Upwind Security

Upwind Security, founded in 2022 by CEO Amiram Shachar and former Spot.io colleagues, builds a cloud-native application protection platform (CNAPP) that uses runtime context — what’s actually executing and reachable in production — to prioritize vulnerabilities and detect threats, rather than relying solely on static configuration scanning. In January 2026 the company raised a $250 million Series B led by Bessemer Venture Partners, with Salesforce Ventures and Picture Capital also participating, at a $1.5 billion valuation that made it one of Israel’s cybersecurity unicorns.

The round followed a $100 million round in December 2024 and brought Upwind’s total funding to $430 million. The company reports 900% revenue growth and 200% customer growth over the prior year, and says it doubled its headcount to more than 300 employees; these figures come from the company but are consistent with the scale of investor interest from Bessemer and Salesforce Ventures. Upwind says the new capital will extend its runtime-first approach to AI workloads and code security, not just infrastructure.

Upwind’s core differentiator within the crowded CNAPP market is runtime-first prioritization: instead of flooding security teams with every theoretical misconfiguration, it aims to surface only what’s exploitable right now based on live execution context. The honest caveat is that CNAPP is one of the most saturated categories in cloud security, and while Upwind’s growth metrics are striking, independent, named-incident evidence of its detection efficacy in the wild is not yet publicly documented.