TLDR: Upwind has announced the full integration of Nyx, establishing what it claims to be the industry’s first unified Cloud Application Detection and Response (CADR) platform. This strategic move combines cloud infrastructure and application security, providing real-time, function-level runtime visibility to enhance threat detection and vulnerability prioritization across the entire stack.
Upwind, a leading next-generation cloud security provider, has officially completed the integration of Nyx, an embedded cybersecurity startup it acquired in April 2025. This significant milestone, announced on August 5, 2025, marks the launch of what Upwind describes as the industry’s first unified Cloud Application Detection and Response (CADR) platform.
The newly integrated platform offers unprecedented depth in threat detection and vulnerability prioritization, extending from the cloud infrastructure to the application layer. By embedding Nyx’s function-level runtime visibility, Upwind aims to provide a single, runtime-native solution that spans process behavior, network activity, API usage, and application function execution.
Amiram Shachar, CEO and co-founder of Upwind, emphasized the strategic importance of this integration, stating, “We acquired Nyx because we believe that runtime is where the real battle for cloud security is happening. And now that it’s fully integrated, we’re delivering a single platform that’s purpose-built to observe, understand, and stop attacks across cloud infrastructure and applications in production in real time.” Shachar further noted that the integration was fast-tracked due to a shared architectural foundation, with both platforms built for scale, low latency, and zero impact on production environments.
Traditional cloud security approaches often focus on scanning infrastructure and posture, potentially missing threats that emerge when code is running and services are live. Upwind’s CADR model, powered by Nyx’s eBPF-based engine, addresses this gap by anchoring detection and response in live telemetry. This allows the platform to track the path from misconfigurations to exploitable vulnerabilities within live application logic.
According to Shachar, “Unified runtime visibility reveals whether vulnerabilities or misconfigurations are actually exploitable in your live environment. With Nyx’s function-level analysis, infrastructure risks are tied directly to the specific application execution paths that make them reachable. While traditional CNAPP tools may flag hundreds of theoretical issues, this approach isolates the few that are truly accessible in production. Security teams can then focus their efforts on what’s most pressing.”
The integration also aims to bridge the long-standing gap between AppSec and cloud infrastructure teams by providing a shared window into runtime behavior. Shachar explained, “By combining Nyx’s application-layer runtime data with infrastructure-level insights in a single platform, AppSec and cloud security gain a shared view of the same evidence. Exploitable code vulnerabilities are linked directly to the infrastructure, identity, and runtime path that make them reachable. This shared visibility allows AppSec teams to fix the code while the cloud security team applies relevant controls, without any blind spots. It shortens handoffs and enables faster, more coordinated incident response.”
Also Read:
- Cycode Unveils AI Exploitability Agent to Revolutionize Vulnerability Prioritization
- Checkmarx Unveils AI-Powered Developer Assist Agent for Real-Time Code Security in AI-Native IDEs
Looking ahead, Upwind is committed to expanding its unified security model into new domains, including Data Security and AI Security, through both organic execution and strategic mergers and acquisitions, to protect the next generation of cloud-native workloads and address real-time AI-driven threats.
