Upwind
Verified Oct 15, 2026 ActiveCombines agentless scanning with runtime sensors to catch cloud threats and misconfigurations across AWS, GCP, Azure, and Oracle Cloud.
Listed on EffectHub ·
Pricing
- Pricing model
- Contact sales
No public price on the site; every plan is sold through a demo request rather than self-serve sign-up.
Use tool ↗About Upwind
Upwind is a cloud and AI security platform for security, DevOps and platform teams running workloads on AWS, Google Cloud, Azure or Oracle Cloud. It pairs agentless scanning with an eBPF runtime sensor, so posture checks (CSPM, CIEM, DSPM and AI-SPM), vulnerability and container security, API security and DAST share one live inventory refreshed about every 30 seconds. The vendor claims attacks are detected within 15 seconds and alert noise falls by 93% through runtime context, and AI agents assist investigation. Founded in 2022 and based in San Francisco, Upwind raised a $250 million Series B in January 2026. No public price is listed; every path leads to a demo.
- Platforms
- Web
- API
- Not confirmed
- Last verified
- Oct 15, 2026
Verified sources
- Home page: agentless scanning plus runtime sensors, live inventory refreshed every 30 seconds, 93% noise reduction, 15 seconds to detect; only 'Get a Demo' calls to action (15 October 2026)upwind.io ↗
- Navigation lists CSPM, CIEM, DSPM, AI-SPM, CDR, API security, DAST and MDR, plus AWS, Google Cloud, Azure and Oracle Cloud partnerships (15 October 2026)upwind.io ↗
- Home page cites a 4.9 out of 5 rating on Gartner Peer Insights in the CNAPP category (15 October 2026)upwind.io ↗
- Founding year, headquarters, founders, and $250M Series Bbusinesswire.com ↗
Is Upwind legit?
We don’t label tools safe or unsafe. Below are the records we checked ourselves, each with the date we read it.
- TLS certificate
- Issued by Google Trust Services, valid until Jan 11, 2027Seen in our own connection to the site on Oct 15, 2026
- Last checked
- Oct 15, 2026The site answered
- On the market since
- 2022The vendor's own material, read by us
- Operated by
- Upwind Security, Inc., United StatesOur research, card verified Oct 15, 2026
Pros & cons of Upwind
Upwind is a mature, heavily funded CNAPP covering most of the cloud-security stack (posture, identity, data, container and API security) in one platform, with runtime sensors as its differentiator over agentless-only competitors. The $250M Series B and strong peer-review ratings point to real enterprise adoption, but like most tools at this scale there is no published price and evaluation happens through a sales process.
Pros
- Combines agentless scanning with runtime sensors rather than posture-only checks
- Covers CSPM, CIEM, DSPM, container, serverless, and API security in one platform
- 30-second inventory refresh and a claimed 15-second threat-detection window
- Rated 4.9 of 5 on Gartner Peer Insights in the CNAPP category
Cons
- No published pricing; requires a sales demo to evaluate
- Feature breadth may be more than a smaller team needs or can operate
- Alert-noise-reduction and detection-speed figures are the vendor's own claims
Best for
- Enterprise security and DevOps teams running multi-cloud workloads
- Organizations wanting posture management and runtime detection in one tool
- Teams drowning in alert noise from multiple point security tools
Not for
- Small teams or solo developers wanting self-serve pricing
- Anyone needing a lightweight, single-purpose scanner rather than a full CNAPP