Upwind Security Raises $400M at $3.8B Valuation
AI Security Startup Upwind Raises $400M, Valuation Soars to $3.8B
Related Entities
Organizations
Other
Full Report
Executive Summary
On October 28, 2026, Upwind Security, a San Francisco-based startup focused on cloud and AI security, announced the closure of a $400 million Series C funding round. The investment, led by Bessemer Venture Partners, more than doubles the company's valuation to $3.8 billion, up from $1.5 billion in January 2026. This substantial funding round underscores the immense market demand and investor confidence in solutions that address the security challenges of modern cloud infrastructure and the increasing use of AI agents in enterprise environments. The new capital will be used to accelerate product development and expand go-to-market efforts.
Funding Details
- Funding Round: $400 million, Series C.
- Lead Investor: Bessemer Venture Partners.
- Other Participants: Canapi Ventures, and existing investors Greylock Partners, Craft Ventures, and TCV.
- Total Raised to Date: $830 million.
- Valuation: $3.8 billion.
This funding event is particularly notable as it comes shortly after reports that Upwind rejected a nearly $4 billion acquisition offer from Datadog, signaling the company's confidence in its independent growth trajectory and the high value the market places on its specialized technology.
Company and Technology Overview
Founded in 2022 by the entrepreneurial team behind Spot.io (which was acquired by NetApp for $450 million), Upwind Security has rapidly emerged as a key player in the cloud security space. The company's platform provides runtime-native security, which involves monitoring cloud infrastructure, APIs, and AI agents as they operate to detect active threats.
Key features of the platform include:
- Cloud Native Application Protection Platform (CNAPP): Offers comprehensive security across the cloud application lifecycle.
- Runtime Security: Detects threats like malware, zero-day exploits, and suspicious activity in real-time within live cloud environments.
- AI Security: The platform was recently expanded to specifically address risks associated with the deployment of large language models (LLMs) and autonomous AI agents.
Upwind's CEO, Amiram Shachar, highlighted the growing threat landscape, noting that AI tools have lowered the barrier to entry for malicious actors, making robust, AI-aware security platforms more critical than ever.
Market Context and Business Impact
The massive funding round and valuation surge reflect several key market trends:
- Explosive Growth: Upwind reports its revenue has quadrupled in 2026 and is approaching a $100 million annual recurring revenue (ARR) projection, indicating rapid customer adoption.
- High Demand for AI Security: As enterprises increasingly adopt AI, they are confronting new security risks. Investors are betting heavily on companies like Upwind that are positioned to secure these new workloads.
- Consolidation and High Valuations: The cybersecurity market, particularly in cloud and AI security, is seeing intense competition and high valuations, as evidenced by the rejected acquisition offer from Datadog.
Upwind's customer base includes hundreds of organizations such as Siemens, Roku, and Carvana. The platform integrates with all major cloud providers, including AWS, Microsoft Azure, Google Cloud, and Oracle Cloud, giving it a broad addressable market. The new capital will enable Upwind to further invest in engineering to enhance its product and to scale its sales and marketing teams to capture more of this growing market.
Timeline of Events
Timeline of Events
Upwind Security announces its $400 million Series C funding round.
Sources & References
Article Author
Jason Gomes
• Cybersecurity PractitionerCybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation. Expertise spans SOAR/XSOAR orchestration, threat intelligence platforms, SIEM/UEBA analytics, and building cyber fusion centers. Background includes technical enablement, solution architecture for enterprise and government clients, and implementing security automation workflows across IR, TIP, and SOC use cases.
Editorial Standards & Analyst Review
CyberNetSec.io uses automation to assist source monitoring, deduplication, observable extraction, and structured intelligence generation. Published analysis follows human-defined editorial standards and adds defensive context including MITRE ATT&CK, D3FEND, STIX, and Sigma where applicable. Read our editorial policy.
Tags
📢 Share This Article
Help others stay informed about cybersecurity threats
🎯 MITRE ATT&CK Mapped
Every tactic, technique, and sub-technique used in this threat has been identified and mapped to the MITRE ATT&CK framework for consistent, actionable threat language.
🧠 Enriched & Analyzed
Observables and indicators of compromise (IOCs) have been extracted and cataloged. Risk has been assessed and correlated with known threat actors and historical campaigns.
🛡️ Actionable Guidance
Detection rules, incident response steps, and D3FEND-aligned mitigation strategies are included so your team can act on this intelligence immediately.
🔗 STIX Visualizer
Structured threat data is packaged as a STIX 2.1 bundle and can be visualized as an interactive graph — relationships between actors, malware, techniques, and indicators.
⚡ Sigma Generator
Sigma detection rules are derived from the threat techniques in this article and can be converted for deployment across any major SIEM or EDR platform.