Orca Security

Orca Security

Portland, OR, United States

Cloud SecurityApplication SecurityIdentity & AccessData Protection24/7 SOC
Serves Enterprise
Profile last updated: May 3, 2026

About

Orca Security is a cybersecurity company based in Portland, United States working in cloud security, application security, identity & access +2 more.

Orca Security provides an agentless, cloud-native security and compliance platform (CNAPP) for multi-cloud environments including AWS, Azure, Google Cloud and other cloud providers. Its patented SideScanning technology scans cloud environments without deploying agents, building a Unified Data Model that maps assets, vulnerabilities, misconfigurations, identities, sensitive data, APIs and AI models. The platform prioritises risks by analysing attack paths and reachability, and integrates with CI/CD pipelines, developer tools and ticketing, alerting and SIEM/SOAR systems. Capabilities include cloud security posture management, vulnerability management, cloud detection and response through the Orca Sensor, identity risk management, data security posture management, API security, container and Kubernetes security, and compliance checks against a large library of frameworks. Orca also offers AI-driven code fixes and AI agents. The company offers 24x7 monitoring and response across the cloud attack surface and serves enterprises across industries including financial services. Orca was founded in Israel and maintains offices in the United States, Israel and the United Kingdom.

Location

Portland, United States

Focus areas

CNAPPCloud SecurityAgentlessSideScanningCSPMCloud Detection and ResponseApplication SecurityAI Security

Languages

EN

Services & products

Security domains

Cloud SecurityApplication SecurityIdentity & AccessData ProtectionDetection & Response

How they deliver

Software

Operations

Runs a 24/7 security operations centre

Products

Orca Cloud Security Platform

CNAPP

Agentless, cloud-native platform for multi-cloud security posture, vulnerability management, compliance, and risk prioritisation across AWS, Azure and GCP, built on the Orca Unified Data Model and SideScanning technology.

Orca Sensor

Cloud Detection and Response

Lightweight eBPF-based runtime sensor for real-time detection and prevention of threats such as fileless attacks and zero-day exploits in hybrid and multi-cloud environments.

Orca AI

AI security assistant

AI agents and assistant that analyse platform telemetry, generate code fixes and support remediation workflows.

Customers

Enterprise

Industries served

Financial ServicesMedia & Entertainment

Compliance & partners

Technology partners

Amazon Web ServicesMicrosoft AzureGoogle CloudOracle CloudAlibaba CloudTencent Cloud

Credentials & affiliations

Certifications

ISO/IEC 27001

ISO/IEC 27017

ISO/IEC 27018

ISO/IEC 27701

SOC 2 Type II

FedRAMP Moderate Authorized

IRAP Certification

PCI SAQ-D

CSA STAR Level One Self-Assessment

Issued by: Cloud Security Alliance

AWS Advanced Technology Partner Security Competency

Issued by: Amazon Web Services

Awards

AWS Global Security Partner of the Year

Amazon Web Services2022

100 Hottest Cloud Computing Companies

CRN2026

Leader for CNAPP

GigaOm2025

People

Management & team (7)

+ 3 more

Other cybersecurity companies in United States

View all