Upwind Named CNADR Company of the Year by Frost & Sullivan and Recognized in the Gartner® 2025 Market Guide for CNAPP and Three Hype Cycles

Industry analysts highlight Upwind’s growth, Runtime-first platform, and full-lifecycle cloud-native protection capabilities

SAN FRANCISCO--(BUSINESS WIRE)--Upwind, a next-generation cloud security provider, today announced it has been recognized across multiple analyst reports in 2025, including publications from Gartner® and Frost & Sullivan. Upwind believes these acknowledgements validate its bottom up, hard work, rebuilding cloud security with Runtime as a foundation and its momentum in shaping the future of cloud-native security and highlight the company’s continued impact on the rapidly evolving CNAPP (Cloud-Native Application Protection Platform) category.

Upwind is a Runtime-first cloud security platform that secures deployments, configurations, and applications by providing real-time visibility from the inside out. Its unified Runtime fabric maps an environment as it runs - revealing what’s truly at risk, what’s actively happening, and how to respond quickly and effectively. A live map of network and application topology enables teams to prioritize fixes based on real usage and detect threats as they happen.

“Upwind's real-time insights and support have enhanced our cloud security operations,” said Sardorbek Pulatov, VP Engineering & Security at Vestiaire Collective. “Upwind saves us a significant amount of time, helping our team focus on the truly critical alerts while disregarding low-priority findings. With Upwind, we are able to identify any vulnerabilities and can prioritize them for remediation - helping us operate more efficiently and securely.”

For Upwind, recognition across leading analyst firms underscores growing market demand for this consolidated, developer-aligned, inside-out approach to securing modern applications.

Recognized across multiple analyst landscapes

In 2025, Upwind has been:

• Named as a Sample Vendor in three Gartner® Hype Cycles, including the Hype Cycle™ for Workload and Network Security, 2025 (14 July), the Hype Cycle™ for Container Technologies, 2025 (30 June), and the Hype Cycle™ for Platform Engineering, 2025 (25 June) under the Cloud-Native Application Protection Platforms (CNAPP) category. CNAPP is identified as a “High Benefit Rating” technology expected to reach mainstream adoption within two to five years, reflecting growing demand for integrated cloud-native security solutions across Kubernetes, containerized workloads, and multicloud environments (Gartner, Hype Cycle for Containers and Cloud Native Technologies, 25 June 2025).
• Included in Gartner’s 2025 Market Guide for Cloud-Native Application Protection Platforms as one of the representative vendors helping shape this growing category. In Upwind’s view, the report highlights how CNAPPs are consolidating cloud security capabilities to provide full-lifecycle protection, from development to Runtime, in modern, multicloud environments. Upwind is also rated 4.9 out of 5 on Gartner® Peer Insights™ in the CNAPP category, based on verified customer reviews, reflecting strong satisfaction from security and platform teams. According to Gartner, “by 2029, 40% of enterprises that successfully implement zero trust within cloud service provider environments will rely on the advanced visibility and control capabilities offered by CNAPP solutions” (Gartner, Market Guide for Cloud-Native Application Protection Platforms, 5 August 2025).
• Named Frost & Sullivan’s 2025 Company of the Year in the Global Cloud-Native Application Detection & Response (CNADR) market and profiled in the firm’s latest CNADR industry report. Frost & Sullivan cited Upwind’s innovation in Runtime intelligence, rapid growth of over 4,000% YoY, and its ability to unify previously siloed tools into a single, high-performance platform.

A platform built for Runtime speed, developer control, and real security outcomes

Upwind believes its recognition is grounded in its differentiated approach to cloud-native security built from the ground-up for Runtime. By combining a lightweight eBPF-based sensor with full-stack visibility, Upwind empowers security teams to detect, investigate, and respond to risks and threats in real time, without adding complexity or slowing down developers.

The platform's unique Threat Stories capability correlates Runtime signals, misconfigurations, audit logs, and identity data into a single, actionable view - enabling teams to trace threats back to the exact code or pipeline that introduced them.

“Security can’t be bolted on after deployment. It has to be built in continuously, contextually, and with developers at the center,” said Amiram Shachar, CEO and Co-Founder of Upwind. “To us, this wave of analyst recognition validates the strength of our vision, our product, and most importantly, our team. Upwind’s momentum is driven by real customer adoption, technical innovation, and word-of-mouth from the people who use and love our platform. We’re not building for the exit; we’re building for impact. We’re focused on solving real, complex problems for the teams building and securing the cloud. That’s why engineers, platform teams, and SOCs are choosing Upwind to simplify, scale, and unify cloud-native security at the speed of modern development.”

Market momentum in a maturing category

As cloud-native adoption accelerates, organizations are moving away from fragmented tools and seeking integrated solutions that provide visibility across the entire application lifecycle. According to Gartner, CNAPP platforms are emerging as the preferred approach for securing dynamic cloud environments, especially as DevSecOps, platform engineering, and GenAI adoption rise.

Frost & Sullivan described Upwind as a game-changer in this space, citing its ability to drive impact across the customer value chain and consolidate once-disconnected functions like ADR, CDR, CWPP, and CSPM into a single system.

About Upwind

Upwind is the next-generation cloud security platform built to lead the Runtime revolution. With rapid momentum and a bold vision to unify cloud and application-layer protection, Upwind helps organizations run faster, detect threats earlier, and secure their environments with unmatched precision. Upwind was founded by Amiram Shachar and his founding partners from Spot.io (which was sold to NetApp for $450 million) and is backed by top cybersecurity investors Greylock, Cyberstarts, Leaders Fund, Craft Ventures, Cerca Partners, and Sheva, a VC fund founded by former NBA player Omri Casspi. The company has secured $180 million in funding since its founding in 2022. For more information or to schedule a demo and see the future of Runtime security firsthand, visit www.upwind.io.

Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. GARTNER, HYPE CYCLE and PEER INSIGHTS are registered trademarks Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.