Upwind, a San Francisco-based cybersecurity startup leveraging artificial intelligence to protect cloud infrastructure, has successfully raised $400 million in a Series C funding round, propelling its valuation to $3.8 billion. This latest injection of capital was led by Bessemer Venture Partners, with significant participation from existing investors including Greylock Partners and Craft Ventures. The funding represents a meteoric rise for the four-year-old company, coming just nine months after it closed a $250 million financing round at a $1.5 billion valuation. The nearly 150% increase in valuation within less than a year underscores the intense investor appetite for AI-driven security solutions and the rapid commercial scaling of Upwind’s platform.
The closing of this round follows a period of high-stakes corporate maneuvering. According to sources familiar with the negotiations, the funding round was nearly preempted by an acquisition attempt from Datadog, the publicly traded observability and monitoring giant. Datadog reportedly sought to bring Upwind under its umbrella to bolster its security offerings. However, the deal collapsed when Datadog declined to offer a premium significantly above the $3.8 billion valuation already established by venture capital interest. By opting for independent growth over an immediate exit, Upwind’s leadership has signaled a firm belief that the company’s trajectory leads toward a much higher future valuation or a potential initial public offering.
The Strategic Pivot to Runtime Security
Upwind’s primary value proposition lies in what is known as "runtime" security. In the traditional cybersecurity model, many tools focus on "shift left" strategies, which involve scanning code and configurations for vulnerabilities before they are deployed. While essential, this approach often fails to account for how software behaves once it is active in a complex, multi-cloud environment. Upwind’s platform operates in the "runtime" phase, monitoring active services in real-time to identify, alert, and automatically remedy attacks as they happen.
This real-time capability is increasingly critical as cyber threats become more sophisticated through the use of generative AI. Attackers are now able to automate the discovery of exploits and launch polymorphic attacks that change their signature to evade traditional detection. Upwind utilizes its own AI models to establish a baseline of normal behavior for cloud workloads, allowing it to spot anomalies that would be invisible to static scanning tools. This proactive stance—detecting a breach while it is in progress rather than discovering it weeks later in a log file—has become a top priority for Chief Information Security Officers (CISOs) at major enterprises.
Financial Performance and Market Valuation
The financial metrics supporting Upwind’s $3.8 billion valuation are as aggressive as its technology. The startup has reportedly been adding between $20 million and $30 million in annualized recurring revenue (ARR) every quarter. With a projected year-end ARR of approximately $90 million, the current valuation represents a multiple of roughly 42 times its forecast revenue.
While a 42x multiple is high by historical standards, it is relatively conservative when compared to other high-fliers in the cybersecurity sector. For instance, the startup Cyera recently sought a valuation at an 80x ARR multiple. The willingness of Bessemer and other top-tier VCs to pay such premiums suggests a "winner-takes-most" mentality in the cloud security market. Investors are betting that a handful of platforms will eventually dominate the Cloud-Native Application Protection Platform (CNAPP) space, a market that Gartner estimates will grow significantly as enterprises migrate more mission-critical workloads to the cloud.
The rapid growth of Upwind is also a testament to the pedigree of its founding team. The company was founded by Amiram Shachar, a seasoned entrepreneur who previously founded Spot.io. Shachar successfully navigated the cloud infrastructure space before, selling Spot.io to NetApp for $450 million in 2020. His experience in cloud spend management provided him with a unique vantage point on the vulnerabilities inherent in modern cloud architectures, leading directly to the inception of Upwind.
The Failed Datadog Acquisition and the IPO Landscape
The decision to walk away from Datadog’s acquisition offer is a defining moment for Upwind. Datadog, with a market capitalization exceeding $40 billion, has been aggressively expanding from its roots in infrastructure monitoring into the security space. An acquisition of Upwind would have given Datadog a best-in-class runtime security engine, allowing it to compete more directly with "pure-play" security giants like CrowdStrike and Palo Alto Networks.
The fact that Upwind chose to stay independent reflects a broader trend in the cybersecurity industry. Earlier this year, the industry watched as Wiz, another cloud security heavyweight, reportedly walked away from a $23 billion acquisition offer from Google’s parent company, Alphabet. In both cases, the startups and their investors seem to believe that the public markets will eventually reward high-growth, high-margin security companies with even higher valuations once the IPO window fully reopens.
However, the path to an IPO is not without its risks. The cybersecurity market is becoming increasingly crowded. Upwind faces stiff competition not only from established incumbents but also from other well-funded startups. To maintain its 42x multiple, Upwind will need to continue its breakneck revenue growth while expanding its product suite to cover more aspects of the cloud security stack, such as identity management and data protection.
AI: The Third Wave of Software Adoption
Industry analysts are framing the current boom in cybersecurity as part of a larger structural shift in corporate spending. Tomasz Tunguz, a general partner at Theory Ventures and a prominent voice in the VC community, has noted that cybersecurity is poised to be the "third big wave" of AI software that enterprises will prioritize.
The first wave focused on AI coding assistants (like GitHub Copilot) that increased developer productivity. The second wave centered on customer support and automation tools. The third wave, which is currently unfolding, is driven by the necessity of defending against AI-enabled threats. As companies integrate AI into their own products, they create new "attack surfaces" that require AI-driven defense mechanisms. This creates a virtuous cycle of demand for companies like Upwind, where the very technology causing the threat—AI—is also the only viable solution for defense.
Chronology of Upwind’s Growth
To understand Upwind’s current position, one must look at the rapid sequence of events over the past several years:
- 2020: Amiram Shachar sells Spot.io to NetApp for $450 million, establishing his reputation as a successful cloud-tech founder.
- 2021-2022: Upwind is founded and operates in stealth mode, developing its core runtime security engine and AI integration.
- January 2024: Upwind raises $250 million in a Series B round, valuing the company at $1.5 billion. The company begins a massive sales and marketing push.
- Mid-2024: Datadog initiates acquisition talks as Upwind’s ARR begins to scale at an unprecedented rate of $20M+ per quarter.
- Late 2024: Upwind rejects Datadog’s offer and instead opts to raise $400 million in a Series C round led by Bessemer Venture Partners at a $3.8 billion valuation.
Broader Implications for the Tech Ecosystem
The successful Series C for Upwind serves as a bellwether for the broader venture capital ecosystem. It demonstrates that for "Tier 1" assets—companies with exceptional growth, experienced founders, and a clear technological edge—capital is still readily available at premium valuations, despite a generally tighter environment for mid-to-late-stage startups.
Furthermore, the round highlights the ongoing convergence of observability and security. As companies like Datadog and Upwind vie for the same enterprise budgets, the lines between "monitoring how a system runs" and "securing how a system runs" are blurring. Upwind’s independence allows it to remain a "neutral" security layer that can work across various observability platforms, potentially making it more attractive to enterprises that use a mix of different cloud providers and monitoring tools.
As Upwind prepares to enter 2025 with a war chest of $400 million, its focus will likely shift toward global expansion and research and development. The company must stay ahead of a rapidly evolving threat landscape where hackers are using the same AI breakthroughs to penetrate networks that Upwind uses to defend them. For now, the message from Upwind is clear: they are not looking for an exit; they are looking to build the next great pillar of the cybersecurity industry.
