Upwind brings runtime cloud security platform to Azure

Upwind has partnered with Microsoft to integrate its runtime cloud security platform into Azure environments and distribute it through the Microsoft Marketplace.

The companies are positioning the collaboration as a more unified approach to securing Azure workloads. The integrated product combines runtime protection, posture management and vulnerability detection in a single experience within Azure.

The Marketplace listing aligns with Azure services and will expand over the coming months. Planned additions include identity protection, internet exposure management and coverage for GenAI workloads.

Marketplace route

The Azure-focused offering has also received co-sell status within Microsoft's sales ecosystem. It is eligible for Microsoft Azure Consumption Commitment decrement, which can affect how some large customers account for Marketplace spend.

The product connects to several Azure data sources and security components, including Azure cloud audit logs, cloud security posture management frameworks and Azure Container Registry scanning. Upwind also said it streamlines onboarding for Azure cloud assets.

Upwind is integrating with Microsoft Sentinel, Sentinel Graph and Microsoft Defender for Cloud. The connections are intended to bring Upwind detections and findings into Microsoft security workflows used by many Azure customers.

Runtime focus

Upwind is positioning runtime visibility as a central differentiator. It said the platform pairs agentless visibility with eBPF-powered runtime detection, contrasting it with tools that rely on static rules, fragmented signals or posture-only scans.

The vendor also pointed to analyst commentary that has highlighted runtime visibility as a way to reduce blind spots in dynamic cloud environments. Upwind framed the Microsoft partnership as a way to embed runtime-first protection into Azure services used for logging and container image management.

Beyond runtime detection, Upwind said the platform combines posture management, workload protection, threat detection, vulnerability management and identity security. It said the approach reduces false positives and gives security teams clearer remediation and response priorities.

Target sectors

The partnership targets large organisations running security operations on Azure, including regulated industries. Upwind cited financial services and healthcare, along with digital-native enterprises, as customer profiles where it expects demand for runtime visibility and faster risk identification.

Upwind also emphasised a broader multi-cloud approach alongside the Azure integration, saying customers can apply its security controls across Azure and other major cloud platforms with a single view of risk.

It also said it extends runtime visibility and protection into serverless workloads-an area where security teams often face limits with traditional host-based monitoring and where cloud-native controls can vary by service.

Amiram Shachar, CEO and co-founder of Upwind, described the pace of cloud change as a pressure point for security teams.

"Cloud innovation is accelerating faster than traditional security platforms can keep up," said Amiram Shachar, CEO and co-founder of Upwind. "Upwind solves that problem, and by partnering with Microsoft we're embedding our runtime-first protection directly into the fabric of Azure, from audit logs to container registries, giving customers the ability to discover and act on threats before they become breaches. This is both an integration and a redefinition of how cloud security should work, setting a new benchmark for protecting enterprises across Azure and their mutli-cloud investments."

Microsoft described the partnership as adding runtime security to Azure-native services and Marketplace procurement. Tom Davis, Partner at Microsoft Startups at Microsoft, said customers want to focus on vulnerabilities that are exploitable in real time.

"Our partnership with Upwind highlights Microsoft's commitment to equipping enterprises with cloud runtime security foundation," said Tom Davis, Partner at Microsoft Startups at Microsoft.

Growth claims

Upwind used the announcement to underline its commercial momentum, reporting 900% year-over-year revenue growth and 200% logo growth. It said the figures reflect demand for runtime-based cloud security products beyond posture management.

Petrofac, which runs workloads on Azure Kubernetes Service, provided an early-user example of what Upwind says the platform delivers during onboarding.

"Within the first few hours of connecting to the platform, we already had an actionable list of recommendations to strengthen our AKS security," said Shahab Siddiqui, Global Head of Cyber Security at Petrofac. "Upwind has already shown us the power of runtime visibility, and its growing partnership with Microsoft gives us confidence that these capabilities will continue to be deeply integrated into our Azure environment. We're excited to see how this partnership will further simplify our operations and strengthen our security posture moving forward."

Upwind also cited recent analyst and industry recognition across cloud security and container security categories, along with a Gartner Peer Insights rating in the CNAPP category. It expects the Microsoft relationship to deepen through further product expansion into additional Azure security areas in the coming months.