Upwind

Upwind is a security company whose platform protects cloud workloads, applications and AI systems. Its approach joins agentless scanning of cloud accounts with sensors that observe what runs inside the environment, so that findings can be judged against real activity rather than configuration alone.

What it does

The company groups its products into several areas. The platform itself covers cloud security (a cloud-native application protection platform), AI security and agentic security. Application security includes infrastructure as code checks, supply chain security with software composition analysis and SBOMs, and a container admission controller.

Security posture tools cover cloud posture, identity entitlements, data security, AI posture, attack path analysis, vulnerability management and security for containers, Kubernetes and serverless code. Realtime protection covers cloud detection and response, attack surface management, API security, dynamic application testing and managed incident response.

Who it serves

Upwind describes its users as enterprise security, developer and DevOps teams, and says hundreds of enterprises rely on it. Its home page shows logos from customers and partners including Roku, Carvana, Siemens, Wix, Peloton, Agoda, Sixt, Supabase, H&M, Patagonia and Nubank. It also cites a 4.9 out of 5 rating in the CNAPP category on Gartner Peer Insights, and lists analyst and press mentions from Forbes, Frost & Sullivan, GigaOm, Latio and QKS Group.

Key facts

• Products: cloud security, AI security, agentic security, application security, posture management and realtime protection
• Approach: agentless scanning together with runtime sensors
• Recent news: reported in October 2026 to have acquired Aegis, an Israeli AI security start-up, and to have launched an AI lab
• Headquarters, founding year and certifications: not stated on its home page