Jun 10, 2026 · 42 min · 10 segments
Modern cloud environments are evolving faster than traditional security models can keep up. In this episode, we sit down with Yarin Pinyan, VP Products at Upwind, to explore how real-time runtime…
Yarin PinyanGuest
Ashok MahajanHost
Nolan ChenHost
CNAPP is something that takes the CSPM on a higher level with more capabilities, which is Cloud Native Application Protection Platform.
So Upwind is a runtime-powered cloud native application protection platform, which means that the first thing that we'll be doing at Upwind, and in general in the CNAPP space, is to give the customer visibility into what is running in the cloud, what's exposed to potentially attackers, intruders, bad actors, malicious attackers that will try to target your environment.
And the one of the most important thing will be to help you with understanding where you are vulnerable, what's exposed, what's misconfigured.
For example, you can deploy your S3 buckets with public exposure without knowing that you exposed them in public exposure.
And we've seen throughout the history a lot of, uh, a lot of bad experiences where buckets were exposed and exfiltrated and virtual machines with vulnerabilities were exploited by the attackers.
And so the CNAPP approach of Upwind is doing it in a pretty simple way, but way different than what happened in this industry.
All of the CNAPP platforms and CSPM platforms, they're working in what we call outside-in approach.
Outside-in means that they will take a snapshot of your environment once in twenty-four hours.
They will scan this snapshot on the side, which means that they will lo-look for all the secrets, the malware, the vulnerabilities, the misconfigured assets, the misconfigured buckets, the misconfigured EC2 instances that you run in the cloud.
And then they will tell you what is your posture, how secure you are, what are the issues that you have in the cloud.
But throughout the history, and especially now that we're talking about the AI era, everything moves faster than once in twenty-four hours.
If you're securing the, your environment once in twenty-four hour, you're as secured as you...
And so what we have done differently is that we do scan agentlessly, and we do have the mechanism to scan once in twenty-four hours and take a snapshot of, you know, of your environment.
But we're doing it differently because we're also deploying runtime sensor that helps you with validating these findings in real time, which means that if a CNAPP platform is finding you have vulnerabilities within your code, CVEs within your code, then these are being scanned by the static scanning.
Upwind will validate how these vulnerabilities are actively being used inside your environment, if they are loaded inside the code, if they are used in the right way to be exploited.
CNAPP is something that takes the CSPM on a higher level with more capabilities, which is Cloud Native Application Protection Platform.
So Upwind is a runtime-powered cloud native application protection platform, which means that the first thing that we'll be doing at Upwind, and in general in the CNAPP space, is to give the customer visibility into what is running in the cloud, what's exposed to potentially attackers, intruders, bad actors, malicious attackers that will try to target your environment.
And the one of the most important thing will be to help you with understanding where you are vulnerable, what's exposed, what's misconfigured.
For example, you can deploy your S3 buckets with public exposure without knowing that you exposed them in public exposure.
And we've seen throughout the history a lot of, uh, a lot of bad experiences where buckets were exposed and exfiltrated and virtual machines with vulnerabilities were exploited by the attackers.
And so the CNAPP approach of Upwind is doing it in a pretty simple way, but way different than what happened in this industry.
All of the CNAPP platforms and CSPM platforms, they're working in what we call outside-in approach.
Outside-in means that they will take a snapshot of your environment once in twenty-four hours.
They will scan this snapshot on the side, which means that they will lo-look for all the secrets, the malware, the vulnerabilities, the misconfigured assets, the misconfigured buckets, the misconfigured EC2 instances that you run in the cloud.
And then they will tell you what is your posture, how secure you are, what are the issues that you have in the cloud.
But throughout the history, and especially now that we're talking about the AI era, everything moves faster than once in twenty-four hours.
If you're securing the, your environment once in twenty-four hour, you're as secured as you...
And so what we have done differently is that we do scan agentlessly, and we do have the mechanism to scan once in twenty-four hours and take a snapshot of, you know, of your environment.
But we're doing it differently because we're also deploying runtime sensor that helps you with validating these findings in real time, which means that if a CNAPP platform is finding you have vulnerabilities within your code, CVEs within your code, then these are being scanned by the static scanning.
Upwind will validate how these vulnerabilities are actively being used inside your environment, if they are loaded inside the code, if they are used in the right way to be exploited.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.
