We are excited to announce a major new capability in the Upwind Platform – Upwind Agentless Cloud Scanners.

At Upwind, we are on a mission to simplify cloud security and build a comprehensive CNAPP that is easy to use, solves a variety of use cases, and serves as a central point where Dev, Sec and Ops teams can all find needed forensics – effectively streamlining operations and reducing friction between teams.

With our release of Upwind Agentless Cloud Scanners, we are expanding our eBPF sensor-centric approach and giving organizations more flexibility to easily get deep context even in areas where installing sensors can’t simply happen or where it’s very difficult to deploy:

  • Serverless containers: AWS Fargate, Google Cloud Run, Azure Container Instances
  • Functions: AWS Lambda, Google Cloud Functions, Azure Functions
  • Virtual Machines with older OS versions

Upwind’s Agentless Cloud Scanners come as a powerful addition to our leading eBPF-based sensor, providing unified, comprehensive coverage for your infrastructure and applications, across clouds, platforms and architectures.

Powering the Next Generation of Compute Platforms with Agentless Cloud Scanners

This combination of real-time monitoring from the Upwind sensor, paired with comprehensive scanning from Upwind’s Agentless Cloud Scanners, ensures that all aspects of customers’ infrastructure are fully discovered and protected – and they can be up and running in minutes, no matter the complexity of their environment.

This powerful combination of runtime-powered insights and lightweight scanning provides customers with instant visibility and deep, integrated protection across hosts, containers, serverless functions, PaaS containers and classic VM-based environments.

Upwind Cloud Scanners and Upwind Sensors complement each other to deliver a robust cybersecurity solution. 

The speed at which Upwind innovates is truly unheard of. Especially in a time when we see a lot of security companies being acquired or consolidating, we feel confident that Upwind is innovating faster than anyone in the market.

-Horacio Granillo, SRE/DevOps Team Lead, TTMzero

Using Upwind’s Agentless Cloud Scanners

Upwind’s Agentless Cloud Scanners are designed to be quick to deploy, easy to operate and efficient to use. The scanners operate as autoscaling groups that scan virtual machines (VMs) in a region in which they are deployed, snapshotting every disk in a VM to scan it and find misconfigurations, malware, exposed secrets and vulnerabilities. 

“Upwind makes it seamless to view and protect all of our cloud infrastructure. The visibility and context Upwind provides has made it easy for us to secure multi-architecture environments all from one centralized location”

-Rinki Sethi, VP & CISO, Bill

You will be able to see Upwind’s Agentless Cloud Scanners’ findings in existing modules of the Upwind Cloud Security Platform, including:

  • Vulnerability Management: Scans for vulnerabilities are now integrated into Upwind’s vulnerability management capabilities, which will now display both vulnerabilities found by Upwind’s Agentless Cloud Scanners and vulnerabilities found at runtime by the Upwind sensor.
  • Threat Detection: Consistent malware scanning will be performed by Upwind’s Agentless Cloud Scanners to identify any malicious files, in addition to coverage provided by the Upwind sensor. Results from both will be shown in the Threats module of the Upwind Platform.
  • Cloud Security Posture: Upwind’s Agentless Cloud Scanners scan for exposed secrets, exposing any findings in the Exposed Secret’s Tab of the Upwind Posture module.
  • Inventory: Upwind’s Agentless Cloud Scanners provide fast, comprehensive visibility into your cloud infrastructure and applications, which are viewable in the Inventory module of the Upwind Platform. You can also view and manage all of your currently deployed scanners in the Inventory module.

Start Using Upwind’s Agentless Cloud Scanners

Installing Upwind Scanners is an easily automated process, deployable by using tools like CloudFormation StackSets or Terraform for a low-privileged, quick, and consistent deployment across different regions. 

Easily deploy Upwind’s Agentless Cloud Scanners with:

  • Seamless setup: Cloud Scanners can be deployed via CloudFormation in a specific region with a simple onboarding experience. 
  • Simplified management: Upwind’s Cloud Scanners tab will track all scanners’ status and their scans
  • Streamlined usage: Intelligent scaling based on the concurrent number of scans 

Upwind Scanners can be monitored via the Inventory section of the Upwind Platform, where you will be able to find every deployed scanner in each region. You can drill down to each scanner, review scan history, visualize and configure which VMs are scan-eligible, and also analyze metrics on CPU and memory consumption of those scanners.

Learn More about Upwind’s Agentless Cloud Scanners

Upwind is committed to providing comprehensive, simplified cloud security. By leveraging simplified, immediate visibility through Upwind’s Agentless Cloud Scanners and pairing it with real-time, comprehensive protection through the Upwind’s eBPF sensor, you can easily identify everything you run in the cloud, prioritize risk and respond to threats in real time – across any type of infrastructure.

To learn more about Upwind Scanners, visit the Upwind Documentation Center (login required), schedule a demo, or drop us a line at [email protected].