How Upwind CEO Amiram Shachar Is Building Cybersecurity’s Next $100 Billion Challenger

Every generation of cybersecurity produces companies that redefine how enterprises defend themselves. Firewalls transformed network security. Endpoint detection changed how organizations respond to attacks. Cloud-native application protection platforms (CNAPPs) consolidated sprawling security tools into unified platforms.

Now, another transition is underway. As cloud environments become increasingly dynamic and AI accelerates software development, security teams are discovering that static scans and periodic assessments can no longer keep pace with production workloads that change by the minute. Runtime visibility, or understanding what is actually happening inside cloud environments in real time, is becoming the next competitive battleground.

Few companies have embraced that shift more aggressively than Upwind, the cloud security startup led by Amiram Shachar. Less than three years after its launch, the company has raised approximately $430 million, reached a $1.5 billion valuation, and expanded into global enterprise accounts while positioning itself at the forefront of runtime-powered cloud security.

Betting That Runtime Will Replace Static Security

Enterprise cloud security has traditionally relied on snapshots. Security teams scan infrastructure for vulnerabilities, review configurations, and prioritize remediation based on theoretical risk. While that approach helped organizations improve cloud hygiene, it often generated thousands of alerts without revealing which vulnerabilities were actually exploitable.

The emergence of AI-generated code, ephemeral containers, Kubernetes environments, and increasingly automated cloud infrastructure has exposed the limitations of static security models.

That changing landscape is creating enormous market demand. Cybersecurity investment continues to surge as enterprises modernize their IT environments. According to the International Data Corporation (IDC), global spending on security solutions and services is projected to exceed $377 billion by 2028, driven by rising cyber threats, stricter regulations, and the rapid adoption of cloud computing and AI. As organizations rethink how they protect increasingly dynamic environments, cloud-native security has become one of the industry’s fastest-growing priorities.

Enterprise cloud environments now change continuously, with containers, workloads, APIs, and AI agents appearing and disappearing in minutes. That operational reality is forcing security teams to move beyond periodic scans toward continuous runtime visibility, a shift many industry observers see as the next major evolution of cloud security.

Those trends align closely with Upwind’s strategy. Rather than focusing solely on identifying vulnerabilities, the company emphasizes understanding which workloads are actually running, how identities interact with applications, and whether suspicious behavior is occurring in production environments.

Building the Platform Customers Asked For

Shachar did not initially set out to build a broad cloud security platform. Instead, Upwind began with runtime security before steadily expanding into cloud detection and response, application security, API protection, identity security, software supply chain security, vulnerability management, and AI-powered investigations.

That expansion, according to Shachar, wasn’t driven by product ambition alone. “Once you bring one product, the real-time layer, the customer asks you to bring additional, adjacent products… it makes sense for them to get as much as possible in one place.”

The comment reflects a larger trend reshaping enterprise security purchasing. Organizations increasingly want fewer standalone products and more integrated platforms capable of connecting infrastructure, workloads, applications, identities, and threat intelligence into a unified operational view.

Rather than simply consolidating tools, vendors are now competing to provide meaningful context: reducing alert fatigue by identifying which risks actually matter inside live environments.

A Founder Who Thinks Beyond Competitors

For Shachar, Upwind represents his second attempt at building a category-defining cloud company. His previous startup, Spot, pioneered cloud infrastructure optimization before being acquired by NetApp. After the acquisition, he returned to entrepreneurship convinced that cloud security faced another architectural shift.

His leadership philosophy reflects lessons learned from both startups and customers. During an earlier interview, Shachar recalled advice from Amazon founder Jeff Bezos that continues to influence his thinking. “Jeff Bezos told his staff something like, ‘We’re not competitor-obsessed, we’re customer-obsessed. Our competitors aren’t going to pay us money anyway.'”

That mindset appears evident in Upwind’s product evolution. Rather than chasing competitors feature-by-feature, the company has consistently expanded based on customer requirements and emerging operational challenges. The strategy has helped establish partnerships with major cloud providers while attracting enterprise customers across industries. 

Defining the Next Era of Cloud Security

Cybersecurity has entered another period of consolidation, but it is also entering one of reinvention. The rise of generative AI, autonomous software agents, and increasingly distributed cloud environments demands security platforms capable of understanding systems as they operate, not merely how they were configured.

That shift explains why runtime security has moved from an emerging capability to a strategic priority for many enterprises. Whether Upwind ultimately becomes one of cybersecurity’s defining companies remains an open question. The market is crowded, competition is fierce, and innovation cycles continue to accelerate.

Yet if the next decade belongs to platforms that combine runtime intelligence, AI-driven investigations, and unified cloud protection, Upwind has positioned itself where the industry’s momentum appears to be heading.