Platform profile · Rank 7 of 9
Upwind review: a runtime-first CNAPP measured on coverage
Short answer
Upwind combines agentless scanning with eBPF runtime sensors and names AWS, Azure, Google Cloud and OCI as partners. Its strength is runtime context, which needs the sensor, so it ranks 7 of 9 at 7.63 on a question that rewards seeing everything before anything is installed. Its own site publishes no price; AWS Marketplace lists a 12-month platform price.
Desk research from public vendor pages read in September 2026, updated 2026-10-11. Editorial assessment; we did not run the products.
Coverage score
Rank 7 of 9 on default weights. Change the weights in the coverage calculator
Which environments does Upwind name?
Upwind's homepage names AWS, Google Cloud, Azure and OCI as partnerships.
Source: Upwind homepage · Read 27 Sep 2026
- Named on the vendor's pages we reviewed
- Not named on the pages we reviewed (this does not mean unsupported)
Learn more: what a vendor's list of named clouds tells you
How does Upwind see workloads?
- Coverage model
- Agentless scanning combined with eBPF runtime sensors; the design centers on the sensor.
Source: Upwind homepage · Read 27 Sep 2026
- Runtime layer
- eBPF sensor with baselines of cloud activity and network flows, and forensic event timelines (CDR).
Source: Upwind CDR · Read 27 Sep 2026
- Path to first findings
- Agentless scanning gives a first view; Upwind's runtime context, which it leads with, needs its sensor.
Source: Upwind homepage · Read 27 Sep 2026
What does Upwind claim?
What does Upwind cost?
AWS Marketplace, 12-month contract: Upwind Cloud Security Platform $30,000.00; Upwind Managed Detection and Response 24/7 Service $6,000.00. The quantity each price covers was not captured in our read. 24-month and 36-month contracts are listed with savings. No price on Upwind's own site.
Source: AWS Marketplace: Upwind Cloud Security Platform · Read 11 Oct 2026
How does Upwind score on each criterion?
| Criterion | Weight | Score | Why |
|---|---|---|---|
| Clouds and environments named | 20% | 7.0tied lowest in set | Names AWS, Google Cloud, Azure and OCI, as partnerships rather than as a coverage statement. |
| Agentless workload depth | 25% | 8.0 | Agentless scanning is part of the platform, but the design centers on the runtime sensor. |
| Path to first findings | 15% | 7.0 | A first agentless view is possible; the runtime context Upwind leads with needs its sensor deployed. |
| Risk context from day one | 15% | 9.0 | Correlates static findings with runtime context for attack paths and exposure; Upwind claims 93% noise reduction. |
| Runtime layer when you need it | 10% | 9.4 | eBPF sensors, baselines of cloud activity and network flows, and forensic event timelines. |
| Integrations and reach | 7% | 7.0lowest in set | A younger company (founded October 2022, 150+ customers per its newsroom) with a smaller integration footprint. |
| Cost visibility before purchase | 8% | 5.0 | AWS Marketplace lists a 12-month platform price ($30,000.00) and an MDR add-on, without the quantity each covers; its own site has no price. |
- Clouds:
Source: Upwind homepage · Read 27 Sep 2026
- Agentless:
Source: Upwind homepage · Read 27 Sep 2026
- Setup:
Source: Upwind homepage · Read 27 Sep 2026
- Context:
Source: Upwind homepage · Read 27 Sep 2026
- Runtime:
Source: Upwind CDR · Read 27 Sep 2026
- Integrations:
Source: Upwind newsroom · Read 27 Sep 2026
- Pricing:
Source: AWS Marketplace: Upwind Cloud Security Platform · Read 11 Oct 2026
Briefings about Upwind
Where does it lead, and where does it fall short?
Leads
- Runtime depth close to the leaders, with forensic timelines from its eBPF sensor.
- Correlates static findings with runtime context for attack paths.
Falls short
- Lowest or tied lowest in set on clouds and environments named and integrations and reach.
- Scores below 5 platforms on pricing.
- A younger company with a smaller partner and integration footprint.
- No price on its own site; the AWS Marketplace price does not state its quantity basis, and its strongest context depends on the sensor.
Key facts
| Ownership | Standalone vendor; founded October 2022 in San Francisco; $250 million Series B announced 26 January 2026 |
|---|---|
| Open-source project | None named |
| Best fit | Teams that want runtime context early and are ready to deploy a sensor soon after the first scan |
| FedRAMP | Pursuing FedRAMP (November 2025), per its newsroom Source: Upwind newsroom · Read 27 Sep 2026 |
| Compliance frameworks | CIS benchmarks, HIPAA, ISO 27001, NIST, PCI and SOC 2, with 13-month data lookback, per its AWS Marketplace listing Source: AWS Marketplace: Upwind Cloud Security Platform · Read 11 Oct 2026 |
| Website | www.upwind.io |
How does Upwind compare head to head?
- Upwind 7.63 v Orca 9.09 · Orca scores higherHead to head
- Upwind 7.63 v Wiz 9.03 · Wiz scores higherHead to head
- Upwind 7.63 v CrowdStrike 7.94 · CrowdStrike scores higherHead to head
- Upwind 7.63 v Defender for Cloud 7.86 · Defender for Cloud scores higherHead to head
- Upwind 7.63 v Cortex Cloud 7.75 · Cortex Cloud scores higherHead to head
- Upwind 7.63 v Sysdig 7.67 · Sysdig scores higherHead to head
- Upwind 7.63 v SentinelOne 7.49 · Upwind scores higherHead to head
- Upwind 7.63 v Aqua 7.45 · Upwind scores higherHead to head
Frequently asked questions
How does Upwind score for multi-cloud coverage?
7.63 out of 10, rank 7 of 9 on our default weights. Its highest score is on Runtime layer when you need it (9.4) and its lowest on Cost visibility before purchase (5.0).
Which clouds does Upwind name?
On the pages we reviewed: AWS, Azure, Google Cloud and Oracle Cloud. Upwind's homepage names AWS, Google Cloud, Azure and OCI as partnerships.
What does Upwind cost?
AWS Marketplace, 12-month contract: Upwind Cloud Security Platform $30,000.00; Upwind Managed Detection and Response 24/7 Service $6,000.00. The quantity each price covers was not captured in our read. 24-month and 36-month contracts are listed with savings. No price on Upwind's own site.