Orca Security
Portland, OR, United States
About
Orca Security is a cybersecurity company based in Portland, United States working in cloud security, application security, identity & access +2 more.
Orca Security provides an agentless, cloud-native security and compliance platform (CNAPP) for multi-cloud environments including AWS, Azure, Google Cloud and other cloud providers. Its patented SideScanning technology scans cloud environments without deploying agents, building a Unified Data Model that maps assets, vulnerabilities, misconfigurations, identities, sensitive data, APIs and AI models. The platform prioritises risks by analysing attack paths and reachability, and integrates with CI/CD pipelines, developer tools and ticketing, alerting and SIEM/SOAR systems. Capabilities include cloud security posture management, vulnerability management, cloud detection and response through the Orca Sensor, identity risk management, data security posture management, API security, container and Kubernetes security, and compliance checks against a large library of frameworks. Orca also offers AI-driven code fixes and AI agents. The company offers 24x7 monitoring and response across the cloud attack surface and serves enterprises across industries including financial services. Orca was founded in Israel and maintains offices in the United States, Israel and the United Kingdom.
Location
Focus areas
Languages
Services & products
Security domains
How they deliver
Operations
Products
Orca Cloud Security Platform
CNAPP
Agentless, cloud-native platform for multi-cloud security posture, vulnerability management, compliance, and risk prioritisation across AWS, Azure and GCP, built on the Orca Unified Data Model and SideScanning technology.
Orca Sensor
Cloud Detection and Response
Lightweight eBPF-based runtime sensor for real-time detection and prevention of threats such as fileless attacks and zero-day exploits in hybrid and multi-cloud environments.
Orca AI
AI security assistant
AI agents and assistant that analyse platform telemetry, generate code fixes and support remediation workflows.
Customers
Industries served
Compliance & partners
Technology partners
Credentials & affiliations
Certifications
ISO/IEC 27001
ISO/IEC 27017
ISO/IEC 27018
ISO/IEC 27701
SOC 2 Type II
FedRAMP Moderate Authorized
IRAP Certification
PCI SAQ-D
CSA STAR Level One Self-Assessment
AWS Advanced Technology Partner Security Competency
Awards
AWS Global Security Partner of the Year
100 Hottest Cloud Computing Companies
Leader for CNAPP
People
Management & team (7)
+ 3 more
Other cybersecurity companies in United States
View allAugust Schell
GRC & Compliance, Identity & Access +2 more
Rubrik
Data Protection, Detection & Response +3 more
SCYTHE
Offensive Security, Detection & Response +4 more
CyberSecOp
Managed Security, Detection & Response +13 more
Lucid Truth Technologies
Digital Forensics
NetFoundry
Network Security, Identity & Access +3 more