Upwind’s Runtime Revolution: $250M Fuels $1.5B Cloud Security Unicorn

Ivy Bailey
Ivy Bailey

Upwind's $250 million Series B catapults it to $1.5 billion valuation, powering runtime-first cloud security amid 900% revenue surge. Backed by Bessemer and all-stars, the ex-Spot.io team targets AI-era threats for giants like Siemens and Roku.

Upwind’s Runtime Revolution: $250M Fuels $1.5B Cloud Security Unicorn

Tel Aviv-born cloud security firm Upwind has rocketed to unicorn status, securing $250 million in a Series B round that values the company at $1.5 billion post-money. The funding, announced January 26, 2026, brings Upwind’s total capital to $430 million and crowns it as a leader in runtime-powered protection for dynamic cloud environments. Led by Bessemer Venture Partners with participation from Salesforce Ventures and Picture Capital, the round drew heavyweights including Greylock, Cyberstarts, Craft Ventures, TCV, Alta Park Capital, Leaders Fund, Cerca Partners, Swish Ventures, Sheva, and Penny Jar Capital—backed by NBA star Stephen Curry.

Founded in 2022 by CEO Amiram Shachar and Spot.io alumni Liran Polak, Lavi Ferdman, and Tal Zuri, Upwind emerged from the ashes of their prior venture. Spot.io, which optimized cloud costs by up to 80%, sold to NetApp for $450 million in 2020. Shachar, an IDF Mamram unit veteran who pioneered virtualization in the Israeli military, spotted a gap: traditional security tools lag behind cloud’s speed. “Cloud infrastructure has changed faster than the security models designed to protect it,” Shachar wrote in the company’s announcement. ( Yahoo Finance )

The startup’s platform, a comprehensive CNAPP, fuses cloud security posture management, workload protection, detection and response, vulnerability scanning, identity security, and container safeguards. Powered by an eBPF-based sensor, it delivers real-time visibility into workloads, configurations, and applications, slashing irrelevant alerts by 98% and CVEs by 60%. Customers like Siemens, Peloton, Roku, NuBank, Carvana, and Wix rely on it to prioritize genuine threats amid noise. ( Calcalistech )

Explosive Growth Amid Market Turbulence

Upwind posted 900% year-over-year revenue growth and 200% customer expansion since its $100 million Series A in late 2024, valued then at $800-900 million. That round, led by Craft Ventures, tripled its prior valuation from a $50 million raise at $300 million. The firm added over 100 channel partners last year, including deepened ties with AWS, Microsoft Azure, Google Cloud Marketplace, and NVIDIA. Recognized on CRN’s 2025 Stellar Startups list, Upwind calls itself “the first unicorn in modern cloud security.” ( CRN )

In July 2025, reports surfaced of $1 billion acquisition talks with Datadog, which Upwind sidestepped to pursue independence. April 2025 saw its buyout of Nyx Security for real-time app protection, spawning features like In-Use Functions and Cloud Application Detection and Response. These moves fortified its runtime-first edge as enterprises consolidate tools. ( Calcalistech )

Growth reflects broader shifts: cloud attacks surged, with runtime signals essential for AI-driven workloads. Upwind integrates CI/CD pipelines to scan code and infrastructure-as-code for flaws, spotting regulatory breaches in configs. ( SiliconANGLE )

Runtime-First: Cutting Through Alert Fatigue

Unlike static scanners, Upwind’s eBPF tech captures live behavior, prioritizing risks with runtime context. It pioneered API security in CNAPPs, offering topology maps of Google Cloud comms—even cross-AWS flows. “The next era of cloud security requires a fundamentally different approach, centered in real-time signals,” Shachar stated. “That’s actually the only way to protect the cloud in the new era of AI.” ( Globes )

Investors echoed the bet. Bessemer partner Elliot Robinson praised the team’s timing: “Cloud security is already one of the largest and fastest growing segments in cybersecurity.” Cyberstarts founder Gili Raanan, in since day zero, called it the fund’s seventh unicorn: “Thrilled to partner with Amiram… in one of the fastest-growing markets shaped by cloud scale and AI velocity.” Craft’s Michael Robinson noted three investments, from Spot.io days. ( JNS.org )

The platform’s open-source security model lets teams modify risks elastically, with co-sell support from hyperscalers accelerating adoption. Upwind now staffs 150+, planning doubles in sales, engineering across San Francisco, Tel Aviv, Iceland, and the UK. ( Help Net Security )

Funding for ‘The Next Wave’

Proceeds fuel “The Next Wave”: scaling across AI, data, code, and beyond. Shachar aims to expand globally, invest in R&D for predictive alerts, and fortify hyperscaler partnerships. As cloud-native apps proliferate, Upwind positions to consolidate fragmented stacks. ( Yahoo Finance )

Israel’s cyber ecosystem shines: Upwind joins a list bolstered by Wiz, Cyera. Amid geopolitical strains, its San Francisco HQ and global footprint underscore resilience. Backers like Penny Jar and Sheva (Omri Casspi) blend sports and tech pedigrees. ( Jerusalem Post )

For insiders, Upwind signals runtime’s dominance over legacy posture management. As AI velocities clouds, its evidence-backed intelligence could redefine CNAPPs, validating Shachar’s vision: built for tomorrow’s threats, not yesterday’s scans.

About the Author

Ivy Bailey
Ivy Bailey

Ivy Bailey specializes in product management and reports on the systems behind modern business. They work through trend monitoring with careful context and caveats to make complex topics approachable. They look for overlooked details that differentiate sustainable success from short‑term wins. Their perspective is shaped by interviews across engineering, operations, and leadership roles. Readers appreciate their ability to connect strategic goals with everyday workflows. They also highlight cultural factors that determine whether change sticks. They frequently translate research into action for engineering managers, prioritizing clarity over buzzwords. They are known for dissecting tools and strategies that improve execution without adding complexity. A recurring theme in their writing is how teams build repeatable systems and measure impact over time. They frequently compare approaches across industries to surface patterns that travel well. They avoid buzzwords, focusing instead on outcomes, incentives, and the human side of technology. They tend to favor small experiments over sweeping predictions. Readers return for the clarity, the caution, and the actionable takeaways.

Comments

Join the discussion and share your thoughts.

No comments yet. Be the first to comment.

Leave a Reply

Your email address will not be published.

Related Posts

Formae’s Multi-Cloud Leap: Platform Engineering Labs Arms Builders Against IaC Gridlock

Formae’s Multi-Cloud Leap: Platform Engineering Labs Arms Builders Against IaC Gridlock

Platform Engineering Labs' formae surges to multi-cloud with GCP, Azure, OCI, and OVH beta support plus a Plugin SDK, empowering infrastructure builders to extend IaC without vendor delays. This upgrade redefines extensibility in a fragmented cloud era.

Posted on: by Ivy Bailey
Sky47’s Sovereign Surge: Pakistan’s Massive AI Cloud Bet

Sky47’s Sovereign Surge: Pakistan’s Massive AI Cloud Bet

Sky47's January 2026 launch marks Pakistan's boldest sovereign cloud move, with 3,000 racks and 50MW for AI workloads. Backed by Mari Energies and Fauji Foundation, it eyes hyperscalers amid rising data sovereignty demands.

Posted on: by Zoe Patel
Cloud’s Complexity Trap: How Tool Overload and AI-Wielding Attackers Are Fracturing Security Defenses

Cloud’s Complexity Trap: How Tool Overload and AI-Wielding Attackers Are Fracturing Security Defenses

Fortinet's 2026 Cloud Security Report exposes a widening complexity gap in hybrid clouds, where tool sprawl, AI-driven attacks, and skills shortages overwhelm teams despite rising budgets. Nearly 70% cite fragmentation as the top barrier, urging platform shifts and MSSP aid.

IT Management
NordVPN’s Sixth Consecutive Audit Validates Zero-Logs Promise as Privacy Scrutiny Intensifies

NordVPN’s Sixth Consecutive Audit Validates Zero-Logs Promise as Privacy Scrutiny Intensifies

NordVPN completes its sixth consecutive independent audit by Deloitte, confirming its zero-logs policy amid intensifying privacy scrutiny. The verification highlights industry trends toward verifiable transparency as regulatory pressure mounts and consumer skepticism grows regarding VPN privacy claims.

IT Management
Mesh Security’s $12M Bet: Unifying Cyber Chaos into Enterprise Powerhouse

Mesh Security’s $12M Bet: Unifying Cyber Chaos into Enterprise Powerhouse

Mesh Security's $12M Series A funds its CSMA platform to unify enterprise cyber tools across clouds and SaaS, eliminating silos agentlessly. Backed by Lobby Capital and SentinelOne's CVC, it gains traction with Paychex and Nutanix amid tool sprawl crisis.

IT Management
Abstract Security and Netskope Forge Real-Time Threat Pipeline, Slicing Through Data Delays

Abstract Security and Netskope Forge Real-Time Threat Pipeline, Slicing Through Data Delays

Abstract Security and Netskope's new partnership embeds real-time detection into security data streams, eliminating indexing delays and slashing costs for joint customers. By processing Netskope telemetry in motion, it boosts threat response while preserving data control.

IT Management
Nationwide’s AI Fortress: AWS Bolsters Fraud Defenses for 17 Million Clients

Nationwide’s AI Fortress: AWS Bolsters Fraud Defenses for 17 Million Clients

Nationwide Building Society expands its AWS partnership to deploy AI-driven cloud security and fraud prevention, powering tools like Call Checker against impersonation scams affecting 17% of incidents. Workforce training boosts cloud literacy for enhanced service to 17 million customers.

IT Management
CISOs’ Hidden Roadblocks: Why 58% See Their Firms Unready for Cyber Onslaught

CISOs’ Hidden Roadblocks: Why 58% See Their Firms Unready for Cyber Onslaught

Despite rising budgets, 58% of CISOs deem their organizations unready for cyberattacks, hindered by team overload, AI gaps, talent shortages, and tool sprawl. Experts urge prioritization training, governance, and resilience focus.

IT Management
Security Chiefs Gear Up for AI Agents and Poly-Threats in 2026

Security Chiefs Gear Up for AI Agents and Poly-Threats in 2026

Security leaders brace for 2026's AI agents, poly-threats, and quantum risks, shifting from reactive defenses to governance, identity controls, and resilient architectures amid record attacks and regulatory mandates.

IT Management
Meta’s Metaverse Bet Backfires: CTO Admits VR Neglect in Quest Overhaul

Meta’s Metaverse Bet Backfires: CTO Admits VR Neglect in Quest Overhaul

Meta CTO Andrew Bosworth admits metaverse pursuits caused 'lack of focus' on Quest VR, harming user experience amid 10% Reality Labs layoffs and studio closures. Shift targets wearables, mobile Horizon Worlds, and third-party content as losses top $64 billion.

IT Management