Upwind Cloud & AI Security Platform (CNAPP)

Upwind Security, Inc. is a cloud security company founded by the team behind Spot.io, which was acquired by NetApp; its co-founders are CEO Amiram Shachar, CTO Tal Zur and Lavi Ferdman. It is backed by Bessemer Venture Partners, Greylock, Salesforce Ventures, Craft Ventures and TCV, and helps security, developer and DevOps teams see and reduce risk across cloud and AI infrastructure.

The Upwind platform is a cloud-native application protection platform that combines agentless scanning with lightweight runtime sensors in an inside-out model. It brings together CSPM, CIEM, DSPM, AI-SPM, vulnerability management, container and Kubernetes security, IaC and API security with cloud detection and response. Runtime context is used to prioritize the exposures that are actually reachable and to detect attacks in real time. Users named on the site include Roku, Agoda, Wix, Check Point, Nu, H&M and Sixt.

• Posture management: Covers CSPM, CIEM, DSPM and AI-SPM across AWS, Azure, Google Cloud and Oracle Cloud.
• Attack path analysis: Maps exposures and attack paths to show which risks are reachable.
• Container and Kubernetes security: Scans images, enforces admission control and protects clusters.
• Cloud detection and response: Detects threats on workloads in real time using runtime sensors.
• Application and API security: Includes IaC scanning, SCA with SBOM, DAST and API security.
• AI security: Monitors AI workloads and agentic systems running in the cloud.

An e-commerce platform running on Kubernetes can detect runtime attacks on its containers and block vulnerable images before deployment. A digital bank on AWS can prioritize the misconfigurations and vulnerabilities that sit on real attack paths. A software company deploying AI services can inventory its AI workloads and monitor them for abuse.

Runtime context cuts alert noise, with the vendor citing a 93% reduction in high-signal exposures, so teams focus on issues that can actually be exploited. A live inventory refreshed every 30 seconds keeps asset and risk data current in fast-changing cloud environments. Threat detection in about 15 seconds shortens response to attacks on cloud workloads. One platform replaces several separate tools for posture, vulnerabilities, containers and detection.

CNAPP has become the main category for cloud security as companies consolidate separate posture, workload and container tools, and runtime data is increasingly used to cut alert fatigue. AI workloads add new assets that must be inventoried and protected. In Southeast Asia, cloud migration by banks, e-commerce and logistics firms is driving demand for unified multi-cloud security.

Founded by the Spot.io team (acquired by NetApp). Raised a 250 million USD Series B in January 2026 led by Bessemer Venture Partners. Trust Center lists SOC 2 Type 2, ISO/IEC 27001:2022 and FedRAMP High; AWS Security Competency partner. Named a Leader in the QKS SPARK Matrix for CNAPP 2025.