UpwindDemo room open7 pieces
Contact Upwind

Runtime-Powered Cloud and AI Security

Upwind is a runtime-powered cloud security platform that unifies posture management, workload and application protection, and threat detection across multi-cloud, Kubernetes, container, and serverless environments.

Its cloud-native application protection spans CSPM, CIEM, DSPM, vulnerability and exposure management, API security, and cloud detection and response, correlating agentless scanning with live runtime signals so teams act on what is actually exploitable.

That same runtime context now extends to AI, where Upwind's AI Security Posture Management discovers the AI models and services running across an organization's cloud and assesses their exposure and posture.

Its Agentic Pack puts AI agents on every finding, pairing a conversational control plane with agents that investigate incidents, validate which vulnerabilities are reachable against the live environment, and deliver remediation as ready-to-merge pull requests.

The platform is built for cloud security and DevSecOps teams in complex multi-cloud environments that need to cut alert noise and focus on real, exploitable risk.

Founded in 2022 by Amiram Shachar, Upwind is venture backed and has raised more than $400 million.

Market segment

Cloud SecurityAI SecurityAI security

Validated as AI native security by analyst Richard Stiennon. The tag opens Upwind’s room on Guardians of the Machine Age in a panel.

Vendor content

Executive Overview

Amiram Shachar

Co-Founder & CEO

Upwind

Amiram explains the origins of Upwind, the cloud security problem it set out to solve, how its approach differs, and how it is reinventing runtime security for the future of cloud security.

Platform Demo

Upwind Demo

Joshua Burgin, Chief Product Officer at Upwind, walks through the Upwind platform, showing how it maps cloud inventory and risk, filters vulnerabilities by context, detects and responds to threats in real time, and manages identities, compliance frameworks, and issues.

  • 2 Minute Intro
  • 5 Minute Product Tour
  • Deep Dive Demo

Capabilities Demos

Dynamic Inventory and Risk Mapping

  • Multi-cloud inventory
  • Traffic-based exposure
  • Runtime risk analysis
  • Behavioral baselines

Contextual Vulnerability Filtering

  • Vulnerability funnel
  • Runtime prioritization
  • Dynamic SBOMs
  • Shift-left build checks

Real-Time Threat Analysis and Management

  • Threat timeline
  • Process tree context
  • Custom detection policies
  • Real-time response

Identities Dashboard and Risk Management

  • Human and machine identities
  • Authorization graph
  • Stale identity cleanup
  • Secrets exposure

Custom Compliance Frameworks

  • Industry frameworks
  • Custom controls
  • Remediation guidance
  • Compliance status