In less than nine months, Upwind Security has more than doubled its valuation from $1.5 billion to $3.8 billion. The $400 million Series C round, led by Bessemer Venture Partners with participation from every previous investor — including Greylock Partners, Craft Ventures, Salesforce Ventures, TCV, Cyberstarts, and Picture Capital — brings total capital invested in the company to over $800 million and establishes Upwind as one of the best-capitalized companies globally focused on cloud and artificial intelligence security.
Founded in 2022 by Israeli entrepreneur Amiram Shachar, former CEO of Spot.io (acquired by NetApp for $450 million in 2020), Upwind is not a generic cybersecurity startup. Its technical value proposition is specific: instead of relying on periodic scans that capture static snapshots of cloud environments, the platform operates from runtime intelligence — continuously monitoring what happens inside active services, including workloads, APIs, and increasingly autonomous AI agents. When a vulnerability is identified, the system does not merely alert; it attempts to remediate the risk in real time.
What makes this investment particularly noteworthy goes beyond the headline numbers. Upwind has been growing by $20 million to $30 million in annual recurring revenue (ARR) per quarter and is projected to end 2026 with roughly $90 million in ARR. That represents 900% year-over-year growth. The $3.8 billion valuation implies a multiple of more than 40 times projected ARR — a high number, but still well below the $12 billion valuation and 80x ARR multiple achieved by Cyera in June this year, another data security startup operating at the frontier between traditional security and AI security.
The Datadog rejection
One of the most interesting details of the round is that it nearly didn't happen. According to TechCrunch, Upwind received an acquisition offer from Datadog, a public software observability company, valuing the startup at around $3.8 billion — roughly the same price venture capitalists were putting on the company. The difference was that Datadog's offer carried no control premium, and Upwind decided it was worth staying independent and pursuing the Series C.
This decision reflects strategic confidence. CEO Amiram Shachar stated in a press release that "AI is fundamentally changing both cloud infrastructure architecture and the scale of cyber threats and how organizations build and operate software." Upwind plans to deploy the $400 million across three areas: AI sensors for endpoints, scanners for agents and their skills, and deeper expansion into identity, data, and AI security.
The cloud security market context
Cloud security is already a $59.3 billion market in 2026, projected to grow at an 11.5% compound annual rate through 2031, according to MarketsandMarkets research. The CNAPP (Cloud Native Application Protection Platform) segment records the highest CAGR, driven by container, Kubernetes, DevSecOps, and AI analytics adoption.
Upwind is not the only player in this race. Companies like Palo Alto Networks (with Cortex Cloud), Microsoft (with Defender for Cloud), Orca Security, and Sysdig all compete in this space. The 2026 Frost Radar report on cloud runtime security identifies a precise tension: "the CNAPP market is entering a high-growth phase because organizations recognize that traditional CNAPP solutions and static scanning alone cannot provide the runtime context and high-fidelity insights needed for effective detection and response."
What differentiates Upwind from this competition is its "runtime-first" approach. While major players like Palo Alto Networks and Microsoft are expanding their CNAPPs to include runtime as a complement, Upwind was born with runtime at its core. This architectural difference translates into tangible advantages: the platform collects continuous telemetry from running environments, correlates this with the customer's workload and API graph, and generates attack narratives rather than isolated alerts. The result is that security teams spend less time hunting false positives and more time solving real problems.
Why AI agents change everything
The most original dimension of Upwind's case is its focus on AI agent security. As organizations begin deploying autonomous agents in production — from internal automations to third-party API integrations —, the attack vector changes fundamentally. An agent that can read, write, and modify workloads in a cloud environment represents a completely new attack surface that traditional tools do not cover.
The 2026 KuppingerCole CNAPP report identifies "AI Security Posture Management (AI-SPM) and Securing AI Pipelines" as essential emerging capabilities. Upwind has already integrated "Blue Agents" and "Red Agents" into its platform: the Blue Agent investigates across all log sources to build a single attack narrative, while the Red Agent directly tests the exposure surface to verify whether identified vulnerabilities are actually exploitable in the customer's environment.
The IPO challenge and Lacework's shadow
Despite the impressive momentum, Upwind faces a challenge that haunts almost every U.S. cybersecurity startup: the path to a public IPO remains extremely narrow. Since 2022, few companies in the sector have successfully gone public, and those that attempted many have faced severe devaluations.
The most frequent comparison in venture capital circles is with Lacework, which reached an $8.3 billion valuation in 2021 before being acquired by Thoma Bravo for only $152.3 million — a massive loss for investors. Upwind has stronger fundamentals than Lacework had at a comparable stage: real revenue, global customers like Siemens, Roku, Nubank, and Supabase, and consistent growth. But the structural risk remains: cybersecurity is a consolidation market, and most "unicorns" end up acquired rather than going public.
Tomasz Tunguz, general partner at Theory Ventures, recently wrote that "cybersecurity will be the third major wave of AI software," following coding tools and customer support. With $400 million in the bank and a valuation that has already doubled in nine months, Upwind is positioned to be the leader of this next wave — or to become the consolidation prize that defines the next cycle.
Sources: TechCrunch, Bloomberg, SecurityWeek
✓ Independent sources cross-checked and verified before publishing
