Upwind Security Valuation: $3.8B After $300M Round

$3.8 billion is what Upwind Security is worth after closing a $300 million round on September 2, 2026 — more than double its January 2026 price tag, and more than quadruple where it stood in December 2024. A cloud security startup most consumers have never heard of just became one of the fastest-appreciating private companies in cybersecurity.

Bloomberg reported that Bessemer Venture Partners and TCV co-led the round, joined by Craft Ventures, Salesforce Ventures, Greylock, Cyberstarts, Leaders Fund, Alta Park Capital, and Penny Jar Capital — nearly the same investor syndicate that backed Upwind eight months earlier. Here's the full round-by-round history behind that trajectory, and how it stacks up against Wiz, Orca Security, Aqua Security, Lacework, and Sysdig.

Upwind Security Valuation: How It Reached $3.8 Billion in 2026

Upwind's $3.8 billion valuation came from a $300 million round announced September 2, 2026, roughly eight months after a $250 million Series B priced the company at $1.5 billion in January 2026. In between, Salesforce Ventures added an estimated "tens of millions" at a $1.6 billion mark in March 2026, per Calcalistech's reporting. That means Upwind's price roughly 2.4x'd in less than six months on the March mark alone.

Upwind's Full Funding History: Seed to Series C

Upwind was founded in 2022 by Amiram Shachar, Liran Polak, Lavi Ferdman, and Tal Zur — the founding team behind Spot.io, which NetApp acquired in 2020. Its seed round, co-led by Greylock, Cyberstarts, and Leaders Fund, was never disclosed as a standalone figure, but Upwind's own announcement says the company raised $80 million combined within its first 12 months, which included a $50 million round in September 2023 that Calcalistech labeled a Series A at the time. Fifteen months later, in December 2024, Upwind closed a $100 million round — TechCrunch also called this one a Series A, at a $900 million valuation, roughly triple the mark from the September 2023 round. Press labels for Upwind's early rounds are inconsistent between outlets; what's consistent across every source is the dollar amount and the sequence, which is what we chart below.

Craft Ventures, led by David Sacks, was a new investor in the December 2024 round alongside TCV and Alta Park Capital, joining existing backers Greylock, Cyberstarts, Leaders Fund, Cerca Partners, and Sheva. Thirteen months later, Bessemer Venture Partners stepped in to co-lead the January 2026 Series B alongside Salesforce Ventures and Picture Capital, the round that pushed Upwind's valuation above $1 billion for the first time in company history and made it a unicorn, as the company announced at the time. Every subsequent check since then, through the March 2026 top-up and the September 2026 round, has come from that same widening syndicate rather than a brand-new lead investor discovering the company cold. This likely means existing shareholders were defending their position as much as new capital was expressing fresh conviction, though neither Upwind nor its investors have said so directly.

How Upwind's Valuation Climbed From $900 Million to $3.8 Billion

Four disclosed valuation marks tell the real story. Upwind was valued at $900 million in December 2024, per TechCrunch. It crossed $1.5 billion in January 2026 when the $250 million Series B — announced via Businesswire and led by Bessemer Venture Partners with Salesforce Ventures and Picture Capital — made it a unicorn just over two years after emerging from stealth. Salesforce Ventures then added capital at $1.6 billion in March 2026, and the September round more than doubled that again to $3.8 billion. That is roughly a 4.2x increase in valuation across 21 months, with more than half of that gain landing in the final nine months since the January 2026 Series B — a pace that outstrips almost every other disclosed cybersecurity round in 2026.

The shape of that curve is worth noting on its own: Upwind's valuation held flat at $900 million for roughly thirteen months between December 2024 and January 2026, then more than doubled again to $3.8 billion in the eight months after that. A flat year followed by a sudden re-rating usually means one of two things — either the underlying growth metrics were also flat and then genuinely inflected, or the company simply chose not to raise during a period when cybersecurity valuations broadly were subdued and waited for the Wiz acquisition to reset the market's appetite for the category. Upwind has publicly credited its own revenue and customer growth for the move, but the timing lines up with both explanations, and only one of them is fully within the company's control.

What Does Upwind Security Actually Sell?

Upwind's product is a cloud-native application protection platform (CNAPP) that leans on runtime sensors — software that watches what is actually happening inside a live cloud environment or AI workload — instead of relying only on periodic scans of stored configuration files. That distinction matters because static scanners can miss an active breach between scan cycles, while runtime monitoring is built to catch it as it happens. Customers include Roku, Siemens, Nubank, Wix, Peloton, and Nextdoor. Heading into the September round, Upwind reported 900% year-over-year revenue growth and said its customer base had doubled, the two metrics investors cited most often to justify the new price.

The founding team's background matters to how the product is pitched. Amiram Shachar, Liran Polak, Lavi Ferdman, and Tal Zur previously built Spot.io, a cloud-cost-optimization company NetApp acquired in 2020, which means their prior product also required deep, real-time visibility into live cloud workloads rather than static snapshots. Upwind has carried that same real-time architecture into security, and in 2026 it extended the pitch specifically to AI: runtime protection for model-serving infrastructure and AI agents that call external tools or execute code, a workload category that did not exist in most CNAPP roadmaps even two years earlier. That AI-specific framing is a second growth story layered on top of Upwind's original cloud-workload thesis, and it is the piece of the pitch most directly aimed at the same enterprise buyers who used Wiz for conventional cloud posture management.

How Does Upwind Compare to Wiz, Orca Security, Aqua Security, Lacework, and Sysdig?

Cloud security has produced some of the widest valuation swings in venture-backed software. Google's $32 billion acquisition of Wiz closed in March 2026 — the largest cybersecurity deal on record, according to Calcalistech's coverage of the closing — and it left a gap in the independent cloud security market that investors are now betting Upwind, Orca, and Aqua can fill. But not every comparable has aged well: Lacework hit an $8.3 billion valuation in November 2021 and sold to Fortinet for just $152.3 million in 2024, a reminder that a private mark is not the same as realized value.

Orca Security and Aqua Security illustrate the more common outcome: both are still private, both are still operating, and neither has raised at a higher price since their last disclosed rounds — Orca's $1.8 billion mark dates to a 2021 Series C extension, and Aqua's roughly $1 billion valuation has held since a $60 million round in January 2024. Sysdig, the oldest name on this list, last priced privately at $2.5 billion in a December 2021 Series G and has not disclosed a newer round since, making Upwind's back-to-back 2026 raises the most active fundraising pace among the group by a wide margin.

Sources: Bloomberg, Calcalistech, Businesswire, TechCrunch, PR Newswire (Lacework's $8.3B round), Fortinet Investor Relations (Lacework acquisition price), and CB Insights/Tracxn cumulative funding data for Orca Security, Aqua Security, and Sysdig, 2021-2026. Wiz's total pre-acquisition funding is a sum of its disclosed seed through Series E rounds reported by press coverage of the Google deal.

What the Headline Misses

A $3.8 billion mark on a private company is not cash in the bank, and cloud security has a recent, well-documented example of how fast that number can move in the other direction. Lacework raised at $8.3 billion in November 2021 and sold for $152.3 million less than three years later — a roughly 98% markdown from peak to exit. Upwind's investors are the same growth-stage funds that priced Lacework's later rounds and other 2021-vintage cybersecurity unicorns, and this round's pace — 2.4x in under six months on the March 2026 mark alone — is closer to that late-2021 cycle than to a typical multi-year valuation climb.

One read on this: investors are pricing Upwind less on its current annual recurring revenue, which the company has not disclosed, and more on the belief that Wiz's exit created a multi-billion-dollar vacancy in independent cloud security that whoever grows fastest right now will capture. That is a bet on market structure, not a valuation derived from a disclosed revenue multiple — and it is exactly the kind of bet that looked correct for Lacework in 2021, too.

There is also a structural conflict worth naming plainly: several of the funds pricing this round, including Craft Ventures and Bessemer, already hold Upwind stock from earlier rounds, which means part of what they are doing by writing a bigger check at a higher price is marking up their own existing position, not only evaluating a fresh opportunity with no prior stake. That is standard practice across venture capital and not unique to Upwind, but it is a real reason insider-heavy syndicates can sustain a valuation further and longer than a fully independent group of new investors would.

Why Is Cloud Security Funding Surging in 2026?

Google's $32 billion purchase of Wiz removed the category's most obvious later-stage buyer and left its enterprise customers evaluating alternatives, a dynamic SC Media's coverage of Upwind's round ties directly to the sudden reacceleration in cloud security valuations this year. AI workloads are also part of the pitch: Upwind and its closest peers all now market runtime protection explicitly for AI agents and model-serving infrastructure, not just traditional cloud compute, which gives growth investors a second demand narrative beyond the Wiz-shaped gap alone.

Upwind's round also lands inside a broader cybersecurity funding rebound. Crunchbase News reported that cybersecurity and privacy startups raised $10.6 billion combined across the first half of 2026 — $4.9 billion in Q1 and $4.4 billion in Q2 — holding at historically elevated levels even as Q2 deal counts and dollars each cooled by roughly 30% from Q1. Against that backdrop, a single $300 million check into one company equals nearly 7% of a full quarter's entire category-wide total, which shows how concentrated growth-stage cybersecurity capital has become around a small number of perceived category leaders rather than spreading evenly across the field.

The Bottom Line

Upwind Security's $3.8 billion valuation, up from $900 million twenty-one months earlier, is one of the fastest markups in cloud security's history — built on 900% revenue growth, a doubled customer base, and investors betting it can absorb demand that Wiz's $32 billion exit left behind. The risk sits in the comparison this piece keeps returning to: Lacework's climb to $8.3 billion looked just as convincing in November 2021, three years before it sold for $152.3 million. Upwind's fundamentals — real customers, real revenue growth, a specific competitive vacancy to fill — are stronger than most 2021-vintage cybersecurity unicorns had at a comparable stage, but the valuation trajectory itself carries the same shape. Whether Upwind ever tests that valuation against a public listing, an acquisition offer, or a down round will not be knowable for years — the honest answer today is that $3.8 billion is a price four growth-stage funds agreed to pay, not a figure any public market has verified.