upwindxAWS-Security-Hub-1600x960

The Next Wave Is Here: Upwind is now seamlessly accessible within the AWS security operating model

Amiram Shachar February 26, 2026

The Next Wave Is Here: Upwind is now seamlessly accessible within the AWS security operating model

Upwind is now live inside AWS Security Hub Console.

I’m incredibly excited to announce one of the biggest milestones in our company’s journey.  This tells us we’re on the right path to being the best cloud security company in the world. There isn’t any better validation. 

Starting today, Upwind is one of roughly ten companies in the world selected to extend AWS Security Hub as the CNAPP partner. That means AWS customers everywhere can now access Upwind directly inside the AWS console, with zero onboarding friction, zero deployment complexity, and unified billing through AWS.

You find us. You click. You’re protected.

Cloud security the way it should be.


What this means for AWS customers

Millions of teams run their businesses on AWS. Until now, getting serious about CNAPP meant navigating vendor trials, procurement cycles, and integration headaches before you even got to the security work itself. That changes now.

From inside the console you already live in, you can access Upwind’s full platform: vulnerability management, container security, data scanning, API security, and our runtime-first approach to cloud protection. The inside-out way.


What this means for Upwind

Earning a spot in AWS Security Hub is not something you apply for. It’s something you earn through the trust of the teams you’ve partnered with, the customers who’ve believed in you, and the work you’ve put in when no one was watching.

We are deeply grateful to the AWS teams for building this partnership with us. And to Chet Kapoor and the teams who championed this collaboration, thank you. Your trust means everything.


We’re just getting started

Upwind was built on a simple belief: that runtime context changes everything in cloud security. That if you understand what’s actually running, you can cut through the noise and protect what actually matters.

That belief is what brought us here. And it’s what drives everything we’re building next.

To every customer who took a chance on us early, who pushed us to go faster, who shared the vision of what cloud security could be: this is yours too.

Up & Up.

Amiram.

Contents

Further Reading

org chart - dark mode

The Org Chart is The Wrong Security Boundary

The department model of dividing companies into groups earned its place. Finance gets the finance applications, engineering gets the repositories, HR gets the HRIS, and the boundaries hold because software was bought per function and used per function. Identity and access management platforms, such as Active Directory and Okta, were built around exactly that. Groups…
behind-the-curtain-part-03

What’s Behind the Curtain? AWS Bedrock AgentCore Runtime Tear Down – Part III

Recap In Part I and Part II, we: Networking and VPC Mode Network Isolation Testing The microVM is assigned an IPv6 address matching the value in the JWT. Across multiple runs, all addresses shared the same 2600:1f18::/32 prefix, but cross-microVM communication always failed. We attempted to reach the host EC2 IMDS by manipulating the route…
behind-the-curtain-part-02

What’s Behind the Curtain? AWS Bedrock AgentCore Runtime Tear Down – Part II

Recap In Part I, we explored the AgentCore Runtime microVM from the inside and discovered we weren't alone - four platform binaries were running alongside our code, and one of them was quietly shipping logs to an AWS-internal S3 bucket. We left off with a question: what can we learn from these internal components, and…
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS