Upwind Cloud Security
Upwind Cloud Security’s CSPM detects, contextualizes, and helps remediate cloud misconfigurations and exposures.
What Upwind Cloud Security is
Upwind Cloud Security’s CSPM detects, contextualizes, and helps remediate cloud misconfigurations and exposures. It inventories services, identities, and workloads across cloud accounts, then maps their relationships to help surface risky exposure paths. Risk prioritization draws on asset context, privileges, and connectivity. The platform continuously assesses posture against CIS, HIPAA, and NIST standards, while retaining evidence and remediation history for audits. It also detects exposed secrets, malware, and exploitable vulnerabilities across compute and storage. Upwind Cloud Scanners are available for AWS, Google Cloud, Azure, and Oracle Cloud Infrastructure. Listed integrations include Jira, Slack, GitHub Actions, and AWS CloudTrail. The platform uses runtime data about workload, application, and data behavior to inform cloud security. Getting started involves connecting cloud accounts, sensors, and integrations. Pricing is available on request, and the product page offers a demo. Upwind lists TLS and HSTS protection for data in transit and encryption, access controls, and authentication for stored data.
Good
- Inventories cloud services, identities, and workloads.
- Assesses posture against CIS, HIPAA, and NIST.
- Scanners cover AWS, Google Cloud, Azure, and OCI.
- Lists integrations with Jira, Slack, GitHub Actions, and CloudTrail.
Watch out
- Pricing is available on request, not listed.
- Setup involves connecting accounts, sensors, and integrations.
- A demo is the stated sales path.
Who it suits
It is aimed at security, engineering, and platform teams managing cloud environments. Its inventory, posture assessment, and exposure prioritization may suit teams seeking visibility across multiple cloud providers.
Verdict
Upwind Cloud Security brings cloud inventory, posture assessment, and exposure analysis together. Teams should account for the connecting work and request pricing directly.
Plans and prices
From Upwind Cloud Security's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Upwind Cloud Security | Priced on request | Pricing not listed; product page offers a demo |
The facts
Each one read from Upwind Cloud Security's own pages, with the date it was checked.
What it does
- Cloud asset discovery
- CSPM automatically inventories services, identities, and workloads across cloud accounts.checked 4 Oct 2026
- Cloud inventory
- It inventories cloud services, identities, and workloads and maps relationships among them across cloud boundaries.checked 4 Oct 2026
- Cloud providers
- Upwind Cloud Scanners are available for AWS, Google Cloud, Azure, and Oracle Cloud Infrastructure (OCI).checked 4 Oct 2026
- Compliance
- It continuously assesses posture against standards including CIS, HIPAA, and NIST, and maintains evidence and remediation history for audits.checked 4 Oct 2026
- CSPM purpose
- Upwind CSPM detects, contextualizes, and remediates cloud misconfigurations to reduce exposures.checked 4 Oct 2026
- Data protection
- Upwind says data in transit is protected with TLS and HSTS, while stored data is protected with encryption, access controls, and authentication.checked 4 Oct 2026
- Deployment requirement
- Getting started with the platform involves connecting cloud accounts, Upwind sensors, and integrations.checked 4 Oct 2026
- Integrations
- Listed integrations include Jira for ticketing, Slack for alerts, GitHub Actions for CI event correlation, and AWS CloudTrail for monitoring and compliance tracking.checked 4 Oct 2026
- Intended users
- Upwind describes its mission as helping security teams and AI agents reduce risk and respond to threats.checked 4 Oct 2026
- Pricing availability
- The CSPM page invites visitors to get a demo and does not state a price.checked 4 Oct 2026
- Purpose
- Upwind CSPM detects, contextualizes, and helps remediate cloud misconfigurations and exposures.checked 4 Oct 2026
- Risk prioritization
- It combines asset context, privileges, and connectivity to prioritize high-risk exposures and attack paths.checked 4 Oct 2026
- Runtime context
- The platform uses runtime data about workload, application, and data behavior to inform cloud security.checked 4 Oct 2026
- Security
- Upwind describes a SaaS security approach with a shared responsibility model and displays a SOC 2 badge on its Trust Center page.checked 4 Oct 2026
- Security coverage
- The platform lists CSPM, vulnerability management, container and Kubernetes security, data security, AI security, API security, and attack surface management among its use cases.checked 4 Oct 2026
- Support
- Upwind documentation says customers can contact support 24/7 through live chat, email, or a shared Slack channel.checked 4 Oct 2026
- Target users
- Upwind describes its platform as serving security, engineering, and platform (DevOps) teams.checked 4 Oct 2026
- Third-party integrations
- Listed integrations include Jira, Slack, GitHub Actions, and AWS CloudTrail.checked 4 Oct 2026
- Threat and vulnerability scanning
- It detects misconfigurations, exposed secrets, malware, and exploitable vulnerabilities across compute and storage.checked 4 Oct 2026
- Trust and compliance
- The Upwind Trust Center lists SOC 2 Type 2, ISO/IEC 27001:2022, and GDPR.checked 4 Oct 2026
The company
- Company founded
- Upwind’s newsroom states it was founded in October 2022 in San Francisco, California.checked 4 Oct 2026
- Founded
- 2022checked 28 Sep 2026
- Headquarters
- San Francisco, California, United Stateschecked 28 Sep 2026
Alternatives to Upwind Cloud Security
- 1
Aikido CSPM
Free planWebAPILinuxmacOS7.9From $300 a month - 2
Mondoo CSPM
Free planOpen sourceWebAPIExtensionLinux7.7Free plan - 3
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 4
Sysdig Secure
WebAPILinuxmacOS7.2From $20 a month - 5
Powerpipe
Free planWebLinuxmacOSSelf-hosted7.1Free plan - 6
Oracle Cloud Infrastructure Secret Management
Free planWebAPI7.0Free plan