AI agents are beginning to take on tasks that once required direct human involvement, from investigating information to interacting with software and infrastructure. In cloud environments, that shift introduces a security challenge: automated systems can operate at a speed and scale that make traditional investigation and remediation processes harder to sustain.
Upwind Security is positioning its cloud security platform around this changing environment. The company announced a $400 million Series C round led by Bessemer Venture Partners, bringing its valuation to $3.8 billion. Canapi Ventures and existing investors joined the round. Upwind also reported that revenue quadrupled in 2026, following a January Series B valuation of $1.5 billion.
The new capital is intended to support product development and go-to-market expansion as enterprises assess how to secure cloud infrastructure that increasingly includes AI-powered systems and autonomous agents.
When Infrastructure Changes Faster Than Teams Can Respond
Security operations have traditionally depended on people reviewing alerts, investigating suspicious activity, and coordinating with other teams to remediate problems. Automation has already accelerated parts of that process, but AI agents introduce another dimension: they can interact with systems and perform tasks with less continuous human direction.
That can create operational advantages, but it also raises questions about how security teams monitor activity, identify dangerous behavior, and maintain control over systems that can take action. The underlying cloud environment may be distributed across multiple providers, while APIs, workloads, and AI agents interact in ways that are difficult to understand from isolated security alerts.
“Security needs to keep pace with environments that AI agents can change at a speed and scale that human teams alone cannot match,” Shachar said. “By combining real-time intelligence at runtime with the context needed to understand and remediate risk, we’re helping organizations move beyond alert management toward proactive security.”
The challenge is not limited to detecting malicious activity. Teams also need to understand which systems an agent can access, how its actions affect the broader environment, and whether a seemingly minor exposure creates a path to more sensitive resources.
Bringing AI Into the Security Workflow
Upwind combines runtime intelligence with context from cloud workloads, APIs, and AI agents. Its platform is designed to help security, development, and DevOps teams identify critical exposures, prioritize fixes, and detect attacks in real time.
The company is also developing AI agents for security workflows. These agents can investigate threats autonomously, act as red teams to validate attack-surface findings, and remediate infrastructure risks at machine speed. The approach applies automation to several stages of security work, from examining potential threats to testing whether an identified weakness represents a meaningful attack path.
Such capabilities could help organizations reduce the time between discovering a potential issue and determining what action to take. However, automated remediation also makes context important: acting quickly is useful only when a system can distinguish an urgent, exploitable risk from a finding that requires a different response.
Upwind’s emphasis on runtime intelligence is intended to give those workflows a view of what is happening in live environments, rather than relying exclusively on static inventories or snapshots.
A Multicloud Foundation
AI security is tied to the infrastructure on which these systems run. Upwind supports Amazon Web Services, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure, reflecting the range of environments enterprises may need to secure.
The company also offers an integration with AWS Security Hub, providing access through the AWS console alongside simplified onboarding and unified billing. Its customers include Siemens, Roku, Carvana, Nubank, Supabase, and ClickUp.
These deployments form part of the commercial foundation behind the latest investment. The round includes Bessemer Venture Partners, Canapi Ventures, and existing backers such as Cyberstarts, Greylock Partners, Craft Ventures, Salesforce Ventures, TCV, and other investors.
Funding the Agentic Era
Upwind was founded in 2022, and its latest valuation represents a substantial increase from the $1.5 billion valuation announced at its Series B in January 2026. The company’s reported revenue quadrupling in 2026 provides another indicator of its commercial momentum, although the announcement does not disclose the underlying revenue figures.
The investment comes as security vendors work to adapt their products to environments shaped by AI-driven development and automated operations. For customers, the practical question is whether these tools can keep pace with changing infrastructure while helping security teams retain meaningful oversight.
“Our investors have backed our vision and the traction we’re seeing in the market,” Shachar said. “This round gives us the opportunity to accelerate our momentum, expand our capabilities, and continue delivering the innovation customers need to secure cloud and AI infrastructure in the agentic era.”
Upwind’s next phase will test how far AI-assisted investigation and remediation can go in production environments. As organizations delegate more work to autonomous systems, the ability to understand activity in context and respond without losing control will become an increasingly important part of cloud security.
John Kevin Hao is a news and feature writer covering cybersecurity, technology, and business targeted for professional audiences.