Back

$400 Million Funding Round Signals a New Era for Cloud Cybersecurity

Sexssy

Blog

Oct 30, 2026

2 views

Technology

$400 Million Funding Round Signals a New Era for Cloud Cybersecurity

A cybersecurity startup has just demonstrated that sometimes the most valuable decision is knowing when not to sell. Upwind has secured $400 million in fresh investment at a $3.8 billion valuation, despite attracting acquisition interest from technology giant Datadog. Behind the headline is a much bigger story about AI, cloud infrastructure, and the growing commercial value of cybersecurity.

Upwind Secures $400 Million While Choosing Independence

San Francisco-based Upwind has raised $400 million in a Series C funding round led by Bessemer Venture Partners, with participation from existing investors including Greylock Partners and Craft Ventures.

The investment represents a dramatic increase from the company's previous financing. Just nine months earlier, Upwind raised $250 million at a $1.5 billion valuation.

However, the latest funding round almost collapsed after Datadog attempted to acquire the company.

According to people familiar with the negotiations, Datadog did not offer a sufficient premium above the $3.8 billion valuation established by investors. Upwind consequently decided to remain independent and continue pursuing its growth strategy.

That decision reflects management's confidence that the company's long-term potential could exceed the immediate value of an acquisition.

Runtime Security Is Becoming a Bigger Business Opportunity

Traditional cybersecurity frequently focuses on identifying vulnerabilities before attackers exploit them. However, modern cloud environments introduce a more complicated challenge.

Applications are constantly changing. Containers are deployed, services communicate across networks, and AI workloads introduce additional infrastructure and potential attack surfaces.

A vulnerability identified during development does not necessarily represent an immediate security threat. Conversely, a seemingly ordinary weakness can become dangerous when attackers find a way to exploit it inside an active environment.

Upwind addresses this problem through runtime security.

Instead of concentrating exclusively on potential weaknesses, its platform monitors active services, identifies suspicious activity, and helps security teams detect and respond to attacks in real time.

The distinction matters. Businesses do not simply need more security alerts. They need to understand which risks represent actual threats and which deserve immediate attention.

The Numbers Behind Upwind's $3.8 Billion Valuation

Upwind's financial trajectory helps explain why investors are willing to pay such a substantial premium.

The company reportedly adds between $20 million and $30 million in annualized recurring revenue (ARR) every quarter. It is projected to finish the year with approximately $90 million in ARR.

Several figures illustrate the scale of its growth.

$400 million in new Series C funding.
$3.8 billion valuation.
$1.5 billion previous valuation.
Nine months between the two financing rounds.
$90 million projected year-end ARR.
$20 million–$30 million quarterly additions to annualized recurring revenue.

At $3.8 billion, the valuation represents more than 40 times projected ARR.

That is an aggressive multiple, even for a fast-growing software company. For comparison, another cybersecurity startup, Cyera, reportedly achieved an 80-times ARR valuation multiple.

Investors are clearly pricing in substantial future growth rather than simply valuing Upwind according to its current revenue.

AI Is Creating a New Cybersecurity Spending Cycle

The commercial opportunity extends beyond conventional cloud security.

AI adoption is increasing the number of applications, services, automated processes, and infrastructure components businesses must protect.

AI coding tools make software development faster. AI customer support automates customer interactions. But both developments create additional security requirements.

As companies deploy AI agents and increasingly complex cloud environments, they must protect the systems processing information and executing business operations.

This creates a potentially important third category of enterprise AI spending: cybersecurity.

For businesses, security is not an optional productivity upgrade. A successful attack can interrupt operations, expose sensitive information, and damage customer confidence.

That makes cybersecurity a particularly attractive market for software vendors with products that solve measurable operational problems.

Runtime Security Creates Value Through Real-Time Visibility

Upwind's business model centers on providing organizations with better visibility into active cloud infrastructure.

Its technology monitors running services and helps identify vulnerabilities and suspicious behavior in their operational context.

The commercial value comes from reducing the distance between identifying a problem and responding to it.

Consider a company operating hundreds of cloud services. A conventional vulnerability report might generate thousands of findings. Security teams then have to determine which issues are genuinely dangerous.

Runtime security introduces another layer of information. It helps distinguish vulnerabilities affecting active workloads from weaknesses that may not represent an immediate operational threat.

This can improve prioritization, reduce unnecessary investigation, and help organizations use limited security resources more effectively.

Platform Strategy Could Be More Valuable Than a Single Product

Upwind's opportunity is not necessarily limited to selling one security tool.

Its longer-term potential lies in becoming an important security platform within enterprise cloud infrastructure.

The more services a company operates, the more valuable centralized visibility and security intelligence can become.

For Upwind, expanding its position across cloud infrastructure and AI workloads could strengthen customer relationships and create opportunities to sell additional capabilities.

However, building a platform requires more than attracting investment. Product reliability, integration quality, customer retention, and the ability to support increasingly complex environments will determine whether the strategy succeeds.

Datadog, Wiz, and the Competitive Battle

Datadog's interest in Upwind highlights how cybersecurity is becoming strategically important to established enterprise software companies.

Datadog already operates in observability, helping businesses monitor application performance and infrastructure behavior.

Combining observability with runtime security could create strategic advantages by bringing operational monitoring and threat detection closer together.

Meanwhile, Upwind competes in a broader cloud security environment that includes established players such as Wiz, CrowdStrike, Orca Security, and Sysdig.

Community discussions on Reddit reveal an important distinction in how buyers evaluate these platforms.

Some practitioners value runtime visibility because it helps prioritize vulnerabilities based on actual exposure. Others emphasize product maturity, integration complexity, and the quality of individual security capabilities.

These discussions also highlight that runtime context should not automatically make a vulnerability irrelevant. Infrastructure changes, deployments, and network configurations can quickly change an application's exposure.

The competitive advantage will therefore depend on delivering accurate intelligence rather than simply generating more security information.

Product Adoption Still Comes With Risks

Upwind's growth and funding do not eliminate the challenges associated with enterprise cybersecurity.

Security products must integrate into complicated infrastructure without creating operational problems.

Customers also need reliable detection, manageable false positives, effective reporting, and sufficient visibility across different cloud environments.

Practitioner feedback about Upwind has been positive in several areas, particularly runtime context and vulnerability prioritization. However, some reviews identify reporting limitations and the need for manual tuning.

These details matter because enterprise customers evaluate security software over long periods. A strong demonstration is not enough to guarantee successful deployment.

A $3.8 billion valuation also creates significant expectations. Maintaining growth while improving the product will become increasingly important.

The Acquisition Question Remains Open

Rejecting Datadog does not necessarily mean Upwind will remain independent forever.

The cybersecurity acquisition market has demonstrated that strategically important security platforms can become attractive targets for larger technology companies.

Upwind's founder, Amiram Shachar, has previous experience building and selling technology businesses. His earlier cloud spending management company, Spot.io, was acquired by NetApp for $450 million.

That experience provides an interesting background to the current decision.

Upwind can continue growing independently, attract additional investors, or eventually consider an acquisition at a more attractive valuation.

The company reportedly continues to receive acquisition interest.

For investors, the challenge is determining whether its future revenue growth can justify the substantial valuation.

Small Businesses Should Focus on Security Outcomes

The Upwind story offers an important lesson for small and medium-sized businesses.

Not every company needs an expensive enterprise cybersecurity platform. However, businesses increasingly dependent on cloud applications, automation, customer databases, and AI services cannot treat security as an afterthought.

Smaller organizations should prioritize three practical areas.

First, understand which applications and services contain important business data.

Second, monitor access permissions, suspicious activity, and exposed infrastructure.

Third, establish a response process that identifies who is responsible when a security problem occurs.

For companies adopting AI automation, protecting API credentials, customer information, and automated workflows is particularly important.

The objective is not to purchase the most expensive security software. It is to reduce business risk without creating unnecessary operational costs.

Upwind's Biggest Opportunity May Still Be Ahead

Upwind's $400 million funding round is more than another large venture capital transaction.

It reflects a broader change in enterprise software spending. As AI expands into business operations, security becomes an essential part of the infrastructure supporting that growth.

The company's decision to reject Datadog's acquisition approach demonstrates confidence in its independent potential. Its revenue trajectory gives investors a reason to pay attention, although its valuation leaves little room for disappointing execution.

The larger opportunity is clear. Businesses will continue adopting cloud infrastructure and AI, but those systems must remain secure.

The companies capable of protecting increasingly complex digital environments could become some of the most valuable software businesses of the next decade.