Upwind Raises $400M Series C at $3.8B Valuation, Stays Independent After Datadog Bid
Upwind has raised a $400 million Series C at a $3.8 billion valuation and will remain independent after turning down an acquisition offer from Datadog. The round was announced on October 28, 2026. Bessemer Ventures led it, with Craft Ventures and Greylock Partners participating.
According to TechCrunch, Datadog had attempted to acquire Upwind at the same $3.8 billion valuation, without offering a premium. Upwind declined and chose to stay independent. The Series C therefore prices the company at the level Datadog had proposed, but the new capital lets it continue on its own terms.
Upwind is an Israeli cybersecurity company with a San Francisco base. Its full legal name is Upwind Security Inc. Founder Amiram Shachar previously sold his company Spot.io to NetApp for $450 million. Upwind is four years old. Its website describes the business as Cloud & AI Security for the Realtime Era, and it uses AI to secure cloud infrastructure.
The product centers on what Upwind calls "runtime" security. The company says it alerts on and remediates attacks in active services in real time, rather than relying mainly on pre-deployment posture checks. For practitioners, the distinction is between configuration and vulnerability scanning in CI/CD pipelines (the automated path code takes from commit to production) and detection and response against workloads that are already running. Upwind's current focus, according to Yahoo Finance, includes risks from autonomous AI agents: software that acts on its own inside cloud environments, calls APIs, touches data stores and modifies infrastructure without a human in the loop.
On the commercial side, SiliconANGLE reports that Upwind's revenue quadrupled in 2026. TechCrunch reports that the company has been adding $20 million to $30 million in annualized recurring revenue (ARR) each quarter, and that it is projected to end 2026 at roughly $90 million in ARR. The company closed a previous $250 million financing at a $1.5 billion valuation nine months before October 2026, so the Series C valuation is more than double that earlier mark.
The broader context here is a consolidation question that has run through cloud security for several years. Observability and platform vendors have looked at security startups as a way to extend their footprint, and a fast-growing independent with a runtime focus is a natural target for that logic. Upwind's decision to decline a bid at a valuation that was not a premium to its own last round suggests its leadership judged its growth rate to be worth more as an independent business. Whether that judgment holds depends on whether the ARR trajectory continues, and on how well the runtime approach copes as agentic workloads multiply the identities and actions a cloud environment must police.
In my view, the most useful thing to watch is not the valuation but the sustainability of the quarterly ARR additions. A company growing from a small base can post dramatic percentage gains for a while, and the $90 million year-end projection will be the first hard test of whether the pace holds. The security market is crowded, and the buyers who matter most are platform engineering and security operations teams, who tend to judge vendors on detection quality and operational noise rather than on funding announcements.
The practical upside for customers, if the product delivers, is that cloud and AI workloads could be monitored while they run, with attacks surfaced and contained as they happen. For a field that has spent years trying to close the gap between a misconfiguration being introduced and it being exploited, that is a meaningful engineering goal, and a well-funded independent pursuing it gives the category more room to compete.
