Upwind
Cloud security that knows what's actually running.

Why cloud security needs to know what's actually running

Organizations in the cloud get long lists of vulnerabilities and misconfigurations from scanning tools - thousands of findings, most of which aren't actually exploitable. Development and DevOps teams can't fix everything, and the real risk gets lost in the noise.

Upwind adds the runtime layer: a lightweight eBPF-based sensor sees which packages are actually loaded, which services are exposed to the internet and what traffic flows between them. That lets you focus on the findings that truly put the environment at risk, and detect an active attack rather than just a theoretical weakness.

• Less noise and shorter remediation time for development and DevOps teams.
• Real-time detection of anomalous activity in workloads, not just periodic scans.
• Visibility into attack paths that link exposure, vulnerability and excessive permissions.
• A documented basis for managing cloud risk with customers, auditors and investors.

What you get

• Cloud accounts (AWS, Azure, GCP) connected and the sensor deployed on clusters and hosts per an agreed plan.
• Mapping of assets, configurations and permissions, with an initial gap report and remediation priorities.
• Policies and alerts tuned to your environment, including alert channels to the relevant teams.
• Findings connected to your existing tools (ticketing, chat, CI/CD) so fixes reach the people who own them.
• Ongoing tracking of risk trends and periodic management reports.

Why deploy Upwind with ELPC

A CNAPP delivers value only when someone turns its findings into organized work. ELPC bridges security, development and DevOps teams, and deploys Upwind as part of your organization's risk management process.

• Environment assessment and a gradual deployment plan, coordinated with infrastructure and development teams.
• Policies, alert thresholds and clear handling processes - who fixes what, in what order and by when.
• Ongoing support: tracking findings, handling runtime alerts and continuous tuning, with Hebrew-speaking support.
• Integration with the rest of your security stack, such as endpoint protection, SIEM and identity management.

Upwind helps document cloud controls that support ISO 27001, SOC 2, GDPR and Amendment 13 to Israel's Privacy Protection Law - particularly around personal data stores in the cloud and access to them. ELPC also supports vendor due diligence: security reports, the data processing agreement (DPA) and understanding what data the sensor collects.