Upwind Raises 400 Million Dollars at a 3.8 Billion Dollar Valuation

The Upwind funding round in numbers

Cloud security startup Upwind said on October 28 that it raised 400 million dollars in a funding round led by Bessemer Venture Partners, valuing the company at 3.8 billion dollars. Existing investors including Greylock, Cyberstarts, Craft Ventures, Salesforce Ventures, Alta Park, and TCV joined in, and Canapi Ventures came in as a new backer. Total funding since the company's founding in 2022 now passes 800 million dollars.

The valuation jump is the headline. Upwind was valued at about 900 million dollars in a December 2024 raise of 100 million dollars. Its 250 million dollar Series B nine months ago came without a disclosed valuation. Going from 900 million to 3.8 billion in under two years means investors are paying for growth they expect, not just growth already delivered. That is normal in a hot security market, and it is also how disappointments get priced in later.

What Upwind actually sells

Upwind builds cloud security software that watches cloud infrastructure as it runs, rather than only scanning it before deployment. The pitch is simple: cloud environments change constantly, with new services, permissions, and workloads spinning up every day, and a security tool that only checks a snapshot will miss the drift. Upwind's product is meant to catch misconfigurations, exposed resources, and risky changes in real time, and to tell teams which problems actually matter instead of flooding them with alerts.

That last part is where cloud security tools live or die. Security teams are drowning in findings. A tool that reports ten thousand issues, most of them harmless in context, gets ignored. A tool that narrows the list to the handful of issues an attacker could actually reach earns trust. Upwind says the new money will fund product expansion, which in practice usually means deeper coverage of more cloud services, better prioritization, and more automation for fixing problems without a human clicking through each one.

Why investors are paying up now

Cloud security is one of the few software categories where budgets keep growing even when other spending tightens. Every company moving workloads to the cloud creates more surface to protect, and every breach story in the news makes a chief information security officer's budget request easier to approve. Upwind sits in the middle of that demand, and its investor list reads like a who's who of firms that have backed security winners before.

There is also a consolidation angle. Large platform vendors keep buying point security tools and bundling them into suites. A well-funded independent vendor can either grow into a platform itself or become an acquisition target at a much higher price. Bessemer leading a round this size suggests investors see Upwind as a platform candidate, not a feature waiting to be bought. The risk is the same as always: a big round raises expectations, and the next round, or an exit, has to justify a 3.8 billion dollar starting point.

What to watch next

Three things will tell you whether this valuation holds. First, customer growth: is Upwind landing large enterprises, or mostly mid-market companies that churn faster? Second, product depth: does it cover the messy reality of multi-cloud setups, where a company runs workloads on two or three providers at once? Third, hiring and burn: 400 million dollars buys a lot of runway, but it also buys pressure to grow headcount fast, and fast hiring in security engineering is hard to do well.

For founders watching this deal, the lesson is narrower than "security is hot." Upwind raised its big round after years of building in a specific, painful problem: runtime cloud risk. It did not pitch a vague AI security story. It pitched a product for a budget line that already exists. That is a useful test for any startup pitch: if the buyer already has a budget for this problem, the sale is about being better. If you have to convince them the problem exists, the sale is much harder. See also Mave's 34 million dollar round for AI security investigations for a smaller, earlier-stage version of the same trend.