Anzu4x

Anzu

Customer
Anzu
Industry
In-Game Advertising
Use Case
Contents
Customer
Industry
In-Game Advertising
Use Case

Anzu Reduces Vulnerabilities by 95% with Upwind

During the first hour of using Upwind, we were able to filter our list of vulnerabilities by more than 95% and focus on the ones that posed a critical risk to our business.

Andrey Bistrinin
Andrey BistrininSRE Team Lead, Anzu

Challenges

  • Anzu needed a solution that could be leveraged by DevOps and Security, allowing them to have complete visibility of its cloud infrastructure.
  • Anzu wanted to streamline its vulnerability management practice and focus its efforts on remediations that would move the needle in its vulnerability management efforts.
  • Anzu wanted a way to supercharge its security efforts and help its team proactively identify threats in real time.
  • Anzu needed a tool to prioritize risks and show its team which vulnerabilities, threats, and toxic combinations posed the most significant risk to its business.

Solutions

  • Upwind’s real-time topology map allows Anzu to view its cloud infrastructure in one central location, providing valuable insights for both the DevOps and Security teams.
  • Upwind’s vulnerability funnel rapidly shows Anzu which vulnerabilities need to be prioritized for remediation, helping its team save time and focus efforts.
  • Upwind CDR allows Anzu to view all threats in real time and understand the risks they pose based on real environmental factors.
  • Upwind’s Issues Tab allows Anzu’s team to identify which toxic combinations, vulnerabilities, and threats pose the greatest risk to its business and prioritize them for remediation.

About Anzu

Anzu is the most advanced intrinsic in-game ad solution for mobile, PC, and console. Anzu’s in-game ads put players first and help advertisers reach audiences programmatically in a non-disruptive and highly engaging way. A patented 3D ad tracking engine, the first to bring viewability measurement in-game, partnerships with trusted AdTech vendors, and compliant with the industry measurement standards outlined by the MRC and IAB make Anzu the preferred in-game advertising partner for brands and agencies worldwide.

A surfboard with a logo leans against a palm tree on a sandy beach. The ocean is calm under a clear blue sky.

Anzu also helps game developers monetize their titles with ad placements that complement the gameplay. By monetizing the entire game session, developers benefit from consistent and reliable revenue streams. Supporting all major and custom-built game engines and a full-stack ad monetization solution that provides complete control over ad placements also makes Anzu the preferred in-game ad monetization partner for developers worldwide.

Anzu leverages Upwind to focus team efforts on critical risks, view its cloud infrastructure in one centralized location, and empower DevOps and Security teams to rapidly identify critical threats and risks and prioritize them for remediation.

We knew the time had come to move from traditional posture solutions to one that included runtime. Upwind’s ability to connect runtime data with developer actions and use that data to identify real risks is unparalleled.

Amit Triffon
Amit TriffonVP R&D, Anzu

How Anzu Leverages Upwind

As the most advanced intrinsic in-game advertising solution, Anzu is committed to ensuring industry-leading security practices are in place for its cloud infrastructure and applications. To do so, they needed a solution that would give their security and DevOps teams complete visibility of their cloud infrastructure. By using Upwind’s topology map, Anzu has been able to view all of its cloud infrastructure and applications and derive insights used by both the DevOps and Security teams. 

This enables the security team to automatically identify unusual resource communications and proactively find potential threats. For the DevOps teams, the Upwind Topology Map allows them to proactively identify any network flows that don’t follow best practices and elevate their infrastructure practices.

Having all these insights in one solution has also helped reduce friction between teams, streamline security and development efforts, and ensure industry-leading security and infrastructure practices.

Diagram illustrating a complex cloud architecture with multiple interconnected components, including RDS, ElastiCache, and DynamoDB, represented by icons. Lines connect these elements, with a central globe symbolizing global distribution.

Reducing Vulnerability Alerts by 95% in Under an Hour

Anzu’s security team wanted to streamline its vulnerability management practice and ensure that they are focusing on remediating their most critical risks. During their first hour of using Upwind, they reduced their vulnerability alerts by over 95% and quickly identified the 5% that pose a real risk to their organization.

By using Upwind’s runtime vulnerability prioritization, the Anzu security team can focus its efforts, improve the time to remediation, and streamline its vulnerability management practice.

Funnel

Proactively Stopping Threats with a ‘Best-in-Business’ Sensor

Anzu wanted to ensure proactive security practices, including using a runtime sensor that could identify and stop threats in real time. Anzu’s team immediately saw the benefits of the Upwind sensor, which was easy to deploy and had a very light footprint. 

Within the first few hours of deploying the Upwind sensor, Anzu’s team saw the benefits of the real-time, runtime data and Upwind CDR, which immediately identifies potential threats and allows them to stop malicious processes in real time. This proactive approach has empowered Anzu’s security team to have even tighter control of cloud activities and ensure real-time infrastructure and application security.

Anzu previously used a solution focused on static scans and cloud security posture but as it has grown, it understood the need for a tool that leverages runtime to identify and prioritize the greatest risks in its production environment. 

By using Upwind’s Issues tab, Anzu can quickly identify toxic combinations, vulnerabilities, and threats in the production environment that pose a real risk to the business and immediately prioritize them for remediation. Upwind’s built-in SDLC context and automated root cause analysis further power these efforts, streaming remediation efforts and giving Anzu deep context about the cause of risks and threats.

A dashboard displaying cybersecurity issues. Seven rows list issues related to publicly exposed containers, network scanning tools, and critical vulnerabilities. Filters for issue type, severity, resource kind, and more are shown at the top.

Upwind’s risk prioritization has completely changed the way we approach security. Understanding our greatest risks and what caused them has greatly improved our workflows, cut down on unnecessary labor, and given us the ability to ensure our security practice is proactive rather than reactive.

Matan Koresh
Matan KoreshSecOps, Anzu

Summary

Using the Upwind Cloud Security Platform, Anzu has been able to streamline its security practice, focus on the vulnerabilities and risks that pose genuine risks to its business, and proactively monitor for threats with real-time insights. Leveraging Upwind’s runtime data and build-time context has given Anzu’s team an increased understanding of risks and what caused them, enabling them to ensure proactive, focused cloud security practices.

Upwind has truly shown us the power of a runtime solution. We strongly believe that Upwind’s sensor is the best in the business—it is light, easy to deploy and manage, and gives our team the ability to proactively monitor for risks and threats.

Matan Koresh
Matan KoreshSecOps, Anzu
Upwind

Uplift Your Cloud Security Today

Schedule a meeting with a cloud security experts today to secure your cloud, reduce friction between your teams and proactively protect your cloud infrastructure and applications.

Get a Demo
Screenshot 2026-10-13 at 5.29.46 PM

With Upwind, we are able to identify any vulnerabilities and can prioritize them for remediation — helping us operate more efficiently and securely.

Varun Brahmkshatriya
Cloud Engineer

Solutions

  • Upwind built support for gVisor, enabling Spacelift to gain process-level visibility into isolated containers from inside the platform, without an additional abstraction layer.
  • Upwind’s runtime-powered detection drastically reduced incident response times, allowing engineers to see exactly what happened inside containers and take quick action — whether that meant alerting the customer, killing a malicious process, or preventing future abuse.
  • Custom POC collaboration enabled rapid iteration, with Spacelift testing real-world attack patterns observed in wild malware samples, and Upwind delivering tailored features in record time.
  • Dynamic network graphs and runtime vulnerability prioritization allowed the team to track service communication patterns, identify drift, and focus on real exploitable risks — not just theoretical ones
Spacelift’s use of gVisor provided strong sandboxing and tenant isolation, but it came at the cost of visibility. The lack of runtime insight made it time-consuming to monitor network activity and understand events leading up to a security incident. Upwind’s gVisor feature solved this problem, providing Spacelift with full visibility into what was happening inside containers in real time. They could now trace every process, identify the actor behind it, and act decisively — all while preserving the container isolated gVisor was designed to enforce.

Visibility Inside Isolated Containers

Spacelift’s use of gVisor provided strong sandboxing and tenant isolation, but it came at the cost of visibility. The lack of runtime insight made it time-consuming to monitor network activity and understand events leading up to a security incident. Upwind’s gVisor feature solved this problem, providing Spacelift with full visibility into what was happening inside containers in real time. They could now trace every process, identify the actor behind it, and act decisively — all while preserving the container isolated gVisor was designed to enforce.

We tried reaching out to other vendors, but Upwind was the only one who moved fast, built what we needed, and treated us like a real partner. That’s rare — and it made all the difference.

Varun Brahmkshatriya
Cloud Engineer

Outcomes

  • Upwind built support for gVisor, enabling Spacelift to gain process-level visibility into isolated containers from inside the platform, without an additional abstraction layer.
  • Upwind’s runtime-powered detection drastically reduced incident response times, allowing engineers to see exactly what happened inside containers and take quick action — whether that meant alerting the customer, killing a malicious process, or preventing future abuse.
  • Custom POC collaboration enabled rapid iteration, with Spacelift testing real-world attack patterns observed in wild malware samples, and Upwind delivering tailored features in record time.
  • Dynamic network graphs and runtime vulnerability prioritization allowed the team to track service communication patterns, identify drift, and focus on real exploitable risks — not just theoretical ones
Upwind grants Petrofac the ability to instantly identify threats and eliminate malicious processes with the click of a button. It also creates prevention policies to block future malware from running in their environment.
Contents
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS