Upwind
Runtime-first cloud security platform with transparent Choppy AI investigation.
About
Upwind Security is a cloud-native application protection platform built around runtime context rather than static posture snapshots. Using eBPF-powered runtime sensors plus agentless discovery, it unifies CSPM, workload protection, detection and response, vulnerability management, identity security, and container security, and adds a dedicated pillar for securing AI workloads and enforcing GenAI usage policies.
In January 2026 the company launched Choppy AI, a suite of AI capabilities that translates natural-language questions into structured, editable queries and security policies, with an interactive vulnerability investigation mode that prioritizes risks by real runtime exposure. Upwind positions Choppy AI against black-box security copilots by making every AI output inspectable and auditable. Founded in 2022 by the team behind Spot.io, Upwind reached a $1.5 billion valuation in January 2026 with $430 million in total funding.
What it can do
- Runtime-first CNAPP unifying posture, workload, detection, and identity security
- Choppy AI translating natural language into auditable queries and policies
- AI workload security with GenAI usage visibility and policy enforcement
- Real-time threat detection with up to 95 percent alert noise reduction
- Code-to-cloud mapping linking runtime findings to the responsible change
Setup
Deploy via the Upwind console with agentless onboarding plus lightweight runtime sensors.
Prerequisites
Cloud accounts (AWS, Azure, or GCP) and Kubernetes or container workloads to protect.
Use cases
Works with
Trust score — 8/10
Scored 8/10 (verified tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 125; Trending score 84/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.