AWS Security Hub Extended Integrates Upwind for Cloud Workload Protection

Upwind Joins Security Hub Extended

AWS Security Hub Extended has announced the integration of Upwind, a cloud security provider, into its program. This move allows AWS customers to access Upwind's full solution portfolio, including its runtime-first protection capabilities, directly through their existing AWS accounts.

Customer-Driven Integration

The decision to include Upwind was driven by customer feedback, as Upwind was frequently named as a preferred solution for enterprise security. AWS aims to simplify adoption and integration for customers by offering multiple best-of-breed options within Security Hub Extended, even if some services overlap with AWS's own offerings.

Upwind's Offering and Impact

Upwind committed to full integration, offering aggressive pay-as-you-go pricing and aligning its field organization for joint deal flow. According to Upwind CEO Amiram Shachar, this integration provides customers with Upwind's cloud workload protection through the same AWS billing, support path, and operational model they already use, leading to better outcomes for shared customers.

Runtime-First Security Approach

Upwind differentiates itself with a runtime-first approach to cloud security. Unlike solutions that primarily scan static configurations, Upwind deploys eBPF-based sensors directly into the Linux kernel. These sensors continuously observe workload behavior in real-time, including process activity, network connections, API calls, and container interactions, to identify potential risks.