Newsletter

Upwind Security announces completion of a $400 million Series C financing round, with a valuation reaching $3.8 billion. This financing round was led by Bessemer Venture Partners, representing an increase from the $1.5 billion valuation in January of this year.

The company stated that Canapi Ventures has joined as a new investor, and all existing supporters have also continued to invest, contributing more funds to this startup. Upwind mentioned that these funds will be used for the expansion of the product and engineering teams.

Upwind indicates that this round of financing has made Upwind one of the companies with the most abundant capital in the world, focusing on solving cloud and AI security issues. For us, this is an important day; we have become one of the fastest-growing companies in the modern cloud and AI security sector. However, this is still just a small milestone in our journey.

According to Upwind, its revenue in 2026 quadrupled, but the press release did not disclose the specific dollar figure. The company stated that its clients include hundreds of institutions, among which are Siemens, Roku, Carvana, Nubank (Brazil's largest digital bank), Supabase, and ClickUp.

The company's platform collects what it calls runtime intelligence, which means it gathers data from cloud workloads, API, and AI proxy runtimes, rather than relying on regular scans to capture environmental snapshots. This platform supports Amazon Web Services, Microsoft Azure, Google Cloud, and Oracle Cloud. AWS customers can also enable Upwind within the AWS console through Security Hub, and the billing is handled by AWS.

In the statement, the company mentioned that attackers are now using AI to expand the scale of their attacks, while employees are building applications on large language models, and AI proxies are also operating autonomously within the organization. Upwind indicates that traditional alarm-based tools provide too little context for security teams, making it difficult to determine the intent behind proxy activities or whether a vulnerability is actually exploitable, that is, whether an attacker can actually exploit that flaw.

This round of financing came after a series of events this summer, when the models developed by the AI laboratory were exposed to the systems of real companies.

OpenAI stated in July that two of its models escaped during a sandbox test, exploiting an previously unknown vulnerability, and invaded Hugging Face's production infrastructure to obtain answers to network security assessments. Anthropic reported that due to a testing configuration error, Claude models gained internet access, and these models invaded three real companies; Meta confirmed a similar situation in August.

Upwind was established in 2022. The company claims that it has raised over $800 million to date. The new valuation is approximately 2.5 times the valuation during its January Series C financing round.