Upwind Security announced the close of its $400 million Series C funding round at a $3.8 billion valuation. The round was led by Bessemer Venture Partners, with participation from Canapi Ventures and existing investors Cyberstarts, Greylock Partners, Craft Ventures, Leaders Fund, Salesforce Ventures, TCV, Alta Park Capital, Penny Jar Capital, Cerca Partners, Swish Ventures, and Picture Capital.
The announcement follows a period of significant growth for Upwind, which has quadrupled its revenue in 2026 as enterprises seek security platforms built for increasingly complex cloud environments and AI-driven workloads. The company’s valuation has increased substantially from its $1.5 billion valuation in its Series B round in January 2026.
“AI is fundamentally changing both the cloud infrastructure architecture and the scale of cyber threats and how organizations build and operate software,” said Amiram Shachar, CEO and Co-Founder of Upwind. “Context is key to managing internal and external risks, security teams need to understand how cloud, and AI interact in real time. We built Upwind to unify those signals and eliminate complexity, helping organizations identify their most critical exposures, fix risks proactively, and detect attacks as they happen.”
Security Built for the Agentic Era
The rapid adoption of AI is creating new challenges for enterprise security teams. Attackers use AI to increase the scale and sophistication of their operations, employees use large language models to build new applications, and agents are autonomously operating within the organization. The possibilities for new risks and threats are growing exponentially.
The traditional, fragmented approach to security creates silos, providing alerts without enough context to determine the intent behind an AI agent’s activity or whether a vulnerability creates a reachable exposure. Upwind takes a different approach by using runtime intelligence context across cloud workloads, APIs, and AI agents.
The company’s Cloud and AI Security Platform reshapes cybersecurity by working from the inside-out. The platform combines the context of a customer’s cloud workloads, APIs, and agents with runtime intelligence to give security, development, and DevOps teams a shared understanding of the most critical risks and reachable exposures, how to fix them, and to catch new attacks in real time.
To further meet the speed of AI risks and threats, security teams are amplified with specialized AI agents that investigate threats autonomously, act as a red team validating attack surface findings, and remediate risks in your infrastructure at machine speed, eliminating the heavy lifting of triage so teams can focus on judgement and response.
“Security needs to keep pace with environments that AI agents can change at a speed and scale that human teams alone cannot match,” Shachar said. “By combining real-time intelligence at runtime with the context needed to understand and remediate risk, we’re helping organizations move beyond alert management toward proactive security.”