❯ Upwind Reportedly Raises $300 Million for Cloud Runtime Security

Familiar Investors ReturnCloud-security company Upwind raised about $300 million at a valuation of roughly $3.8 billion, co-led by Bessemer Venture Partners and TCV, CTech reported. It combines cloud scans with runtime data to identify exposed vulnerabilities and attacks in progress. Salesforce Ventures, Greylock, Craft Ventures and Cyberstarts were among the participants.

A Year of FundraisingUpwind announced a $250 million Series B in January and said in March that Salesforce Ventures was joining that round. This week brought reports of another roughly $300 million financing, classified as Series C by SiliconANGLE. Comparing CTech’s roughly $1.5 billion valuation at the start of the year with the latest roughly $3.8 billion figure gives an increase to about 2.5 times the earlier level; the $1.8 billion starting figure in some reporting is not used here. Crunchbase lists total funding of $730 million. The fundraising sequence is clear, but the reported new round should still be distinguished from the Series B formally announced by the company.

Risk in Its Operating ContextUpwind starts with how applications are actually running, then prioritizes action. Its website describes live asset inventories, exposure assessment and attack detection, connecting services, identities, network access and data flows. This lets security teams prioritize issues that are both active and reachable instead of relying solely on static severity ratings. The team also has cloud-platform experience: according to the company, its founders previously built cloud-optimization provider Spot.io, which NetApp acquired. The differentiation rests on data from live environments and engineering experience. Whether it consistently reduces the burden on security teams must be demonstrated in customer use.

Earning a Lasting BudgetSuch a platform earns a lasting budget by helping understaffed security teams address genuinely urgent issues. Connecting more cloud and AI services expands coverage but makes false positives, missed threats and permission management harder. For investors, remediation efficiency is closer to commercial value than the number of vulnerabilities discovered: do customers shorten investigations, extend deployment and renew? With valuation rising quickly, sales and implementation must keep pace. Otherwise, broader feature coverage merely adds deployment costs without automatically improving retention.

▪ SIGNALA cloud-security platform gains pricing power by helping customers decide what to fix first, rather than putting more alerts on one screen.