Feed
Upwind Feed
Feed
Grid
Product

July 30, 2026
Announcing the Upwind AI Context Scanner – Securing AI Agents’ Instructions, Skills and Model Context
AI agents are spreading across enterprise operations, from local coding tools on employee endpoints, to agents operating infrastructure or processing sensitive customer data, to fully autonomous cloud workflows. Agents operate with human credentials and gain real system access, and introduce a brand-new attack surface. To secure an AI agent, you have to look deep in…

July 29, 2026
Upwind AI DR is Generally Available: metaCatch Compromised AI Agents in Real Time
We're excited to announce that Upwind AI DR (AI Detection & Response) is now generally available. AI DR gives security teams real-time detection and response for the AI agents running in production, not by bolting on a new sensor, but by extending the runtime intelligence Upwind already has. The Upwind Cloud & AI Security Platform…

July 23, 2026
Focus Mode for AI Security: A Dedicated Workspace for Identifying and Securing Your AI Stack
When we launched Focus Mode, we built it around the way security teams actually work: Vulnerability Management, Cloud Security Posture, Attack Surface Management, Threat Detection & Response, Administration. Each one strips away everything unrelated to the job at hand. AI Security is the next domain in the Focus Mode lineup, and it's built for a…

July 17, 2026
Upwind brings Custom Detection Policies for APIs
Every API has a different risk profile. An internal billing endpoint and a public-facing authorization endpoint don't fail the same way. They don't get attacked the same way either. A generic ruleset can't account for that. Custom rules can, and now those rules can see sensitive data too. This new release brings two things together…

July 16, 2026
Complete KSPM: From Pull Request to Production Runtime
Kubernetes environments move fast. Workloads appear and disappear, container images change continuously, services are exposed, permissions evolve, and development teams deploy updates throughout the day. But most cloud security platforms force practitioners to investigate Kubernetes risk through interfaces designed for the broader cloud, leaving teams to manually filter the noise before they can begin investigating…

July 15, 2026
Revolutionizing Security Investigations with the Upwind MCP Server
Frontier AI models combined with a rampant rate of new critical vulnerabilities mean speed and context are everything. When a critical production service starts behaving suspiciously, every second spent jumping between different tools and dashboards is a second lost to a potential attacker. At Upwind, we are excited to introduce a game-changer for security teams:…

July 10, 2026
Upwind gives you SBOM coverage across every cloud workload
Software supply chain risk doesn't stop at the container boundary. Most organizations still run a meaningful share of production workloads on virtual machines across legacy services, data pipelines, and infrastructure that was never containerized. The Upwind Platform creates SBOMs at runtime, delivering greater accuracy than build-time tools by continuously monitoring your live environment. Format adds…

July 8, 2026
Find What Matters with Upwind Focus Mode
Focus Mode is now available in the Upwind platform, giving security teams a faster, more focused way to work. Instead of navigating across the platform, you can switch to Focus Mode to slice and dice the Upwind platform by Vulnerability Management, Cloud Security Posture, Attack Surface Management, Administration, or Threats, and starting next week, AI…

July 7, 2026
Introducing Early Advisories: Turn Emerging Threats into Action
We’re excited to introduce Early Advisories as part of the Upwind platform. Powered by Upwind's security research team, Early Advisories notify customers about emerging threats, including zero-days and supply chain attacks, before they receive a CVE identifier. Early Advisories are published directly into the Vulnerabilities module alongside CVE-based findings and automatically correlated with your live…

July 2, 2026
Protect Windows Workloads Wherever They Run
Windows workloads remain a critical part of modern cloud environments. From business applications and identity services to databases and internal tooling, Windows Server hosts often support some of the most important pieces of the enterprise stack. Upwind is extending runtime protection and visibility to Windows Server hosts running in private cloud and on-premises environments, including…

July 1, 2026
Realtime Data Security, Across Every Cloud
If you asked most security leaders where all of their data is flowing, which workloads and AI services are accessing it, and whether it's exposed, only a few could answer with confidence, and almost none would have the answer in real time.Not because that data is not available, but because it's scattered across multiple cloud…

June 25, 2026
Announcing Upwind AI Sensor for Endpoints
Today, we are excited to announce the Upwind AI Sensor for Endpoints! In the world we've known until now, the threat model was familiar. A developer accidentally commits a secret to a repository. A DevOps engineer exposes sensitive data to the internet. Someone deploys a workload carrying a critical vulnerability. To deal with these risks,…

Announcing the Upwind AI Context Scanner – Securing AI Agents’ Instructions, Skills and Model Context
AI agents are spreading across enterprise operations, from local coding tools on employee endpoints, to agents operating infrastructure or processing sensitive customer data, to fully autonomous cloud workflows. Agents operate with human credentials and gain real system access, and introduce a brand-new attack surface. To secure an AI agent, you have to look deep in…

Upwind AI DR is Generally Available: metaCatch Compromised AI Agents in Real Time
We're excited to announce that Upwind AI DR (AI Detection & Response) is now generally available. AI DR gives security teams real-time detection and response for the AI agents running in production, not by bolting on a new sensor, but by extending the runtime intelligence Upwind already has. The Upwind Cloud & AI Security Platform…

Focus Mode for AI Security: A Dedicated Workspace for Identifying and Securing Your AI Stack
When we launched Focus Mode, we built it around the way security teams actually work: Vulnerability Management, Cloud Security Posture, Attack Surface Management, Threat Detection & Response, Administration. Each one strips away everything unrelated to the job at hand. AI Security is the next domain in the Focus Mode lineup, and it's built for a…

Upwind brings Custom Detection Policies for APIs
Every API has a different risk profile. An internal billing endpoint and a public-facing authorization endpoint don't fail the same way. They don't get attacked the same way either. A generic ruleset can't account for that. Custom rules can, and now those rules can see sensitive data too. This new release brings two things together…

Complete KSPM: From Pull Request to Production Runtime
Kubernetes environments move fast. Workloads appear and disappear, container images change continuously, services are exposed, permissions evolve, and development teams deploy updates throughout the day. But most cloud security platforms force practitioners to investigate Kubernetes risk through interfaces designed for the broader cloud, leaving teams to manually filter the noise before they can begin investigating…

Revolutionizing Security Investigations with the Upwind MCP Server
Frontier AI models combined with a rampant rate of new critical vulnerabilities mean speed and context are everything. When a critical production service starts behaving suspiciously, every second spent jumping between different tools and dashboards is a second lost to a potential attacker. At Upwind, we are excited to introduce a game-changer for security teams:…

Upwind gives you SBOM coverage across every cloud workload
Software supply chain risk doesn't stop at the container boundary. Most organizations still run a meaningful share of production workloads on virtual machines across legacy services, data pipelines, and infrastructure that was never containerized. The Upwind Platform creates SBOMs at runtime, delivering greater accuracy than build-time tools by continuously monitoring your live environment. Format adds…

Find What Matters with Upwind Focus Mode
Focus Mode is now available in the Upwind platform, giving security teams a faster, more focused way to work. Instead of navigating across the platform, you can switch to Focus Mode to slice and dice the Upwind platform by Vulnerability Management, Cloud Security Posture, Attack Surface Management, Administration, or Threats, and starting next week, AI…

Introducing Early Advisories: Turn Emerging Threats into Action
We’re excited to introduce Early Advisories as part of the Upwind platform. Powered by Upwind's security research team, Early Advisories notify customers about emerging threats, including zero-days and supply chain attacks, before they receive a CVE identifier. Early Advisories are published directly into the Vulnerabilities module alongside CVE-based findings and automatically correlated with your live…

Protect Windows Workloads Wherever They Run
Windows workloads remain a critical part of modern cloud environments. From business applications and identity services to databases and internal tooling, Windows Server hosts often support some of the most important pieces of the enterprise stack. Upwind is extending runtime protection and visibility to Windows Server hosts running in private cloud and on-premises environments, including…

Realtime Data Security, Across Every Cloud
If you asked most security leaders where all of their data is flowing, which workloads and AI services are accessing it, and whether it's exposed, only a few could answer with confidence, and almost none would have the answer in real time.Not because that data is not available, but because it's scattered across multiple cloud…

Announcing Upwind AI Sensor for Endpoints
Today, we are excited to announce the Upwind AI Sensor for Endpoints! In the world we've known until now, the threat model was familiar. A developer accidentally commits a secret to a repository. A DevOps engineer exposes sensitive data to the internet. Someone deploys a workload carrying a critical vulnerability. To deal with these risks,…