Upwind CNAPP
Upwind CNAPP brings application security, cloud posture, and real-time protection together across the cloud lifecycle, from development through production.
What Upwind CNAPP is
Upwind CNAPP brings application security, cloud posture, and real-time protection together across the cloud lifecycle, from development through production. It combines agentless cloud scanners with runtime sensors to build live inventory, identify exposures, and protect workloads. Listed capabilities include CSPM, CIEM, DSPM, AI-SPM, attack path analysis, vulnerability management, Kubernetes and serverless security, API security, DAST, and cloud detection and response. Cloud integrations cover AWS, Microsoft Azure, Google Cloud, and Oracle Cloud. The integrations directory also lists Jira, Slack, GitHub Actions, Azure DevOps, Bitbucket, Argo CD, CircleCI, GitLab, and AI services including ChatGPT, xAI Grok, OpenAI Enterprise, and Claude. The platform is available through web and API. Upwind says data in transit is protected with TLS and HSTS, and stored data with encryption, access controls, and authentication. Pricing is available on request, and the CNAPP page directs prospective customers to request a demo.
Good
- Combines agentless scanners with runtime sensors.
- Supports AWS, Azure, Google Cloud, and Oracle Cloud.
- Lists Kubernetes, API, and vulnerability security capabilities.
- Integrates with development, ticketing, and AI tools.
Watch out
- Pricing is available on request, not listed.
- The CNAPP page directs prospects to request a demo.
- Coverage spans multiple security areas that teams must evaluate for fit.
Who it suits
It is intended for security teams working across development, cloud, runtime, and SOC workflows. Its range of capabilities may suit teams seeking coverage from application development through production workloads.
Verdict
Upwind CNAPP brings a broad set of cloud and application security capabilities into one platform. Review the listed scope and request a demo and pricing details to assess fit.
The facts
Each one read from Upwind CNAPP's own pages, with the date it was checked.
What it does
- AI integrations
- The integrations directory lists ChatGPT, xAI Grok, OpenAI Enterprise, Anthropic Enterprise, and Claude integrations.checked 2 Oct 2026
- Cloud support
- Its documentation describes cloud integrations for AWS, Microsoft Azure, Google Cloud, and Oracle Cloud.checked 3 Oct 2026
- Compliance
- Upwind’s Trust Center lists SOC 2 Type 2, ISO/IEC 27001:2022, and GDPR among its compliance items.checked 3 Oct 2026
- Coverage
- Its listed capabilities include CSPM, CIEM, DSPM, vulnerability management, attack path analysis, container and Kubernetes security, API security, and cloud detection and response.checked 3 Oct 2026
- Data protection
- Upwind says data in transit is protected with TLS and HSTS, while stored data is protected with encryption, access controls, and authentication.checked 3 Oct 2026
- Deployment
- The Outpost deployment model runs cloud scanners inside the customer’s AWS environment.checked 3 Oct 2026
- Detection
- The platform combines agentless cloud scanners with runtime sensors and real-time intelligence.checked 3 Oct 2026
- Integrations
- The integrations page lists Jira, Slack, GitHub Actions, and AWS CloudTrail among its popular integrations.checked 3 Oct 2026
- Intended users
- Upwind describes the platform as serving security teams across development, cloud, runtime, and SOC workflows.checked 3 Oct 2026
- Lifecycle coverage
- The platform covers application security, cloud security posture, and real-time protection across the cloud lifecycle.checked 2 Oct 2026
- Pricing model
- Upwind says its full CNAPP is included in one price, with CSPM, runtime sensor, code scanning, and data security included.checked 2 Oct 2026
- Prioritization
- Upwind describes live inventory and high-signal exposure prioritization as platform capabilities.checked 3 Oct 2026
- Product
- Upwind unifies application security, security posture, and real-time protection on one platform for cloud and AI environments.checked 3 Oct 2026
- Runtime context
- Upwind combines agentless cloud scanners and runtime sensors to provide live inventory, identify exposures, and protect workloads in real time.checked 2 Oct 2026
- Sales path
- The CNAPP page directs prospective customers to request a demo.checked 2 Oct 2026
- Security capabilities
- Listed capabilities include CSPM, CIEM, DSPM, AI-SPM, attack path analysis, vulnerability management, Kubernetes and serverless security, CDR, API security, DAST, and MDR.checked 2 Oct 2026
- Security responsibility
- Upwind describes a shared responsibility model for controls inherited from its cloud service providers and security responsibilities to customers.checked 2 Oct 2026
- SOC 2
- Upwind's security trust center displays a SOC 2 image under its security commitment section.checked 2 Oct 2026
- Support
- The documentation offers 24/7 support through live chat in the management console, email, or a shared Slack channel.checked 3 Oct 2026
Where it runs
- Cloud platforms
- The site links to AWS, Google Cloud, Microsoft Azure, and Oracle Cloud partner pages.checked 2 Oct 2026
- CNAPP
- Upwind unifies application security, security posture, and real-time protection on one platform to reduce risk from development through production.checked 2 Oct 2026
The company
- Company
- Upwind says it was founded by the team behind Spot.io, which was acquired by NetApp.checked 2 Oct 2026
- Founded
- 2022checked 28 Sep 2026
- Headquarters
- San Francisco, California, United Stateschecked 28 Sep 2026
Alternatives to Upwind CNAPP
- 1
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 2
Sysdig Secure
WebAPILinuxmacOS7.2From $20 a month - 3
Qualys TotalCloud
Free planWebAPI7.0Free plan - 4
Cloudanix
WebAPISelf-hosted6.5From $3.49 a month - 5
Uptycs CNAPP
WebAPILinuxmacOS6.4From $36 a year - 6
Cisco Catalyst Center
WebAPILinuxmacOS6.2