In a bold display of confidence, Upwind, a San Francisco-based cybersecurity startup specializing in AI-driven cloud infrastructure protection, has successfully closed a $400 million Series C funding round. The investment values the four-year-old company at $3.8 billion, a significant milestone that comes just nine months after the firm secured $250 million at a $1.5 billion valuation. This latest injection of capital was led by Bessemer Venture Partners, with continued support from existing investors, including Greylock Partners and Craft Ventures.
The funding round, which has been in development for several months, represents more than just a capital infusion; it serves as a public declaration of independence for the startup. According to individuals familiar with the matter, the deal nearly collapsed during negotiations when Datadog—the publicly traded observability giant—attempted to acquire the company.
The proposed acquisition by Datadog, which is renowned for its comprehensive suite of tools that monitor how software runs, ultimately failed to move forward. Sources indicate that Datadog did not offer a premium over the $3.8 billion valuation established by the venture capital investors. Consequently, Upwind’s leadership team opted to reject the buyout offer, choosing instead to remain an independent entity and pursue its own growth trajectory.
The Rise of Runtime Security
Upwind has experienced a meteoric rise, navigating an increasingly complex cybersecurity landscape defined by persistent, AI-driven threats. Founded by Amiram Shachar, who previously established his reputation in the cloud sector by selling his cloud spend management startup, Spot.io, to NetApp for $450 million, Upwind has carved out a distinct niche in the industry.
The company’s core value proposition is what it defines as "runtime" security. Unlike traditional security models that may rely on static scanning or preemptive configuration checks, Upwind focuses on active, real-time protection. The platform is designed to identify, alert, and remediate vulnerabilities and active attacks within running services. By focusing on the environment where software is actually executing, Upwind provides a level of granular visibility that has become increasingly essential for companies managing massive, distributed cloud infrastructures.
The demand for such technology is clearly reflected in the company’s financial performance. According to reports regarding its internal financials, Upwind has been adding between $20 million and $30 million in annualized recurring revenue (ARR) each quarter. The startup is currently projected to reach approximately $90 million in ARR by the end of the year.
Valuation and Market Context
The $3.8 billion valuation reflects the high premium investors are placing on specialized AI-integrated security firms. Based on the projected $90 million ARR, the startup is being valued at more than 40 times its forecast revenue—a common, albeit high, yardstick for pricing fast-growing software companies in the current market.
While a 40x multiple is substantial, it remains notably lower than the 80x ARR valuation recently seen with Cyera, another high-growth cybersecurity startup. This disparity highlights the intense competition for capital and the varying growth expectations within the cybersecurity sector. Investors appear willing to pay significant multiples for companies that can demonstrate both immediate technological utility and the scalability required to fend off sophisticated digital threats.
The broader market context for this investment is supported by industry experts who see cybersecurity as the next critical frontier for AI integration. Tomasz Tunguz, a general partner at Theory Ventures and a prominent voice in the venture capital community, has argued that cybersecurity is poised to become the third major wave of AI-driven software adoption. According to Tunguz, companies are prioritizing spending on cybersecurity as the logical next step after investments in AI-powered coding tools and customer support automation.
Strategic Independence vs. Exit
By turning down Datadog’s acquisition offer, Upwind’s leadership has signaled a firm belief in the company’s long-term potential. The rejection implies that the startup’s internal projections for growth, market share, and future valuation significantly exceed the price point offered by an industry incumbent.
However, the path forward for a company like Upwind is rarely straightforward. While the startup clearly aims to build a sustainable, independent business, the cybersecurity market is characterized by high levels of consolidation. Because few pure-play cybersecurity companies have successfully navigated the transition to the public markets via an IPO in recent years, an eventual acquisition remains a probable exit strategy for many startups in this space.
Despite the failed bid from Datadog, interest in Upwind remains high. Sources familiar with the company suggest that it continues to draw attention from other potential acquirers, keeping the possibility of a future sale or strategic partnership on the table. For now, however, the influx of $400 million provides the company with a significant runway to continue scaling its engineering teams, refining its runtime security AI, and expanding its customer base without the constraints of being integrated into a larger, legacy platform.
As Upwind continues to grow, its ability to maintain its momentum while defending its cloud-native infrastructure will be the primary metric for its investors. The company’s success in securing such a large round—despite the volatility of the tech sector and the pressure of potential acquisition—underscores the critical nature of the problems it is solving.
TechCrunch has reached out to both Upwind and Datadog for official comments regarding the funding round and the reported acquisition attempt. As of the time of writing, the focus remains on how the company will deploy its capital to further its mission of securing cloud environments in real time. For Upwind, the decision to remain independent is a bet on its own technology and the growing demand for sophisticated, AI-driven protection in an era where software security is no longer just an IT concern, but a core business imperative.
