Popular Integrations

cloud_trail
AWS Cloud Trail
Enable real-time monitoring and compliance tracking with AWS CloudTrail logs, seamlessly integrated into Upwind for proactive security management.
github_actions
GitHub Actions
Correlate Continuous Integration (CI) events from GitHub Actions with the active artifacts and images in your cloud runtime environment.
slack
Slack
Send real-time alerts and collaborate seamlessly by pushing Upwind detections and notifications directly to Slack channels.
jira
Jira
Automatically create and update tickets in Jira, based on Upwind's findings.

Artificial Intelligence

ChatGPT
Open AI chatGPT
Use ChatGPT as the AI model powering Upwind AI capabilities through Bring Your Own Model (BYOM).
GROK
xAI Grok
Use Grok as the AI model powering Upwind AI capabilities through Bring Your Own Model (BYOM).
OpenAICORP
OpenAI Enterprise
Connect your OpenAI Enterprise organization to gain runtime insights and visibility into your AI models, jobs, datasets, and activity.
Anthropic
Anthropic Enterprise
Scan your Claude Enterprise environment to gain visibility into AI usage, permissions, activity, and runtime assets across your organization.
Claude
Anthropic Claude
Use Claude as the AI model powering Upwind AI capabilities through Bring Your Own Model (BYOM).

Application Security

Boost
Boost
Enrich and focus appsec teams using boost security with upwind inventory and runtime insights.
ArmorCode-3
ArmorCode
Push runtime security findings from Upwind directly into ArmorCode for streamlined risk management.
OX
Ox
Enrich OX findings with Upwind’s runtime validation for end-to-end visibility from code to cloud.
Tromzo
Tromzo
Pull runtime findings and issues from upwind to automate the remediation lifecycle with tromzo.
Cycode
Cycode
Send vulnerabilites and runtime findings from Upwind to Cycode.
Frame-30720
JIT
Pull runtime data from Upwind to quickly understand the security impact of potential vulnerabilities in runtime.
Legit-Logo
Legit
Pull CVE and runtime context to code to vulnerabilities correlation and prioritization.

Asset and Exposure Management

Armis
Armis
Send upwind runtime findings to consolidate and remediate issues
Axonius
Axonious
Unified cloud assets inventory to streamline security and exposure.
JupiterOne
JupiterOne
See Upwind cloud inventory and runtime insights within Jupiter one platform

Audit Logs

AzureCore (1)
Azure Activity Logs
Monitors and analyzes Azure activity logs for real-time visibility, security, and compliance
cloud_identity
Google Cloud Audit Logs
Detection of suspicious activities, administrative actions, and security-relevant events across your environment
cloudwatch
EKS Control Plane Logs
Monitor and detect anomalies in control plane logs
Frame-30719
AWS Log Reporter
Integrate AWS log reporter to stream logs from Amazon CloudWatch into the Upwind console.
gcp_cluster
GKE Control Plane Logs
Enable Upwind's collection of GKE Control Plane logs to detect malicious GKE API calls.
cloudwatch
Amazon EKS Audit Logs
Enable Upwind's collection of EKS Control Plane logs to detect malicious EKS API calls.
cloud_trail
AWS Cloud Trail
Enable real-time monitoring and compliance tracking with AWS CloudTrail logs, seamlessly integrated into Upwind for proactive security management.

Agentic Security Platforms

Mave (1)
Mave Security
Mave pulls Upwind runtime findings to investigate, contextualize, and help mitigate security threats.
RAD
Rad Security
Pull Upwind runtime findings and threat data to triage and prioritize security risks with real-time context.
Terra
Terra Security
Validate security risks with real-time cloud context and runtime evidence.
Cisco
Cisco Cloud Control
Use Upwind MCP to triage and resolve IT and security issues with cloud control suite.
Exaforce
Exaforce
Ingest Upwind findings to exaforce for triage and investigation.
Surf.ai
Surf.ai
Accelerate Misconfiguration and vulnerabilities Upwind findings with Surf.ai remediation platform.
Prophet
Prophet
Pull upwind findings, event and detections and streamline remediation with prophet
Torq-Logo
Torq
Combine Upwind’s runtime detections with Torq’s AI SOC platform to accelerate threat triage, investigation, and automated response.
7AI02
7AI
Pull runtime detections, events and findings to 7AI to create ai driven security automation

CI/CD

origin
Origin
Use the Upwind app to connect to Origin repositories
Azure DevOps
Azure DevOps
Integrate Azure DevOps to scan your repositories, enrich workload data, and improve visibility across your development lifecycle.
Bitbucket
BitBucket
Scan your repositories, enrich workload data, and improve visibility across development lifecycle
harbor
Harbor on K8s
Integrate Harbor with Upwind's Shift Left security platform to enable runtime-aware image scanning.
gitlab
Gitlab
Scan your repositories, enrich workload data, and improve visibility across development lifecycle
Github Automated-2
GitHub
Fetch workloads related information to enrich upwind findings
shield_gear-1
CustomCI
Correlate Continuous Integration (CI) events from custom CI platforms with the active artifacts and images in your cloud runtime environment.
CircleCI-2
CircleCI
Correlate Continuous Integration (CI) events from Circle CI with the active artifacts and images in your cloud runtime environment.
github_actions
GitHub Actions
Correlate Continuous Integration (CI) events from GitHub Actions with the active artifacts and images in your cloud runtime environment.
shield_gear
CustomCD
Correlate Continuous Delivery (CD) events from custom CD platforms with the active artifacts and images in your cloud runtime environment.

Data Lakes & Pipelines

Databahn
Databahn
Pull upwind runtimes findings, issues and detections into databhan platform.
Cribl
Cribl
Ingest upwind runtime detections and findings into cribl.
Monad
Monad
Pull upwind findings via a monad connector.
sola-security-logo
Sola
Sola integrates with Upwind to deliver runtime insights that empower security teams with the context and intelligence needed to solve challenges faster.

Data Platforms

Databricks (1)
Databricks
Connect Databricks for full visibility and security and AI context in Upwind.
Snowflake (1)
Snowflake
Connect Snowflake for full visibility and security and AI context in Upwind.

Data Security

Matters
Matters
Pull runtime findings to enrich and dynamically adjust risk scores based on real-world exposure and runtime context.
Cyera
Cyera
Pull runtime findings and detection to asses risk on sensitive data.

IAM

cloud_identity
Google Identity
View all identities that have been defined by your identity provider.
iam
AWS IAM
View all human identities that have been defined by your identity provider. 

Identity Security

britive
Britive
Pull upwind runtime findings to enrich britive data
LINX
Linx Security
Pull Upwind's identities and roles data to linx
cloud_identity
Google Cloud Identity
View all identities defined by your identity provider.
AWS-IdentityCenter
AWS Identity Center
View all identities defined by your identity provider
CiscoDuo
Cisco Duo
Use Cisco Duo IDP to provide SAML SSO based authentication
MicrosoftEntraID
Microsoft Entra ID
Use MS Entra IDP to provide SAML SSO based authentication
PingIdentity
Ping Identity
Use Pingone IDP to provide SAML SSO based authentication
JumpCloud
Jump Cloud
Use jumpcloud IDP to provide SAML SSO based authentication
OneLogin
One Login
Use one login IDP to provide SAML SSO based authentication
Okta
Okta
Use Okta IDP to provide SAML SSO based authentication

MDR

esentire
eSentire
Pull upwind runtime threat data and findings into Esentire MDR platform.
daylight-ai-logo
Daylight
Pull upwind threats and detections to investigate with daylight
Tamnoon
Tamnoon
Pull upwind's runtime events, detections and findings and automate remediation with Tamnoon agentic platform.
Reliaquest-logo-dark
Reliaquest
Ingest Upwind runtime detections into ReliaQuest GreyMatter to accelerate response.
Vector
Sygnia
Pull Threat Detection Issues and runtime findings into Sygnia for IR team investigation.

Monitoring

webhook
Custom Webhook
Send findings directly to your desired payload URL.
Splunk-2
Splunk
Send events and issue findings via outbound webhooks to your Splunk HTTP Event Collector.
datadog
Datadog
Use outbound Webhooks and send events and issues findings to your Datadog Events or Logs.

SOAR & Automations

n8n (1)
N8n
Use the Upwind n8n connector to drive security automations.
Workato
Workato
Use Upwind Extensive API suite within Workato Hyper automation platform
63656981-284a-fd7b-3513-86aa8d969800
Mindflow
Use mindflow to create workflows and automations with Upwind's API endpoints
ServiceNow-1
Blinkops
Automate security operations with blinkops and upwind
Frame-30721
Tines
Combine Upwind’s real-time, prioritized cloud alerts with Tines’ no-code automation.
Frame-30401
Zest
Pull runtime data from upwind and streamline the actions with zest analysis.
Frame-30402
Intezer
Automate the investigation and response in intezer based on Upwind's runtime findings, threats and vulnerabilities.

Secured Components

Chainguard (1)
Chainguard
Upwind now natively supports Chainguard secure images, enriching them with real-time runtime context and an aligned CVE view
67f93369f15385dea5315c9c_Minimus_Logo_Horizontal_Primary
Minimus
Upwind identifies container images built on Minimus’s hardened Linux distribution
Echo
Echo
Upwind surfaces Echo’s hardened base images to stop container CVEs before runtime

SIEM

Microsoft Defender
Microsoft Defender
Bring Microsoft Defender for Cloud detections into Upwind for a unified cloud threat view.
Vega (1)
Vega
Pull Upwind inventory and runtime findings into Vega to enrich and prioritize investigations.
Sekoia
Sekoia
Pull runtime findings and detections into Sekoia platform
MicrosoftSentinel
Microsoft Sentinel
Pull upwind runtime detections and findings into Sentinel Siem
Sumologic
Sumo Logic
Pull upwind findings, detections and events to sumologic siem to streamline security findings correlation and handling
Panther-3
Panther
Send Upwind’s runtime insights to Panther’s SIEM to centralize vulnerabilities and detections, streamline investigations, and speed up response.
Coralogix
Coralogix
Pull runtime security findings from upwind into Coralogix to enrich alerts and speed up security fixes.
Hunters-Logo
Hunters
Ingest Upwind data, events, incidents and threats to Hunters SoC platform.

Vulnerability Management & Response

Dux
Dux Security
Pull Upwind’s runtime-enriched vulnerability data to prioritize exposure and drive remediation based on real-world risk.
Brinqa
Brinqa
Use upwind connector to pull inventory and vulnerabilities
Maze
MazeHQ
Pull Upwind runtime findings to streamline investigation with MazeHQ.
ZAFRAN (1)
Zafran
Pull upwind runtime vulnerabilities and to analyze and manage exposure with Zafran
cogent
Cogent
Leverage Upwind’s high-fidelity runtime insights inside Cogent to drive smarter decisions, faster investigations, and automated remediation.
Averlon-2
Averlon
Pull Upwind vulnerability findings to Averlon for vulnerability management and remediation.
seemplicity-logo
Seemplicity
Pull vulnerabilities from Upwind to Seemplicity vulnerability management.

Ticketing & Messaging

GChat
Google Chat
Integrate with Google Chat to receive detections & findings notifications in your Chat space.
Rootly
Rootly
Create alerts and trigger incident response workflows based on runtime findings.
PagerDuty
PagerDuty
Manage incidents based on detections and findings in your PagerDuty service
Linear
Linear
Pull upwind runtime insights to enrich and update linear issues.
ServiceNow
Service now ITSM
Open and update a ServiceNow ticket in one of your tables in ServiceNow
teams
MS Teams
Receive detections & findings notifications in your Teams channel.
slack
Slack
Send real-time alerts and collaborate seamlessly by pushing Upwind detections and notifications directly to Slack channels.
jira
Jira
Automatically create and update tickets in Jira, based on Upwind's findings.
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS