Upwind Cloud Security Platform

What do you like best about the product?

Threat intel, automated workflows, threat hunting, and customer service

What do you dislike about the product?

We do not have any dislikes about using Upwind

What problems is the product solving and how is that benefiting you?

Cloud inventory, vulnerability management at scale that is agentless, configuration and posture management

My main use case for Upwind is vulnerability management program automation, CSPM, Cloud Security Posture Management, and overall monitoring of security vulnerabilities across the company. For example, I have my cloud provider connected to Upwind, and it scans every resource existing inside and alerts me if there is any vulnerability, such as an instance with port 22 open to the world.

Upwind has positively impacted my organization by reducing time to action and time to response by half. I save time because any change that is non-compliant is automatically triggered in the form of an alert, so I do not have to wait for any other scans from any other tools. Instead of having many alerts at the beginning of the day, I have an alert at the moment it happens.

The best features Upwind offers are the ability to see everything globally across many different cloud accounts, which I appreciate the most, and its ability to reduce noise is also very helpful.

Upwind helps reduce noise for me by not only firing findings but also using context to ensure that those findings are truly as critical as they claim to be. For example, a critical finding on a resource that does not have internet reachability is not as critical, but another one with high criticality that is exposed to the internet may have a raised criticality.

The accuracy and reliability of Upwind's AI output are really useful. It provides great summaries upon findings, is able to generate full investigations upon findings as well, and the ability to talk to the AI myself to get any more context or any other summaries or related information from a finding is really useful.

Upwind can be improved because its UI is a bit difficult to navigate. I find myself getting lost many times, not being able to find the option, and sometimes completely forgetting where some of the functionality is.

I have been using Upwind for six months.

Upwind is stable.

The scalability of Upwind is great so far.

The customer support is amazing, with a sub-two-minute response time. I rate the customer support a ten on a scale of one to ten.

My experience with pricing, setup cost, and licensing was really easy to figure out. I received a request from the support team or the sales team asking for what my needs were, and right from that email, I automatically received a quote.

I have seen a return on investment because I am basically saving costs on some monitoring tools offered on AWS, since they are now taken care of by Upwind. The amount of people needed to check all of the alerts has drastically lowered, and now I can take care of it myself. The response times are two times faster.

My advice to others looking into using Upwind is that it is a great tool to use and can take care of many things across many areas of security, and it will save you a lot of headaches. I gave this review a rating of nine out of ten.

Public Cloud

Amazon Web Services (AWS)

My main use case for Upwind is cloud security and workload protection. I primarily use it to gain visibility into cloud assets, vulnerabilities, and runtime risks, and I mainly use it to prioritize the risks that actually matter and help the team focus remediation efforts instead of treating every finding equally.

A specific example would be using Upwind to investigate a vulnerable cloud workload and determine if it was actually exposed or active at runtime. The runtime context helped us prioritize the issue based on real traffic and workload behavior instead of treating every vulnerability as equally urgent.

I appreciate runtime context, which helps connect vulnerabilities and misconfigurations with actual workload behavior and network relationships, making it easier to prioritize remediation based on real exposure rather than simply working through a long list of security findings.

The best features that stand out to me are contextual vulnerability prioritization, cloud workload visibility, and runtime security. I especially value how Upwind connects vulnerabilities with actual runtime behavior, which helps focus on exploitable risk rather than working through a long list of findings.

It has helped us focus on actual exploitable risk instead of treating every vulnerability equally. By considering runtime activity, exposure, reachability, and sensitive data context, the team can prioritize remediation much faster and reduce unnecessary alert noise.

I also value the runtime visibility and attack path context because it connects security findings with network behavior and actual workload. This makes investigations more actionable and helps the team move from simply detecting issues to understanding their real impact.

The biggest positive impact has been the prioritization of cloud security risk and improved visibility. Instead of chasing every vulnerability, we can focus on issues that are actually exposed or active at runtime, which makes the security team more efficient and remediation more targeted.

I would appreciate more customizable dashboards and reporting for different teams, such as security operations, engineering, and leadership. The runtime context is excellent, but tailoring those views for each audience would make day-to-day use even smoother.

I would appreciate more flexibility in the filtering capabilities and reporting for different security teams. I would also appreciate customizing dashboards. As environments grow larger, making it easier to surface role-specific risk and trends would make an already strong platform even more efficient.

I have been using Upwind for around a year, approximately ten months.

Upwind's AI governance and security are strong because they combine AI posture controls with real-time runtime visibility, which gives the security team better context around data flows, identities, AI workloads, and potential threats rather than relying on static configuration checks.

I have found the AI-related security insights to be generally accurate and useful, especially when they are backed by runtime telemetry and actual workload behavior. I also appreciate that the platform provides context and evidence around findings, which makes it easier to validate whether an alert is genuinely actionable.

I would recommend Upwind to teams that need strong cloud visibility with runtime context rather than relying on static vulnerability scans. I would start with a focused set of cloud workloads, validate the risk prioritization, and then expand it across the environment as the team becomes comfortable with the workflows.

Overall, my experience is very positive with Upwind. The combination of runtime visibility, security insights, and contextual risk prioritization makes it much easier to focus on the risks that actually matter. I gave this review a rating of ten out of ten.

Public Cloud

Amazon Web Services (AWS)

What do you like best about the product?

Upwind gives us fast, high‑fidelity visibility into cloud risk with minimal implementation friction. It correlates posture, workload, and identity data into a prioritized view so my team can focus on issues that are actually exploitable instead of wading through generic CSPM noise.

What do you dislike about the product?

Some features still feel early‑stage: reporting and exec‑friendly dashboards are limited, and a few detections/integrations require vendor help to tune. The core signal is strong, but I’d like more polish and self‑service customization around views and workflows.

What problems is the product solving and how is that benefiting you?

It’s consolidating fragmented cloud security (CSPM, CDR, CNAPP) into one view and reducing alert fatigue. We get clearer prioritization, faster remediation cycles with engineering, and a more defensible narrative to leadership about how we’re managing cloud risk.

What do you like best about the product?

Upwind has been a joy to work with from initial contact through deployment and beyond. Their sales and CS staff is on top of any issues and they work diligently to get the right solution in place. Their technical staff has been super responsive to any questions we have and are always willing to consider adding new functionality to meet the needs of their customers. Awesome tool and staff.

What do you dislike about the product?

None so far! If anything there is work to be done on the compliance front for reporting NIST or GDPR compliance checks.

What problems is the product solving and how is that benefiting you?

Providing visibility into our cloud environment and making discovery of gaps easy to identify.

What do you like best about the product?

Upwind has given us excellent visibility and has greatly enhanced our risk posture.

What do you dislike about the product?

The level of visibility we have leads to a large number of vulnerability findings, which can quickly become overwhelming.

What problems is the product solving and how is that benefiting you?

Before using upwind, we lacked any insight into our container run times, so adopting it brought significant value to our operations. Additionally, we now benefit from greater visibility throughout our environment, along with comprehensive data that aids in both identifying and addressing issues.

What do you like best about the product?

Fast near realtime detections, low noise.

What do you dislike about the product?

Unable to bulk resolve or suppress alerts.

What problems is the product solving and how is that benefiting you?

It is an integral component of our organization's cloud detection stack.

What do you like best about the product?

Extremely easy implementation to our AWS environment

What do you dislike about the product?

Nothing in particular, we don't have enough experience working with alternatives. It delivers what we hoped for

What problems is the product solving and how is that benefiting you?

We needed a good IDPS and Upwind delivered at a balanced price point

What do you like best about the product?

The graphics are really good, it is easy to spot resources and threats within the product.
The support is qvery quick to respond.

What do you dislike about the product?

Upgraded features are a point that is taken care of but could be more agile.

What problems is the product solving and how is that benefiting you?

I didnt see problems, feature updates were needed and working upon them.

What do you like best about the product?

Upwind provides a real-time visibility into what’s actually running. I especially like the way runtime data is correlated into “Stories,” making it easy to trace issues back to their root cause and prioritize what truly matters.

What do you dislike about the product?

The runtime sensors may require resource allocation tuning.

What problems is the product solving and how is that benefiting you?

Upwind helps solve the problem of alert fatigue and lack of runtime context in cloud security.