Upwind is a runtime-first CNAPP that combines eBPF-based workload sensors with agentless scanning and cloud activity logs to deliver continuous visibility across cloud inventory, networks, APIs, and data flows. Core capabilities cover CSPM, cloud workload protection, cloud detection and response, API security, and vulnerability management. The 2025 acquisition of Nyx Security added application runtime security, producing the In-Use Functions capability and a Cloud Application Detection and Response (CADR) module. The platform has since extended into agentic AI operations, with AI agents handling threat investigation, exposure validation, and remediation.