.webp)
Runtime-powered cloud security platform using eBPF sensors and AI agents for detection and response.
Company Overview
Competitors
Wiz:
Agentless-first CNAPP incumbent with massive distribution; differentiates on breadth and Microsoft relationship, not runtime depth.
Orca Security:
Agentless SideScanning leader; competes on zero-deployment posture scanning but lacks live runtime telemetry.
Sweet Security:
Israeli runtime-focused competitor with a similar eBPF thesis; smaller footprint and narrower platform scope.
Upwind Security
's Moat:
A proprietary eBPF-based runtime sensor architecture paired with a Neo4j-backed asset relationship graph gives Upwind live execution context that agentless competitors cannot replicate without an equivalent sensor investment that takes years to deploy at scale.
How They're Leveraging AI
AI Use Overview:
Upwind combines eBPF runtime sensors with asset-graph reasoning in Neo4j, reachability analysis, AI-driven investigation, and runtime-aware SAST to prioritize the small set of risks that are actually exploitable in production rather than the broader vulnerability noise.
Harvey AI
Generative AI platform automating legal workflows for law firms and in-house counsel
A category-defining wedge into a $1T legal services market with deep enterprise penetration, OpenAI alignment, and workflow lock-in that incumbents cannot easily replicate.
XBOW
Autonomous AI agents that continuously pentest web apps and validate exploits end to end.
Agentic pentesting is one of the few security categories where LLMs plausibly replace expensive human labor, and XBOW has the team and early proof points to own it.
