Upwind Security has closed a $400 million Series C funding round, the company announced Wednesday, confirming it finished a financing effort first reported in September. The round values the Israeli-founded cybersecurity firm at $3.8 billion and arrives alongside the company's claim that its revenue quadrupled during 2026.
A Rapidly Escalating Valuation
Upwind's fundraising trajectory has accelerated sharply over the past year. The company raised $250 million in a Series B round in January that valued it at $1.5 billion, followed by a Salesforce Ventures investment that pushed the valuation to $1.6 billion. By September, Upwind had already secured roughly $300 million at the current $3.8 billion valuation, a figure now confirmed as the final size of its Series C after the additional $400 million close.
Bessemer Venture Partners led the latest round, with Canapi Ventures joining as a new backer alongside existing investors Cyberstarts, Greylock Partners, Craft Ventures, TCV, Salesforce Ventures, Leaders Fund and Alta Park Capital.
What the Platform Actually Does
Founded in 2022, Upwind builds security software focused on live cloud infrastructure rather than static code review. Its platform pulls real-time data from cloud workloads, APIs and AI agents to help security teams spot exploitable weaknesses and decide which risks to fix first. The company supports the major cloud providers-Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure-giving customers a single tool across multi-cloud environments.
A key part of Upwind's pitch involves specialized AI agents that investigate potential threats, verify whether flagged attack-surface issues are genuinely exploitable, and assist with fixing infrastructure problems. This approach aims to cut down the noise that often overwhelms security teams relying on alerts that turn out to be false positives.
Why AI Is Reshaping the Security Market
CEO and co-founder Amiram Shachar framed the investment around a broader shift in how companies build software and how attackers operate. "AI is fundamentally changing both the cloud infrastructure architecture and the scale of cyber threats and how organizations build and operate software," Shachar said, adding that combining real-time cloud and AI signals helps organizations find critical exposures, address risks before they're exploited, and detect active attacks.
That framing reflects a dynamic increasingly visible across the cybersecurity industry: as companies adopt AI-powered applications and autonomous agents at scale, their attack surface grows in ways traditional security tools weren't designed to monitor. At the same time, attackers are using AI to automate and scale their own operations, raising the stakes for real-time detection rather than periodic audits.