Software supply chain risk doesn't stop at the container boundary. Most organizations still run a meaningful share of production workloads on virtual machines across legacy services, data pipelines, and infrastructure that was never containerized. The Upwind Platform creates SBOMs at runtime, delivering greater accuracy than build-time tools by continuously monitoring your live environment. Format adds…

If you follow AI at all, you know the leaderboards. Every few weeks a model takes the top spot, and we all check where our favorite landed. But a leaderboard only tells you who's ahead, and it stays quiet about where any of those models still come up short. Which, conveniently, is the part that…

Focus Mode is now available in the Upwind platform, giving security teams a faster, more focused way to work. Instead of navigating across the platform, you can switch to Focus Mode to slice and dice the Upwind platform by Vulnerability Management, Cloud Security Posture, Attack Surface Management, Administration, or Threats, and starting next week, AI…

We’re excited to introduce Early Advisories as part of the Upwind platform. Powered by Upwind's security research team, Early Advisories notify customers about emerging threats, including zero-days and supply chain attacks, before they receive a CVE identifier. Early Advisories are published directly into the Vulnerabilities module alongside CVE-based findings and automatically correlated with your live…

Key Takeaways When Anthropic published its piece on recursive self-improvement, the line that traveled was the efficiency one. A 100-person company doing the work of a much larger one, because each person sits atop a pyramid of agents. It's a striking image, and it's probably right. But there's a second diagram hiding inside the first…

Windows workloads remain a critical part of modern cloud environments. From business applications and identity services to databases and internal tooling, Windows Server hosts often support some of the most important pieces of the enterprise stack.  Upwind is extending runtime protection and visibility to Windows Server hosts running in private cloud and on-premises environments, including…

If you asked most security leaders where all of their data is flowing, which workloads and AI services are accessing it, and whether it's exposed, only a few could answer with confidence, and almost none would have the answer in real time.Not because that data is not available, but because it's scattered across multiple cloud…

Key Takeaways A few weeks ago, Mira Murati's lab, Thinking Machines, put out a research preview of something they're calling interaction models. If you haven't seen it, it's worth your time. This is a serious effort from serious people, the kind of lab that trains a 276-billion-parameter model from scratch and stands up a whole…

Key Takeaways Most organizations believe they have AI governance because they have policies, risk classifications, even responsible AI principles documented and approved. What they do not have, in most cases, is the ability to answer a basic question: what is every AI agent in our environment doing right now, and should it be doing that?…

As a design team, we spend a lot of time watching where users slow down, where they hesitate, and where the product makes them work harder than it should. In cloud security, one pattern shows up again and again: A security engineer starts their day by opening the platform and scanning a long list of…

Today, we are excited to announce the Upwind AI Sensor for Endpoints! In the world we've known until now, the threat model was familiar. A developer accidentally commits a secret to a repository. A DevOps engineer exposes sensitive data to the internet. Someone deploys a workload carrying a critical vulnerability. To deal with these risks,…

Cloud security teams do not have a visibility problem anymore. They have a context problem. Modern cloud environments generate endless findings across vulnerabilities, identities, APIs, data, configurations, threats, workloads, and exposure. The challenge is not just knowing what exists. It is understanding what matters, why it matters, and what to do next. That is where…