What Upwind is
Upwind has built CNAPP from the ground-up around runtime insights provided from a network focused endpoint agent. They provide unique features like API security, alongside vulnerability prioritization and scanning, and the more generic CNAPP feature sets. The vendor site is www.upwind.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Upwind covers
Upwind is in the catalog for these capabilities. Categories: ADR, CDR, CNAPP, Kubernetes Security, CADR, Container Vulnerability, API Security, CSPM, Data Security, and AI Security. Catalog tags: Hot Right Now, Hands-on, Open Source, Nerdy, Best for Enterprise, Best for MidMarket, Best for Startups, and Trending.
How to evaluate Upwind in a security program
Use Upwind as a stack candidate, not as diligence evidence. The oneNorma score for Upwind is 7.3/10 (percentile 99). If the real gap is in ADR, CDR, CNAPP, Kubernetes Security, CADR, Container Vulnerability, API Security, CSPM, Data Security, and AI Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.upwind.io publishes. Contrast it with pentesting and Security Cloud & Compliance.
