Skip to content
SPECIFICTION
Get listed

Upwind CNAPP

upwind.io

WebAPI
Visit upwind.io
Spec score 7.0 #12 of 21 in Cloud-Native Application Protection Platforms

What it is

Upwind CNAPP brings application security, cloud security posture, and real-time protection together across the cloud lifecycle, from development through production. Agentless cloud scanners and runtime sensors build live inventory, identify exposures, and protect workloads as they run. Listed capabilities include CSPM, CIEM, DSPM, AI-SPM, attack path analysis, vulnerability management, Kubernetes and serverless security, API security, DAST, and cloud detection and response. Upwind describes live inventory and high-signal exposure prioritization as ways to focus on exposures. The platform supports AWS, Google Cloud, Microsoft Azure, and Oracle Cloud, and is available through web and API. Its integrations directory includes tools such as Jira, Slack, GitHub Actions, GitLab, and Argo CD, as well as ChatGPT, xAI Grok, OpenAI Enterprise, Anthropic Enterprise, and Claude. Upwind says stored data is protected with encryption, access controls, and authentication, and data in transit with TLS and HSTS. The Trust Center lists SOC 2 Type 2, ISO/IEC 27001:2022, and GDPR. Pricing is on request; the CNAPP page invites prospective customers to request a demo.

Spec sheet

Product
Upwind unifies application security, security posture, and real-time protection on one platform for cloud and AI environments.Read 3 Oct 2026 · upwind.io
Intended users
Upwind describes the platform as serving security teams across development, cloud, runtime, and SOC workflows.Read 3 Oct 2026 · upwind.io
Deployment
The Outpost deployment model runs cloud scanners inside the customer’s AWS environment.Read 3 Oct 2026 · docs.upwind.io
Integrations
The integrations page lists Jira, Slack, GitHub Actions, and AWS CloudTrail among its popular integrations.Read 3 Oct 2026 · upwind.io
Compliance
Upwind’s Trust Center lists SOC 2 Type 2, ISO/IEC 27001:2022, and GDPR among its compliance items.Read 3 Oct 2026 · trust.upwind.io
Support
The documentation offers 24/7 support through live chat in the management console, email, or a shared Slack channel.Read 3 Oct 2026 · docs.upwind.io
Headquarters
San Francisco, California, United StatesRead 28 Sep 2026 · upwind.io
Founded
2022Read 28 Sep 2026 · upwind.io
Company
Upwind says it was founded by the team behind Spot.io, which was acquired by NetApp.Read 2 Oct 2026 · upwind.io
AI integrations
The integrations directory lists ChatGPT, xAI Grok, OpenAI Enterprise, Anthropic Enterprise, and Claude integrations.Read 2 Oct 2026 · upwind.io
Cloud platforms
The site links to AWS, Google Cloud, Microsoft Azure, and Oracle Cloud partner pages.Read 2 Oct 2026 · upwind.io
Cloud support
Its documentation describes cloud integrations for AWS, Microsoft Azure, Google Cloud, and Oracle Cloud.Read 3 Oct 2026 · docs.upwind.io
CNAPP
Upwind unifies application security, security posture, and real-time protection on one platform to reduce risk from development through production.Read 2 Oct 2026 · upwind.io
Coverage
Its listed capabilities include CSPM, CIEM, DSPM, vulnerability management, attack path analysis, container and Kubernetes security, API security, and cloud detection and response.Read 3 Oct 2026 · upwind.io
Data protection
Upwind says data in transit is protected with TLS and HSTS, while stored data is protected with encryption, access controls, and authentication.Read 3 Oct 2026 · docs.upwind.io
Detection
The platform combines agentless cloud scanners with runtime sensors and real-time intelligence.Read 3 Oct 2026 · upwind.io
Lifecycle coverage
The platform covers application security, cloud security posture, and real-time protection across the cloud lifecycle.Read 2 Oct 2026 · upwind.io
Pricing model
Upwind says its full CNAPP is included in one price, with CSPM, runtime sensor, code scanning, and data security included.Read 2 Oct 2026 · upwind.io
Prioritization
Upwind describes live inventory and high-signal exposure prioritization as platform capabilities.Read 3 Oct 2026 · upwind.io
Runtime context
Upwind combines agentless cloud scanners and runtime sensors to provide live inventory, identify exposures, and protect workloads in real time.Read 2 Oct 2026 · upwind.io
Sales path
The CNAPP page directs prospective customers to request a demo.Read 2 Oct 2026 · upwind.io
Security capabilities
Listed capabilities include CSPM, CIEM, DSPM, AI-SPM, attack path analysis, vulnerability management, Kubernetes and serverless security, CDR, API security, DAST, and MDR.Read 2 Oct 2026 · upwind.io
Security responsibility
Upwind describes a shared responsibility model for controls inherited from its cloud service providers and security responsibilities to customers.Read 2 Oct 2026 · upwind.io
SOC 2
Upwind's security trust center displays a SOC 2 image under its security commitment section.Read 2 Oct 2026 · upwind.io

Strong points and limits

Strong points

  • Combines cloud posture and real-time workload protection
  • Agentless scanners and runtime sensors
  • Lists Kubernetes, serverless, API, and identity capabilities
  • Supports AWS, Google Cloud, Azure, and Oracle Cloud
  • 24/7 support through chat, email, or shared Slack

Limits

  • Pricing is available on request
  • CNAPP page directs prospects to request a demo
  • Scanner Outpost deployment runs inside customer AWS environment

Who it suits

Upwind describes the platform for security teams working across development, cloud, runtime, and SOC workflows. It suits teams seeking cloud coverage across AWS, Google Cloud, Azure, and Oracle Cloud.

Verdict

Upwind CNAPP combines lifecycle security coverage with runtime context and integrations across four cloud providers. Pricing requires a request, so prospective customers need to follow the demo path for details.

Where Specifiction places it

Alternatives to Upwind CNAPPAll alternatives →