Upwind CISO Fireside Chats: Episode 2

June 25, 2025

Upwind CISO Fireside Chats: Episode 2

In this episode, we sit down with Jim Routh, former CISO at American Express, MassMutual, CVS, and more, for a conversation led by our CSO, Rinki Sethi.

From accidentally becoming one of the industry’s first CISOs to redefining what leadership means in cybersecurity, Jim shares hard-earned insights on stakeholder management, runtime security, and the future of software development with AI.

This series brings you honest, real-world conversations with the most experienced and forward-thinking security leaders out there.

Contents

Key Takeaways: Agentic AI security is an architecture problem, not a policy problem. Most organizations have adopted AI agents in the form of coding assistants, autonomous workflow tools, internal chatbots connected to production systems, but without establishing the foundational security frameworks those systems require. The adoption pressure is real. Telling your engineering team to stop…

Upwind Named a Strong Visionary Leader in Frost & Sullivan’s 2026 Cloud/Application Runtime Security Radar

<br />
<b>Warning</b>: Undefined variable $photo in <b>/nas/content/live/landing173/wp-content/themes/bricks/includes/elements/code.php(236) : eval()'d code</b> on line <b>24</b><br />
<br />
<b>Warning</b>: Trying to access array offset on value of type null in <b>/nas/content/live/landing173/wp-content/themes/bricks/includes/elements/code.php(236) : eval()'d code</b> on line <b>24</b><br />

Tomer Hadassi

We're excited to share that Frost & Sullivan has recognized Upwind as a Strong Visionary Leader in the Frost Radar™: Cloud/Application Runtime Security, 2026. This recognition highlights the company's innovation, growth, and leadership in the emerging Cloud-Native Application Detection and Response (CNADR) market. For us, the recognition is meaningful not simply because of where Upwind…

Upwind brings Custom Detection Policies for APIs

Danilo Michelucci

Every API has a different risk profile. An internal billing endpoint and a public-facing authorization endpoint don't fail the same way. They don't get attacked the same way either. A generic ruleset can't account for that. Custom rules can, and now those rules can see sensitive data too. This new release brings two things together…

Upwind CISO Fireside Chats: Episode 2