For enterprise security leaders, the challenge is no longer limited to identifying vulnerabilities across a growing technology estate. They must decide which exposures pose the greatest risk, coordinate responses across teams and keep pace with infrastructure that changes continuously. The arrival of AI-powered applications and autonomous agents is making those decisions more complicated.
Upwind Security has built its cloud and AI security platform around that problem. The company announced a $400 million Series C funding round led by Bessemer Venture Partners, reaching a $3.8 billion valuation after quadrupling its revenue in 2026.
Canapi Ventures participated in the round alongside existing investors Cyberstarts, Greylock Partners, Craft Ventures, Leaders Fund, Salesforce Ventures, TCV, Alta Park Capital, Penny Jar Capital, Cerca Partners, Swish Ventures and Picture Capital. The new valuation represents a substantial increase from the $1.5 billion valuation Upwind secured in its Series B round in January 2026.
The funding will support further product development and go-to-market expansion as enterprises look for ways to manage cloud and AI risks without adding unnecessary complexity to security operations.
From Alert Volume to Risk Prioritization
Security teams often receive findings from several systems, including vulnerability scanners, cloud monitoring tools and threat detection platforms. Each may identify a legitimate issue, but the volume of alerts can make it difficult to establish which problems are most urgent.
Upwind’s approach centers on runtime intelligence and context. Its platform connects information from cloud workloads, APIs and AI agents to help security, development and DevOps teams understand critical exposures, prioritize remediation and detect attacks as they happen.
The distinction is important for CISOs managing limited resources. A vulnerability may warrant a different response depending on whether it is reachable, what systems it affects and how it relates to activity in a live environment.
“AI is fundamentally changing both the cloud infrastructure architecture and the scale of cyber threats and how organizations build and operate software,” said Amiram Shachar, CEO and Co-Founder of Upwind. “Context is key to managing internal and external risks, security teams need to understand how cloud, and AI interact in real time. We built Upwind to unify those signals and eliminate complexity, helping organizations identify their most critical exposures, fix risks proactively, and detect attacks as they happen.”
What Security Leaders Value in Practice
Customer testimonials point to the operational implications of gaining more context about live workloads.
“Upwind gave us visibility into what is actually running, not just what a scan found,” said Michael Cannizzo, CISO of HedgeServ. “That changed which risks we spend our time on.”
Russ Kirby, CISO of Ping, described a similar shift in how his team works: “Setup took days. What stood out after that was visibility into live workloads rather than a snapshot, and that redirected where our team spends effort.”
Founded in 2022, Upwind supports Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure. Its AWS Security Hub integration allows customers to access the platform through the AWS console, with simplified onboarding and unified billing through AWS. The company counts Siemens, Roku, Carvana, Nubank, Supabase and ClickUp among its customers.
Preparing for Autonomous Threats
AI introduces additional pressure on security teams. Attackers can use AI to scale their operations, while employees build applications with large language models and autonomous agents interact with enterprise systems.
Upwind is developing specialized AI agents that can investigate threats autonomously, validate attack-surface findings through red-team activity and help remediate infrastructure risks. The company aims to reduce manual triage while allowing security professionals to focus on judgment and response.
“Security needs to keep pace with environments that AI agents can change at a speed and scale that human teams alone cannot match,” Shachar said. “By combining real-time intelligence at runtime with the context needed to understand and remediate risk, we’re helping organizations move beyond alert management toward proactive security.”
The $400 million financing gives Upwind additional resources to pursue that strategy. Its next challenge will be to show that runtime context and AI-assisted investigation can continue to deliver value as enterprises expand their use of cloud services and autonomous systems.