Upwind Security is finalizing a $300 million funding round that values the company at $3.8 billion, more than double the valuation it held only eight months ago.

Bessemer Venture Partners is leading the round, with participation from existing backers. The raise follows a $250 million round in January 2026 that initially valued Upwind at $1.5 billion, later extending to approximately $1.6 billion. With the new capital, the San Francisco-based startup has now raised more than $680 million in total funding. The round comes amid a broader environment in which investors have shown sustained appetite for cloud security startups, driven by enterprises shifting workloads across multiple providers and, increasingly, layering AI systems on top of them.

From startup to cybersecurity heavyweight

Upwind was founded in 2022 by Amiram Shachar and former members of the Spot.io team. The company builds a runtime-focused cloud security platform that monitors cloud infrastructure in real time and identifies which threats genuinely matter to security teams. That runtime approach distinguishes it from earlier generations of cloud security tools that primarily scan configurations and code before deployment; by analyzing live workloads, the platform aims to cut through the high volume of alerts that security teams face and focus on threats that are actively exploitable.

Upwind's annual recurring revenue stood below $20 million at the end of 2025. By mid-2026, that figure had grown to an estimated $50 million to $60 million. The company is targeting $100 million in ARR by the end of this year. That growth pace—roughly tripling revenue in six months—places Upwind among the faster-scaling startups in the cloud security category, a segment where reaching the $100 million ARR mark is often treated as a milestone signaling enterprise-grade traction.

Its client roster includes Siemens, Peloton, and Roku, spanning industrial technology, consumer hardware, and streaming infrastructure.

The Wiz-shaped gap in the market

The investor enthusiasm around Upwind is closely tied to Google's $32 billion acquisition of Wiz, a deal that effectively removed one of the most prominent independent cloud security players from the market. With Wiz absorbed into a major cloud vendor, buyers seeking vendor-neutral cloud security platforms have fewer large independent options, creating an opening that startups like Upwind are positioned to fill.

A wave of M&A activity across the cybersecurity sector in late 2025 and early 2026 further reinforced the view that standalone cloud security companies are valuable acquisition targets.

Upwind's investor base includes Bessemer Venture Partners, Craft Ventures, Salesforce Ventures, and Stephen Curry's investment fund.

What the valuation jump signals

Climbing from $1.5 billion to $3.8 billion in under a year is an aggressive trajectory by any standard. At the midpoint of its estimated mid-2026 ARR, the new valuation implies a revenue multiple well above the levels at which mature public software companies trade, a premium investors are willing to pay for rapid growth in a consolidating market. Upwind's platform uses real-time context to prioritize risks, helping security teams determine what to address first across multi-cloud environments that have grown further with the addition of AI workloads. For the company, the key test ahead is whether it can hit its $100 million ARR target while competing against both established platform vendors and other well-funded independents chasing the same post-Wiz opportunity.