Product

At Upwind Security, we’re excited to bring a new kind of CNAPP to life - one that puts APIs and applications at the center of cloud defense. APIs have become the backbone of modern cloud-native architectures, yet they remain one of the most overlooked and exploited entry points. It’s not just a future concern; it’s…

As organizations continue to scale their cloud-native applications across multi-cloud and hybrid-cloud environments, the complexity of threat detection has reached a new high. Traditional, signature-based approaches are no longer sufficient - they often fail to catch modern attacks that unfold subtly across layers of infrastructure and identity. Upwind introduces a powerful new approach to cloud…

As software delivery accelerates with cloud-native architectures and AI-driven development, security must evolve to match the speed and complexity of modern engineering. That’s why Upwind, the runtime-first CNAPP, and Legit Security, a leader in Application Security Posture Management (ASPM), are partnering to provide end-to-end, code-to-cloud protection that combines deep runtime context with secure software development.…

Keeping open source container images up to date and secure is hard. Teams face long, noisy lists of available updates and often can't tell which are relevant or risky. Upwind helps by showing what’s actually running in your environment and giving clear, context-based recommendations. The Open Source Security Challenge Most containerized environments rely heavily on…

Upwind now offers Data Security features and context that simplify compliance, improve visibility, and protect sensitive data across your cloud environments.  These capabilities continuously monitor and enable data security across multi-cloud storage - supporting automated discovery, visibility, and compliance from a single platform. Key capabilities include: These new capabilities mark a significant advancement for security…

Imagine you’re Mike, a security engineer at a fast-growing fintech startup. One morning, you are notified of a zero-day vulnerability in a popular open-source library used across multiple containers. You drop everything, messaging developers, digging through logs, mapping services - only to realize the vulnerable code never actually runs in production. You’ve just spent days…

As serverless computing continues to gain momentum, developers and DevOps teams are increasingly turning to Microsoft Azure Functions to build scalable, event-driven applications with minimal infrastructure overhead. However, the very benefits of serverless – rapid deployment, fine-grained event handling, and abstracted infrastructure - introduce new challenges for security teams. These environments are harder to monitor…

On June 6, 2025, Reuters reported that OpenAI is appealing a U.S. court order requiring the company to preserve all user interactions with ChatGPT and its API, including conversations that users deleted. This legal mandate stems from an ongoing copyright lawsuit filed by The New York Times and has effectively suspended OpenAI’s standard data deletion…

We are excited to announce a new enhancement to Upwind’s posture capabilities, with Upwind now providing comprehensive executive-level Configuration Reports. Users can now generate and download configuration reports, powered by live runtime data, directly from the UI. These reports deliver clear, actionable summaries of posture risk and misconfiguration findings, making it easier for security leaders…

As organizations scale, managing who can access sensitive security data inside a platform becomes increasingly complex. More users, more teams, and more environments often lead to fragmented permissions, limited visibility, and unnecessary friction between security and engineering. When access controls aren’t designed for enterprise collaboration, organizations are forced to choose between speed and control. At…

With Upwind’s recent major releases of Inventory 2.0 and Custom Policies and Frameworks, security teams can now define security posture rules that reflect their specific requirements. These rules automatically adapt to infrastructure and workload, keeping compliance in step with real time conditions.  In this article, we will dive into how the Upwind Explorer enables teams to…

Upwind is launching a new capability designed to accelerate time-to-value: Organizational Onboarding. Organizational Onboarding is a new method of deployment for Upwind’s Agentless Cloud Scanners that enables faster, more efficient onboarding and cloud coverage. It is now available for all major cloud providers - including support for AWS, Google and Azure. What is Organizational Onboarding? The…