What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Investors are backing Upwind because it builds cloud security around runtime activity: what applications and workloads are actually doing, not just what their configurations or code appear to show. Bessemer Venture Partners led a $250 million Series B announced in January 2026, after Craft Ventures led a $100 million Series A in December 2024. The bet is that runtime context can help security teams focus on exploitable risks across fast-changing cloud environments.
What is Upwind, and what does CNAPP mean?
Upwind is a cloud-native application protection platform, or CNAPP. A CNAPP brings together security capabilities for cloud applications and infrastructure, rather than treating each cloud risk as a separate product or workflow. Upwind describes its platform as spanning application security, security posture management and real-time protection across development and production.
In Upwind’s framing, application security applies guardrails before code reaches the cloud; posture management gives teams visibility into live workloads, services and data flows; and real-time protection detects and stops threats involving APIs, AI and applications. The goal is to connect what developers build and deploy with what is running in production.
How much has Upwind raised, and who invested?
The best-documented recent financing is a $250 million Series B led by Bessemer Venture Partners, announced January 26, 2026. It followed a $100 million Series A led by Craft Ventures, announced by Upwind on December 2, 2024.
#1 Best Overall
- Compact and Efficient Design: The FortiGate 40F is designed for small to mid-sized businesses and enterprise branch offices, featuring a compact, fanless desktop form factor that ensures quiet operation and minimizes space usage.
- Robust Connectivity Options: Equipped with 5 GE RJ45 ports, including 1 WAN port and 4 internal ports, this model provides essential connectivity and flexibility for various network configurations in a small-scale environment.
- High-Performance Security: Offers up to 1 Gbps IPS throughput and 600 Mbps threat protection throughput, using Fortinet’s purpose-built security processor technology to deliver industry-leading performance and protection for SSL encrypted traffic.
- Advanced Threat Protection: Integrated with Fortinet’s AI-powered FortiGuard Labs, the FortiGate 40F offers comprehensive cybersecurity, identifying and mitigating both known and unknown threats to maintain robust security across your network.
- Simplified Management and Deployment: Features a user-friendly management console that provides comprehensive network automation and visibility, coupled with Zero Touch Integration with Fortinet’s Security Fabric for easy deployment.
| Financing or figure | What was reported |
|---|---|
| Series B — $250 million | Bessemer Venture Partners said it led the round in its January 26, 2026 announcement. |
| Series A — $100 million | Upwind announced the round on December 2, 2024, led by Craft Ventures and joined by TCV, Alta Park and existing investors. |
| $900 million post-money valuation | TechCrunch reported this valuation for the 2024 Series A. |
| $180 million total funding | TechCrunch reported that the Series A brought total funding to $180 million. Business Wire also reported $180 million secured since Upwind’s 2022 founding in its April 2025 acquisition announcement. |
Upwind’s December 2024 announcement named Greylock, Cyberstarts, Leaders Fund, Cerca and Sheva among its backers, alongside Craft, TCV and Alta Park. The company’s 2023 announcement also named Penny Jar Capital. The $180 million cumulative-funding figure is a report from the 2024–2025 period; it should not be mistaken for an updated total after the 2026 Series B.
Why is Upwind’s runtime-first approach attracting investor interest?
Cloud resources—especially containers and Kubernetes workloads—can be created, changed and removed quickly. A snapshot of configuration or a list of vulnerabilities may not show whether a flaw can be reached in a running service, what it can communicate with, or how an attacker might use it.
Bessemer describes Upwind’s approach as using lightweight sensors to capture network, process and container events as a continuous stream. The platform’s correlation engine adds metadata, identity and other context to those events to build an execution graph. That graph is intended to help establish whether a vulnerability is reachable in a particular container or service and to expose possible attack paths.
Rank #2
- HARDWARE PLUS SECURITY SERVICES: FortiGate-60F Firewall Appliance bundled with 1 year of FortiCare Premium and FortiGuard Unified Threat Protection.
- UNIFIED THREAT PROTECTION (UTP): Secures against advanced online threats with comprehensive web filtering and anti-botnet technologies.
- OPTIMIZED FOR MEDIUM-SIZED BUSINESSES: Tailored for businesses needing robust security without the infrastructure of larger enterprises.
- RELIABLE CUSTOMER SUPPORT: FortiCare Premium ensures high-quality support and service continuity.
- EFFECTIVE PROTECTION: Employs advanced filtering technologies to safeguard against sophisticated threats.
Bessemer’s investment thesis is that this runtime visibility is increasingly important as containerized environments grow more dynamic. It argues that correlating raw sensor data into signals tied to exploitable paths can give security teams better prioritization and reduce ticket volume. That is the investor’s rationale, not independent proof that the platform reduces workload for every customer.
How is Upwind different from other CNAPPs, including Wiz?
The central distinction Upwind emphasizes is that runtime observations are foundational to its risk analysis: it aims to connect findings to activity and reachability in live workloads. That can be useful when a team needs to distinguish a theoretical vulnerability from one that appears exposed through a particular service or execution path.
That positioning is not, by itself, evidence that Upwind is more effective than Wiz or another CNAPP. A meaningful comparison depends on how each product gathers runtime data, connects findings to attack paths, integrates with a customer’s cloud environment, and supports the security domains that customer needs. The available reporting does not provide an independent, side-by-side benchmark establishing that one vendor is superior.
Rank #3
- 【Up to 1100 Mbps VPN Speed 】 Hardware-accelerated WireGuard and OpenVPN-DCO deliver up to 1100 Mbps VPN throughput, over 3× faster than Brume 2 for smooth remote access and file transfers.
- 【Three 2.5G Ports & Multi-WAN】Tri-port 2.5GbE design with flexible WAN LAN configuration supports multi-gigabit wired setups, dual-ISP Multi-WAN and failover to keep home and SOHO networks online.
- 【Stealth VPN Obfuscation】VPN obfuscation disguises VPN traffic as regular HTTPS, helping you evade blocking, bypass restrictive networks and maintain stable, private connections.
- 【DPI protection】Deep Packet Inspection with visual dashboards blocks adult/gambling/malicious sites, while SQM and QoS prioritize gaming, calls, and video when bandwidth is tight
- 【OpenWrt & USB 3.0 Expansion】OpenWrt with 1GB DDR4 and 8GB eMMC lets you install plugins and build VPN, ad-blocking or NAS, while USB 3.0 Type‑C connects high-speed storage or 4G/5G dongles
- Runtime depth: Determine whether runtime monitoring is central to risk prioritization or a narrower add-on, and what network, process and container events the product can observe.
- Evidence behind prioritization: Ask whether a finding can be tied to reachable code, a live service or a plausible attack path, and what evidence is shown to analysts.
- Coverage: TechCrunch lists Upwind capabilities across CSPM, CWPP, CDR, API security, vulnerability management, identity security and container security. Product breadth should be checked against the requirements and integrations a team actually uses.
- Deployment and ecosystem: Confirm support for the customer’s cloud environments and operational setup. Upwind’s company newsroom lists AWS EKS support and Google Cloud Marketplace availability, but those listings alone do not establish fit for every deployment.
- Operational results: Upwind has claimed it can reduce alerts by 90%, as reported by TechCrunch in 2024. That is a company claim, not a verified comparative benchmark; the reporting does not establish its measurement method or that customers generally achieve that result.
- Traction and financing: Compare customer and employee figures with their dates and sources, and treat funding or investor backing as evidence of investor conviction—not proof of product performance.
What does the Nyx Security acquisition add?
Upwind announced its first acquisition, Nyx Security, in April 2025. Business Wire said Nyx’s technology identifies when application functions execute, can locate vulnerable code loaded in memory, and can detect behavioral anomalies. The announcement said Nyx’s team would strengthen Upwind’s eBPF capabilities, runtime detection and application-layer observability.
Free tools Windows power users keep installed
One-click scans. No signup required.
The strategic fit is an extension of the runtime thesis: observing infrastructure and container events can be paired with more direct visibility into application behavior. Nyx co-founder Alon Saban described the combination as adding Application Detection and Response capabilities at the application layer. The announcement describes the intended capabilities; it does not publish independent results showing how much the acquisition improved detection.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What is known about Upwind’s current size?
Upwind’s newsroom lists more than 300 employees and more than 150 customers in a company-reported snapshot accessed October 1, 2026. These are company figures, not independently audited measures. The newsroom says Upwind was founded in San Francisco in October 2022 by the team behind Spot.io, which was acquired by NetApp.
Rank #4
- Runs UniFi Network for full-stack network management
- Manages 30+ UniFi Network devices and 300+ clients
- 1 Gbps routing with IDS/IPS
- Multi-WAN load balancing
- 0.96" LCM status display
The same newsroom lists AWS EKS support and Google Cloud Marketplace availability among the company’s major announcements. These indicate distribution and integration routes; they do not specify how widely customers use each route.
What the investment signals—and what it does not
The large Series B and Bessemer’s stated thesis signal investor confidence in Upwind’s runtime-first direction and in the team’s ability to build a broad cloud-security platform. Upwind’s earlier financing, named backers and Nyx acquisition add context to that bet.
Recommended Free Tools
For a prospective customer, however, funding is not a substitute for evaluating coverage, deployment requirements, evidence behind risk prioritization and results in the customer’s own environment. The investment story explains why Upwind has attracted capital; it does not settle whether it is the right CNAPP for a particular organization.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
