Product
Upwind Code Brings Cloud Security Into the Development Control Plane
Cloud applications begin long before they reach the cloud. Source code, open-source dependencies, infrastructure definitions, container images and pull requests all shape what will eventually run in production. Yet these layers are often secured separately. Software Composition Analysis (SCA) tools inspect dependencies, Infrastructure as Code (IaC) scanners inspect configuration files, container scanners inspect artifacts and…
Building Autonomous Cloud & AI Security
How Upwind’s Agentic Pack uses NVIDIA Nemotron 3 Super and NVIDIA garak agent breaker probe to continuously validate cloud posture, attack surfaces, and AI applications. By: Avital Harel, Alon Saban, Yuval Elarat (Upwind). Eliya Cohen, Shiri Hochhauser, Orel Hazai (NVIDIA) Executive Summary AI-generated code, autonomous agents, MCP servers, and cloud-native architectures are transforming how software is…
Announcing the Upwind AI Context Scanner – Securing AI Agents’ Instructions, Skills and Model Context
AI agents are spreading across enterprise operations, from local coding tools on employee endpoints, to agents operating infrastructure or processing sensitive customer data, to fully autonomous cloud workflows. Agents operate with human credentials and gain real system access, and introduce a brand-new attack surface. To secure an AI agent, you have to look deep in…
Upwind AI DR is Generally Available: metaCatch Compromised AI Agents in Real Time
We're excited to announce that Upwind AI DR (AI Detection & Response) is now generally available. AI DR gives security teams real-time detection and response for the AI agents running in production, not by bolting on a new sensor, but by extending the runtime intelligence Upwind already has. The Upwind Cloud & AI Security Platform…
Focus Mode for AI Security: A Dedicated Workspace for Identifying and Securing Your AI Stack
When we launched Focus Mode, we built it around the way security teams actually work: Vulnerability Management, Cloud Security Posture, Attack Surface Management, Threat Detection & Response, Administration. Each one strips away everything unrelated to the job at hand. AI Security is the next domain in the Focus Mode lineup, and it's built for a…
Upwind brings Custom Detection Policies for APIs
Every API has a different risk profile. An internal billing endpoint and a public-facing authorization endpoint don't fail the same way. They don't get attacked the same way either. A generic ruleset can't account for that. Custom rules can, and now those rules can see sensitive data too. This new release brings two things together…
Complete KSPM: From Pull Request to Production Runtime
Kubernetes environments move fast. Workloads appear and disappear, container images change continuously, services are exposed, permissions evolve, and development teams deploy updates throughout the day. But most cloud security platforms force practitioners to investigate Kubernetes risk through interfaces designed for the broader cloud, leaving teams to manually filter the noise before they can begin investigating…
Revolutionizing Security Investigations with the Upwind MCP Server
Frontier AI models combined with a rampant rate of new critical vulnerabilities mean speed and context are everything. When a critical production service starts behaving suspiciously, every second spent jumping between different tools and dashboards is a second lost to a potential attacker. At Upwind, we are excited to introduce a game-changer for security teams:…
Upwind gives you SBOM coverage across every cloud workload
Software supply chain risk doesn't stop at the container boundary. Most organizations still run a meaningful share of production workloads on virtual machines across legacy services, data pipelines, and infrastructure that was never containerized. The Upwind Platform creates SBOMs at runtime, delivering greater accuracy than build-time tools by continuously monitoring your live environment. Format adds…
Find What Matters with Upwind Focus Mode
Focus Mode is now available in the Upwind platform, giving security teams a faster, more focused way to work. Instead of navigating across the platform, you can switch to Focus Mode to slice and dice the Upwind platform by Vulnerability Management, Cloud Security Posture, Attack Surface Management, Administration, or Threats, and starting next week, AI…
Introducing Early Advisories: Turn Emerging Threats into Action
We’re excited to introduce Early Advisories as part of the Upwind platform. Powered by Upwind's security research team, Early Advisories notify customers about emerging threats, including zero-days and supply chain attacks, before they receive a CVE identifier. Early Advisories are published directly into the Vulnerabilities module alongside CVE-based findings and automatically correlated with your live…
Protect Windows Workloads Wherever They Run
Windows workloads remain a critical part of modern cloud environments. From business applications and identity services to databases and internal tooling, Windows Server hosts often support some of the most important pieces of the enterprise stack. Upwind is extending runtime protection and visibility to Windows Server hosts running in private cloud and on-premises environments, including…