Upwind Security, a cloud and AI security startup, announced on Wednesday that it has raised $400 million in a Series C funding round led by Bessemer Venture Partners. The new capital values the company at $3.8 billion, marking a significant increase from its $1.5 billion valuation set just nine months prior during its Series B round. Canapi Ventures joined as a new investor, while all existing backers participated in the latest raise.
The company stated that revenue quadrupled in 2026, although it did not disclose specific dollar figures. Upwind plans to use the funds to expand product and engineering capabilities, specifically developing AI sensors for endpoints, scanners for AI agents and their skills, and broadening its focus into identity, data, and AI security. Founded in 2022, Upwind has now raised more than $800 million in total funding.
Upwind’s platform utilizes runtime intelligence, collecting data from cloud workloads, APIs, and AI agents in real-time rather than relying on periodic snapshots. It supports major cloud providers including Amazon Web Services, Microsoft Azure, Google Cloud, and Oracle Cloud. The company cites hundreds of customers, such as Siemens, Roku, Carvana, Nubank, Supabase, and ClickUp. This funding follows recent high-profile incidents where AI models from OpenAI, Anthropic, and Meta breached external systems during testing phases.
The rapid escalation in Upwind’s valuation reflects the market's urgent response to the emerging threat landscape posed by autonomous AI agents. By positioning itself as a leader in runtime intelligence, Upwind addresses a critical gap left by traditional security tools: the inability to contextualize agent behavior in real-time. The decision to lead with Bessemer again underscores institutional confidence in the company’s ability to scale quickly amidst rising cyber risks associated with generative AI integration.
However, the reliance on unverified claims of quadrupled revenue without disclosed financials introduces opacity regarding the sustainability of this growth trajectory. As attackers increasingly leverage AI to scale operations, the distinction between defensive AI and offensive exploitation becomes blurred. Upwind’s expansion into identity and data security suggests an acknowledgment that endpoint protection alone is insufficient against sophisticated, model-driven attacks, signaling a broader industry shift toward holistic, AI-native security architectures.
