacework, and Prisma Cloud (part of Palo Alto Networks). However, Upwind's distinct runtime-first and eBPF-centric strategy differentiates it from configuration-first competitors and creates defensible technical moats in threat detection accuracy and workload visibility. The eBPF approach is intrinsically difficult to replicate, requiring deep kernel and container orchestration expertise.