Upbound V3 unifies cloud and AI agent infrastructure governance
Upbound, the company behind open-source control plane framework Crossplane, has released Upbound V3, a significant expansion of its infrastructure platform that aims to give enterprises a single operational and governance layer across cloud, on-premises and air-gapped environments. The release is available immediately and targets the growing challenge of fragmented infrastructure tooling across multi-cloud deployments, with particular attention to how AI agents are beginning to operate alongside human engineers.
The core premise of V3 is that modern enterprise infrastructure is increasingly operated not just by people but by automated pipelines and AI systems that require programmatic, consistent access to infrastructure state. Upbound argues that the patchwork of control planes most organisations have accumulated makes this difficult to achieve safely: each plane manages its own slice, with no common view of what is running or who can change it.
What V3 adds
Three new capabilities anchor the release. Hub provides a unified API that indexes resources across an organisation's connected control planes, allowing platform teams, developer portals, compliance tooling and AI agents to query infrastructure state without connecting to each control plane individually. The accompanying Console offers a single web interface for human operators. Upbound Insights, also new in V3, delivers a live, searchable view across the full infrastructure estate, including the Kubernetes clusters underlying Upbound Control Plane.
Governance has been extended to cover AI agent identity explicitly. V3 introduces fleet-wide single sign-on, role-based permissions and centrally managed credentials that apply equally whether an infrastructure request originates from an engineer or an AI system. The company says AI agents can be authenticated, scoped and audited under the same policy enforcement model as human operators, removing the need for a separate governance overlay.
Supply chain security has also been addressed: the Upbound Marketplace now publishes per-version CVE summaries and downloadable Software Bills of Materials ahead of installation, and official images are signed and delivered at SLSA Level 2 with backported patches and defined support windows. The self-hosting option now extends to the full platform, including Console, with support for fully air-gapped deployments.
Bassam Tabbara, CEO and founder of Upbound, said: "Platform teams need a way to give engineers and AI agents access to infrastructure without creating another layer of fragmented tooling or sacrificing governance. Upbound V3 gives them one platform for operating their entire control plane fleet, whether the work is being done by a person, a pipeline or an agent."
Market context
Upbound operates in a crowded infrastructure-platform-engineering space that includes offerings from HashiCorp (acquired by IBM), Pulumi, Humanitec and a growing cohort of internal developer platform specialists. The differentiator Upbound is pressing is Crossplane's community traction: the project graduated within the Cloud Native Computing Foundation in 2025 and has logged more than 100 million downloads, with production adoption reported at over 1,000 organisations. That installed base gives Upbound a meaningful distribution advantage as it sells commercial tooling on top of the open-source framework.
The AI agent angle is increasingly common positioning in infrastructure tooling, but few vendors have yet articulated a concrete governance model for non-human operators. Upbound's approach, applying the same identity, permissions and audit trail to AI agents as to human engineers, is a credible architectural response to a problem that enterprise security and compliance teams are actively wrestling with. Whether buyers will view this as genuinely differentiated or as table stakes will become clearer as agentic workflows move from pilots to production.
Upbound is a Series B company backed by GV, Altimeter Capital and Intel Capital, with $69 million raised to date. The release does not disclose customer numbers, ARR, or pricing for V3, leaving analysts and prospective buyers without the commercial data needed to benchmark competitive value.