Integrations
Upwind Integrations
Integrate Upwind with your extended cloud ecosystem for the most efficient and seamless cloud security experience.
Popular Integrations
AWS Cloud Trail
Enable real-time monitoring and compliance tracking with AWS CloudTrail logs, seamlessly integrated into Upwind for proactive security management.
GitHub Actions
Correlate Continuous Integration (CI) events from GitHub Actions with the active artifacts and images in your cloud runtime environment.
Slack
Send real-time alerts and collaborate seamlessly by pushing Upwind detections and notifications directly to Slack channels.
Jira
Automatically create and update tickets in Jira, based on Upwind's findings.
Artificial Intelligence

Open AI chatGPT
Use ChatGPT as the AI model powering Upwind AI capabilities through Bring Your Own Model (BYOM).

xAI Grok
Use Grok as the AI model powering Upwind AI capabilities through Bring Your Own Model (BYOM).

OpenAI Enterprise
Connect your OpenAI Enterprise organization to gain runtime insights and visibility into your AI models, jobs, datasets, and activity.

Anthropic Enterprise
Scan your Claude Enterprise environment to gain visibility into AI usage, permissions, activity, and runtime assets across your organization.

Anthropic Claude
Use Claude as the AI model powering Upwind AI capabilities through Bring Your Own Model (BYOM).
Application Security

Boost
Enrich and focus appsec teams using boost security with upwind inventory and runtime insights.

ArmorCode
Push runtime security findings from Upwind directly into ArmorCode for streamlined risk management.

Ox
Enrich OX findings with Upwind’s runtime validation for end-to-end visibility from code to cloud.

Tromzo
Pull runtime findings and issues from upwind to automate the remediation lifecycle with tromzo.

Cycode
Send vulnerabilites and runtime findings from Upwind to Cycode.
JIT
Pull runtime data from Upwind to quickly understand the security impact of potential vulnerabilities in runtime.
Legit
Pull CVE and runtime context to code to vulnerabilities correlation and prioritization.
Asset and Exposure Management
Audit Logs

Azure Activity Logs
Monitors and analyzes Azure activity logs for real-time visibility, security, and compliance
Google Cloud Audit Logs
Detection of suspicious activities, administrative actions, and security-relevant events across your environment
EKS Control Plane Logs
Monitor and detect anomalies in control plane logs
AWS Log Reporter
Integrate AWS log reporter to stream logs from Amazon CloudWatch into the Upwind console.
GKE Control Plane Logs
Enable Upwind's collection of GKE Control Plane logs to detect malicious GKE API calls.
Amazon EKS Audit Logs
Enable Upwind's collection of EKS Control Plane logs to detect malicious EKS API calls.
AWS Cloud Trail
Enable real-time monitoring and compliance tracking with AWS CloudTrail logs, seamlessly integrated into Upwind for proactive security management.
Agentic Security Platforms

Mave Security
Mave pulls Upwind runtime findings to investigate, contextualize, and help mitigate security threats.

Rad Security
Pull Upwind runtime findings and threat data to triage and prioritize security risks with real-time context.

Terra Security
Validate security risks with real-time cloud context and runtime evidence.

Cisco Cloud Control
Use Upwind MCP to triage and resolve IT and security issues with cloud control suite.

Exaforce
Ingest Upwind findings to exaforce for triage and investigation.

Surf.ai
Accelerate Misconfiguration and vulnerabilities Upwind findings with Surf.ai remediation platform.

Prophet
Pull upwind findings, event and detections and streamline remediation with prophet

Torq
Combine Upwind’s runtime detections with Torq’s AI SOC platform to accelerate threat triage, investigation, and automated response.

7AI
Pull runtime detections, events and findings to 7AI to create ai driven security automation
CI/CD

Origin
Use the Upwind app to connect to Origin repositories

Azure DevOps
Integrate Azure DevOps to scan your repositories, enrich workload data, and improve visibility across your development lifecycle.

BitBucket
Scan your repositories, enrich workload data, and improve visibility across development lifecycle
Harbor on K8s
Integrate Harbor with Upwind's Shift Left security platform to enable runtime-aware image scanning.
Gitlab
Scan your repositories, enrich workload data, and improve visibility across development lifecycle

GitHub
Fetch workloads related information to enrich upwind findings
CustomCI
Correlate Continuous Integration (CI) events from custom CI platforms with the active artifacts and images in your cloud runtime environment.

CircleCI
Correlate Continuous Integration (CI) events from Circle CI with the active artifacts and images in your cloud runtime environment.
GitHub Actions
Correlate Continuous Integration (CI) events from GitHub Actions with the active artifacts and images in your cloud runtime environment.
CustomCD
Correlate Continuous Delivery (CD) events from custom CD platforms with the active artifacts and images in your cloud runtime environment.
Compliance Management
Cyber Risk Quantification
Data Lakes & Pipelines

Databahn
Pull upwind runtimes findings, issues and detections into databhan platform.

Cribl
Ingest upwind runtime detections and findings into cribl.

Monad
Pull upwind findings via a monad connector.
Sola
Sola integrates with Upwind to deliver runtime insights that empower security teams with the context and intelligence needed to solve challenges faster.
Data Platforms
Data Security
IAM
Identity Security

Britive
Pull upwind runtime findings to enrich britive data

Linx Security
Pull Upwind's identities and roles data to linx
Google Cloud Identity
View all identities defined by your identity provider.

AWS Identity Center
View all identities defined by your identity provider

Cisco Duo
Use Cisco Duo IDP to provide SAML SSO based authentication

Microsoft Entra ID
Use MS Entra IDP to provide SAML SSO based authentication

Ping Identity
Use Pingone IDP to provide SAML SSO based authentication

Jump Cloud
Use jumpcloud IDP to provide SAML SSO based authentication

One Login
Use one login IDP to provide SAML SSO based authentication

Okta
Use Okta IDP to provide SAML SSO based authentication
Insider Threat
Preventive Guardrails Platforms
MDR

eSentire
Pull upwind runtime threat data and findings into Esentire MDR platform.
Daylight
Pull upwind threats and detections to investigate with daylight

Tamnoon
Pull upwind's runtime events, detections and findings and automate remediation with Tamnoon agentic platform.
Reliaquest
Ingest Upwind runtime detections into ReliaQuest GreyMatter to accelerate response.
Sygnia
Pull Threat Detection Issues and runtime findings into Sygnia for IR team investigation.
Monitoring
SOAR & Automations

N8n
Use the Upwind n8n connector to drive security automations.

Workato
Use Upwind Extensive API suite within Workato Hyper automation platform

Mindflow
Use mindflow to create workflows and automations with Upwind's API endpoints

Blinkops
Automate security operations with blinkops and upwind
Tines
Combine Upwind’s real-time, prioritized cloud alerts with Tines’ no-code automation.
Zest
Pull runtime data from upwind and streamline the actions with zest analysis.
Intezer
Automate the investigation and response in intezer based on Upwind's runtime findings, threats and vulnerabilities.
Secured Components

Chainguard
Upwind now natively supports Chainguard secure images, enriching them with real-time runtime context and an aligned CVE view

Minimus
Upwind identifies container images built on Minimus’s hardened Linux distribution

Echo
Upwind surfaces Echo’s hardened base images to stop container CVEs before runtime
SIEM

Microsoft Defender
Bring Microsoft Defender for Cloud detections into Upwind for a unified cloud threat view.

Vega
Pull Upwind inventory and runtime findings into Vega to enrich and prioritize investigations.

Sekoia
Pull runtime findings and detections into Sekoia platform

Microsoft Sentinel
Pull upwind runtime detections and findings into Sentinel Siem

Sumo Logic
Pull upwind findings, detections and events to sumologic siem to streamline security findings correlation and handling

Panther
Send Upwind’s runtime insights to Panther’s SIEM to centralize vulnerabilities and detections, streamline investigations, and speed up response.

Coralogix
Pull runtime security findings from upwind into Coralogix to enrich alerts and speed up security fixes.
Hunters
Ingest Upwind data, events, incidents and threats to Hunters SoC platform.
Vulnerability Management & Response

Dux Security
Pull Upwind’s runtime-enriched vulnerability data to prioritize exposure and drive remediation based on real-world risk.

Brinqa
Use upwind connector to pull inventory and vulnerabilities

MazeHQ
Pull Upwind runtime findings to streamline investigation with MazeHQ.

Zafran
Pull upwind runtime vulnerabilities and to analyze and manage exposure with Zafran

Cogent
Leverage Upwind’s high-fidelity runtime insights inside Cogent to drive smarter decisions, faster investigations, and automated remediation.

Averlon
Pull Upwind vulnerability findings to Averlon for vulnerability management and remediation.
Seemplicity
Pull vulnerabilities from Upwind to Seemplicity vulnerability management.
Ticketing & Messaging

Google Chat
Integrate with Google Chat to receive detections & findings notifications in your Chat space.

Rootly
Create alerts and trigger incident response workflows based on runtime findings.

PagerDuty
Manage incidents based on detections and findings in your PagerDuty service

Linear
Pull upwind runtime insights to enrich and update linear issues.

Service now ITSM
Open and update a ServiceNow ticket in one of your tables in ServiceNow
MS Teams
Receive detections & findings notifications in your Teams channel.
Slack
Send real-time alerts and collaborate seamlessly by pushing Upwind detections and notifications directly to Slack channels.
Jira
Automatically create and update tickets in Jira, based on Upwind's findings.













