Upwind Integrates Runtime-First Cloud Security Platform With AWS Security Hub Extended Plan

New integration enables customers to gain deep, real-time visibility across AWS workloads while reducing alert noise.

Published on Feb. 26, 2026

Got story updates? Submit your updates here. ›

Upwind, a runtime-first cloud security leader, announced that its cloud-native application protection platform (CNAPP) is now integrated with the Extended plan in AWS Security Hub, Amazon Web Services' unified security solution. This integration allows customers to gain deeper, real-time visibility across their AWS workloads while reducing alert noise and focusing on the risks that matter most. By combining AWS detection services with Upwind's runtime context, customers can prioritize active risk, streamline security operations, and strengthen protection of their workloads on AWS, through a simplified single-vendor Amazon Confidential experience.

Why it matters

As organizations rapidly scale containerized workloads, serverless architectures, and AI-driven applications, traditional security approaches built on periodic scans and static posture checks are struggling to keep pace. Security teams need systems that operate at cloud speed, where detection, correlation, and response happen in real-time and continuously, not in snapshots. This integration allows customers to base their security decisions on live signals, not assumptions, which changes how teams prioritize risk, operate, and move quickly.

The details

The Extended Plan for AWS Security Hub simplifies how enterprises deploy and manage security tooling within AWS. By integrating directly into this framework, Upwind becomes part of a consolidated operating model, allowing security leaders to standardize procurement and align security operations more tightly with their existing AWS investments. Together, AWS Security Hub and Upwind help organizations shift from fragmented investigations to a more unified security workflow. Security Hub surfaces correlated findings and attack paths across AWS services, while Upwind enriches those findings with runtime-level insight to validate and investigate real risk.

  • Upwind announced the integration on February 26, 2026.

The players

Upwind

A runtime-first cloud security leader and the developer of a cloud-native application protection platform (CNAPP).

AWS Security Hub

Amazon Web Services' unified security solution that delivers curated enterprise security solutions from AWS and partners with simplified purchasing.

Amiram Shachar

CEO and co-founder of Upwind.

Jerich Beason

CISO at Waste Management.

Got photos? Submit your photos here. ›

What they’re saying

“Cloud infrastructure changed faster than the security models designed to protect it. Integrating Upwind's runtime-first cloud security platform with Security Hub Extended Plan, allows decisions based on live signals, not assumptions.”

— Amiram Shachar, CEO & Co-founder

“Upwind provides deep visibility and clarity across our AWS environment, allowing us to focus on real, actionable risk. After an in-depth evaluation of CNAPP platforms and extensive hands-on testing, we chose Upwind and rolled it out across our AWS and broader cloud infrastructure. Since deployment, we've seen a significant reduction in security alerts and fewer irrelevant CVEs. That level of clarity enables our teams to prioritize what actually matters and operate far more efficiently.”

— Jerich Beason, CISO

What’s next

The Extended Plan for AWS Security Hub is immediately available in all commercial AWS regions.

The takeaway

This integration between Upwind's runtime-first cloud security platform and the AWS Security Hub Extended Plan represents the next step in how enterprises can protect modern cloud environments at scale by combining centralized visibility with real-time, runtime-level insight to prioritize and respond to the most critical security risks.