Cloud security company Upwind has acquired Aegis, an Israeli artificial intelligence security startup, in a move designed to deepen its threat detection and response capabilities within cloud runtime environments. The deal, reported by Globes coverage of the Israeli technology sector, underscores the growing appetite among cybersecurity vendors to embed AI-native tooling directly into their platforms rather than bolt it on after the fact. Financial terms of the transaction were not disclosed.

The acquisition arrives as enterprise demand for real-time cloud security intelligence continues to accelerate, with vendors competing to offer platforms that can detect, contextualize, and respond to threats at the speed that modern cloud infrastructure operates. Upwind, which focuses on runtime security for cloud-native applications, positions Aegis’s capabilities as a direct complement to its existing sensor-based architecture. The broader consolidation trend in Israeli defense tech and cybersecurity is increasingly drawing strategic buyers toward early-stage startups with specialized AI tooling before those assets reach scale.

Aegis’s AI Engine and What Upwind Gains

Aegis was built around the premise that traditional signature-based and rule-driven security tools are structurally ill-suited to the dynamic, ephemeral nature of cloud workloads. The startup developed an AI-driven engine capable of identifying anomalous behavior patterns across containerized and serverless environments in real time, a technical problem that has proved difficult to solve at scale. By integrating Aegis’s models into its platform, Upwind gains the ability to correlate runtime signals with code-level context, offering security teams a more precise picture of active threats without generating the alert fatigue that plagues many competing products.

Upwind, which had previously raised funding from investors including Greylock Partners and Cyberstarts, has been positioning itself as a next-generation alternative to legacy cloud security posture management tools. The Aegis acquisition allows it to extend that pitch beyond static configuration analysis into live, in-execution threat monitoring. Industry analysts have noted that the ability to tie runtime behavior back to specific code commits or container images — a capability Upwind has emphasized — is increasingly a purchasing criterion for large enterprise customers running complex multi-cloud deployments.

Israeli Cybersecurity M&A Remains Active Despite Broader Market Caution

The transaction is the latest in a sustained run of acquisition activity targeting Israeli cybersecurity startups, a cohort that has built a global reputation for producing technically sophisticated teams with deep expertise in offensive and defensive security research. Israel’s cybersecurity sector generated several billion dollars in exit value over the past few years, even as venture funding across the broader technology landscape tightened. Buyers ranging from large American platform vendors to specialist security companies have continued to view Israeli teams as high-value targets, particularly those working at the intersection of AI and infrastructure security.

Upwind’s decision to acquire rather than build internally reflects a calculation common among growth-stage security vendors: that the time required to recruit and train specialized AI research talent, then integrate that work into a production platform, is too costly relative to acquiring a team that has already solved a defined technical problem. This dynamic has sustained deal flow in the Israeli market even as initial public offering windows have remained largely closed for technology companies. The move also aligns with the broader industry observation — explored in earlier reporting on AI infrastructure spending — that capital is flowing aggressively toward applied AI capabilities embedded in enterprise software stacks, rather than toward general-purpose model development.

Aegis’s founding team is expected to remain with Upwind following the close of the transaction, a standard retention structure for acqui-hire-adjacent deals in the security space. Upwind has not specified a timeline for integrating Aegis’s technology into its generally available product, but indicated that the combined engineering effort would focus on extending its runtime AI coverage across additional cloud providers and workload types. The company competes in a market that includes well-capitalized players such as Wiz, Orca Security, and Lacework, all of which have been investing heavily in expanding their detection and response capabilities.