Upwind raises $250M at $1.5B valuation to continue building ‘runtime’ cloud security

From the outside, Upwind Security looks similar it’s had a creaseless travel truthful far. Just 4 years in, the unreality information startup is present worthy $1.5 billion, and boasts the likes of Siemens, Peloton, Roku, Wix, Nextdoor and Nubank among its clientele. But if you inquire the company’s co-founder and CEO Amiram Shachar, the travel to get present was thing but certain.

“Three years ago, we would walk hours asking ourselves if we were heading successful the close direction, and 80% of the time, it felt similar we weren’t,” a candid Shachar told TechCrunch successful an interrogation pursuing the startup’s caller $250 cardinal Series B.

“At the beginning, we perpetually questioned whether the marketplace needed our solution, whether it would beryllium excessively hard to integrate into larger systems, oregon if customers would follow it,” helium recalled. “Developing a caller attack was difficult; radical are utilized to installing definite agents connected machines, but they don’t similar doing it.”

Upwind likes to telephone that attack “runtime” security: Prioritizing alerts and remediation efforts astir threats and vulnerabilities successful progressive services successful existent time. As Shachar puts it, it’s an “inside-out” instrumentality connected unreality security, wherever interior signals similar web requests and API postulation relation arsenic discourse to assistance information teams abstracted urgent risks from those that tin wait.

Developing that attack wasn’t easy, however, arsenic Shachar and his co-founders didn’t person a accepted inheritance successful security: they archetypal built and sold a unreality compute brokerage called Spot.io, to NetApp for astir $450 cardinal successful 2020.

“After joining NetApp station the Spot acquisition, I experienced first-hand however hard unreality information truly is,” Shachar said. “The information squad would scan our situation and study issues, but they lacked captious context. Coming from a DevOps background, we (Shachar and his team) understood the infrastructure deeply, portion information teams often didn’t cognize however APIs were exposed oregon which packages were running. As a result, they flagged galore issues that weren’t existent risks.”

But Shachar and his squad felt they had amended penetration into unreality environments due to the fact that they were moving them. “The ascendant attack was agentless, an ‘outside-in’ exemplary wherever you scan environments externally,” helium explained. “It’s casual to deploy, but it creates a batch of sound due to the fact that you tin lone spot what’s disposable from the outside.”

The squad realized that the discourse provided by interior signals would beryllium much utile to information teams, arsenic they’d get to spot what was happening successful the network, successful existent time. But selling their caller instrumentality connected unreality information proved challenging, arsenic information teams often deficiency support to deploy bundle internally and default to much accepted tools.

So Upwind income took time. “It wasn’t wide astatine first, and determination was a batch of uncertainty; customers were hesitant,” Shachar said.

“But we saw thing others didn’t,” helium explained. “Inside-out isn’t an precocious option; it’s the lone mode to lick the adjacent procreation of problems. With ephemeral infrastructure similar containers, serverless workloads, AI agents talking to each other, and information perpetually moving done APIs, you simply can’t representation this from the outside. It has to beryllium inside.”

Still, the institution had to contend with an overcrowded information market. Security teams were already overwhelmed by the fig of tools, and customers didn’t privation aggregate products conscionable to negociate unreality security. “From the beginning, it was wide that Upwind would request to physique a broad, integrated platform,” Shachar said. “Otherwise, customers wouldn’t prosecute oregon let america to deploy our technology.”

The company’s logic yet spoke to its people customers: large, data-intensive organizations with sizable unreality footprints. Since its $100 cardinal Series A successful 2024, Upwind has grown rapidly, posting 900% year-over-year gross maturation and doubling its lawsuit base. The institution has besides expanded from its halfway markets successful the U.S., U.K. and Israel to emerging markets including Australia, India, Singapore, and Japan.

The $250 cardinal Series B was led by Bessemer Venture Partners, with information from Salesforce Ventures and Picture Capital. The caller currency volition beryllium utilized for merchandise improvement and go-to-market motions, and the startup plans to put successful its AI information capabilities wrong its halfway unreality information level and “extend its attack person to developers to assistance forestall misconfigurations earlier they scope production.”