Orca Security
Orca Security is an Israeli cloud security company that provides an agentless Cloud-Native Application Protection Platform (CNAPP) for enterprise and mid-market customers, consolidating CSPM, CWPP, CIEM, DSPM, CDR, AI-SPM, and AppSec into a unified platform with AI-powered threat investigation and agentic remediation.
- Company typePrivate
- Founded2019
- HeadquartersPortland, United States
- Headcount251–500
- GTM typeB2B
- OfferingSoftware
What Orca Security does
Orca Security is an Israeli-founded cloud security company that delivers an agentless Cloud-Native Application Protection Platform (CNAPP) to enterprise and mid-market customers worldwide. The platform uses proprietary SideScanning technology to read workload runtime data out-of-band, eliminating the need to install agents on every cloud instance and enabling rapid deployment across AWS, Azure, Google Cloud, Oracle Cloud, and Kubernetes environments. Orca consolidates CSPM, CWPP, CIEM, DSPM, CDR, AI-SPM, and AppSec into a single unified data model, covering more than 180 compliance frameworks and holding FedRAMP, StateRAMP, IRAP PROTECTED, ISO 27001/27017/27018/27701, and SOC 2 Type II certifications.
The company's customer base spans large global enterprises across financial services, technology, media, government, retail, and healthcare, with named deployments including Autodesk, SAP, Gannett, Unity, Lemonade, Digital Turbine, Sisense, Blue Yonder, Carlsberg, RSA Security, Swiggy, Paidy, C6 Bank, Vivino, Wiley, and Globe. Orca's go-to-market combines direct enterprise sales, channel distribution through TD SYNNEX (announced April 2026) and regional partners such as Wavelink (ANZ) and Globe (Philippines), and a Strategic Collaboration Agreement with AWS. Product velocity has accelerated into agentic AI, with AI Agents, MCP support, AI-generated code fixes, AI-SPM, and the May 2025 acquisition of Opus extending the platform into autonomous remediation.
The business operates a subscription SaaS model with enterprise pricing, and has raised more than $640M in cumulative funding across multiple rounds including a $340M Series C in October 2021 that valued the company at $1.8B. Recent strategic moves include the Opus acquisition, AWS SCA, TD SYNNEX distribution, and platform launches at RSAC 2026, while reported customer outcomes include $1.5M annual savings, 198% ROI, and 90% vulnerability reduction via reachability-based prioritization. Geographic expansion into Brazil, ANZ, India, and the Philippines signals continued international scaling.
Orca Security firmographics
Firmographics- Name
- Orca Security
- Legal name
- Orca Security Ltd.
- Website
- https://orca.security
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 251–500 employees
- Short description
- Orca Security is an Israeli cloud security company that provides an agentless Cloud-Native Application Protection Platform (CNAPP) for enterprise and mid-market customers, consolidating CSPM, CWPP, CIEM, DSPM, CDR, AI-SPM, and AppSec into a unified platform with AI-powered threat investigation and agentic remediation.
- Ownership category
- akta.pro rank
Orca Security industry classification
Industry- Product category
- Cloud Security Platform (CNAPP)
- NAICS
- Software Publishers (513210), Computer Systems Design Services (541512)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)
- akta.pro primary industry
- CNAPP Platforms (Unified CNAPP) (HDADADAA)
- akta.pro secondary industries
- Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK)
Keywords
Where Orca Security is headquartered
LocationHeadquarters
- HQ city
- Portland
- HQ country
- United States
- HQ region
- North America
Offices4 records
Markets served
Orca Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- Enterprise SaaS subscription: Recurring subscription revenue from cloud security platform licensing, with simple and predictable pricing that does not use credits; positioning emphasizes land-and-expand across CSPM, CWPP, CIEM, DSPM, AI-SPM, CDR, and AppSec modules.
- Marketplace transactions (AWS & Oracle): Revenue transacted through AWS Marketplace and Oracle Cloud Marketplace, including a 'Try Free with AWS' option that converts to paid subscriptions; supports simplified enterprise procurement.
- Channel/Partner-enabled distribution revenue: Revenue from sales transacted through distribution (TD SYNNEX) and channel partners (Wavelink ANZ, Globe PH, etc.) with dedicated credit lines, where the partner earns margin on the platform sale.
- Implementation/Advisory services via partners: Adjacent services revenue via implementation and assessment partners such as Coalfire (preferred partner for cloud risk assessments), tied to deployment and onboarding of the platform.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | — | Custom / Quote-based enterprise pricing |
| Freemium | — | Free trial via AWS Marketplace |
Go-to-market motion5 records
Distribution channels9 records
Orca Security product offering
Product offeringCore offering
Orca Security provides an agentless, AI-powered Cloud-Native Application Protection Platform (CNAPP) that consolidates CSPM, CWPP, CIEM, DSPM, AI-SPM, CDR, vulnerability management, API security, and application security on a single Unified Data Model. Its patented SideScanning technology reads cloud workload block-storage snapshots and cloud provider APIs out-of-band, eliminating agent deployment while delivering full multi-cloud visibility across AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud, and Tencent Cloud within hours. The platform is sold as enterprise SaaS subscriptions to thousands of large organizations across financial services, technology, government, healthcare, retail, and media.
Differentiator
Problem solved
Functional benefit
Brands
- Orca Platform: The flagship Orca Cloud Security Platform, unifying CSPM, CWPP, CIEM, DSPM, CDR, API security, application security, AI security, and Orca AI capabilities on a single unified data model.
- Orca Sensor
- Orca AI
- SideScanning
- AI Security Posture Management (AI-SPM)
Products and services
- Orca Cloud Security Platform (CNAPP) A unified, agentless AI-powered Cloud-Native Application Protection Platform (CNAPP) for enterprises that consolidates CSPM, CWPP, CIEM, DSPM, AI-SPM, CDR, vulnerability management, container and Kubernetes security, API security, and application security on a single Unified Data Model. Delivered as a SaaS subscription with patented SideScanning technology for instant full multi-cloud visibility across AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud, and Tencent Cloud, targeted at CISO, security practitioner, and DevOps personas in regulated and cloud-native organizations.
- Orca Sensor A lightweight, eBPF-based runtime sensor that extends the agentless Orca Platform with real-time Cloud Detection and Response (CDR) and runtime visibility for advanced threat detection across multi-cloud, hybrid, and private cloud environments. Detects fileless attacks, zero-day exploits, and runtime AI activity without the performance drag of legacy agents.
- Orca AI An AI-driven product layer within the Orca Platform that deploys autonomous agents (Threat Investigation Agent, AppSec Triage Agent) to accelerate alert analysis, action plans, and remediation across multi-cloud environments. Includes AI-Generated Code Fixes (one-click pull requests), runtime AI threat detection, and Orca Missions, integrated with the Model Context Protocol for universal GenAI access.
Quantifiable outcome
- 198% Return on Investment (representative enterprise case)
- +6 more outcomes
Companies that use Orca Security
Customer profileNamed customers16 records
Segments9 records
Ideal customer profiles4 records
Orca Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration30 records
AI capability4 records
Feature7 records
Orca Security partnerships and signals
Strategic signalPartnerships
19 partnerships are on record, tiered flagship north american distribution partnership, flagship / core strategic partnership, core strategic partnership, specialty / niche partnership (cyber-insurance), workflow integration, core technology integration, acquisition (now part of orca), core technology partnership, developer workflow integration, regional partner ecosystem, core data security integration, core regional distribution partnership (anz), regional distribution partnership (philippines), core preferred assessment partner, co-marketing / event sponsorship partner and managed services ecosystem.
- TD SYNNEXflagship north american distribution partnershipOrca Security announced a strategic distribution agreement for North America with TD SYNNEX in April 2026, transitioning from a reseller model to a distribution-led approach. The partnership provides Orca's partners with streamlined procurement, dedicated credit lines, and access to localized expertise. TD SYNNEX gains access to Orca's agentless cloud security technology for its customer base.
- Amazon Web Services (AWS)flagship / core strategic partnershipOrca Security signed a Strategic Collaboration Agreement with AWS in April 2026 to help organizations strengthen cloud security posture using AI. The agreement enables joint customers to leverage Orca's AI capabilities powered by Amazon Bedrock for faster risk remediation, improved visibility through combined security signals, and simplified procurement via AWS Marketplace. Blue Yonder is a referenced joint customer. Orca was also named 2022 AWS Global Security Partner of the Year and holds AWS Advanced Technology Partner Security Competency.
- Zscalercore strategic partnershipOrca Security and Zscaler expanded their strategic partnership to integrate cloud security through Zero Trust architecture. The integration ingests Zscaler Private Access (ZPA) metadata into Orca's platform to automatically contextualize security alerts and improve risk prioritization for joint customers, reducing alert fatigue by combining vulnerability insights with access context. Peraton also expanded its Zscaler partnership with Orca.
- Oracle Cloudcore strategic partnershipOrca Security became available on the Oracle Cloud Marketplace in November 2025, integrating its offerings into Oracle's cloud platform. Orca is also listed as an Oracle Cloud partner in the company's Technology Ecosystem.
- Antigen Securityspecialty / niche partnership (cyber-insurance)Antigen Security and Orca Security partnered to deliver up to 60% cyber-insurance savings for cloud-first organizations, integrating Orca's security posture data with Antigen's insurance offerings.
- monday.comworkflow integrationOrca Security integrated with monday.com to streamline security remediation workflows, allowing security findings to be tracked and resolved in customer project management processes.
- AWS Security Hubcore technology integrationOrca Security integrated with AWS Security Hub to enhance cloud risk visibility, allowing joint customers to consolidate findings from Orca's agentless platform within the AWS-native security operations workflow.
- Opus (Agentic AI Cloud Security)acquisition (now part of orca)Orca Security acquired Opus, a startup specializing in agentic AI-driven cloud security automation and remediation, in a deal estimated at tens of millions of dollars. The acquisition integrates Opus's technology into Orca's CNAPP to enable autonomous, AI-driven threat response, risk prioritization, and workflow automation.
- Aqua Securitycore technology partnershipAqua Security and Orca Security partnered to address the joint customer need for best-in-class cloud native security, with the CEOs of both companies jointly promoting their partnership and targeting Palo Alto Networks. The partnership was announced November 2024.
- Bitbucketdeveloper workflow integrationOrca Security introduced a Bitbucket App to simplify application security for development and security teams, scanning Bitbucket repositories for security issues as part of its shift-left capabilities.
- India channel partner network (unnamed)regional partner ecosystemOrca Security drives hypergrowth in India with a partner-first strategy and AI-driven demand for comprehensive cloud security, with multiple Indian channel partners reselling the platform.
- Snowflakecore data security integrationOrca Security added support for Snowflake to bolster Data Security Posture Management (DSPM), enabling customers to discover and protect sensitive data in Snowflake data warehouses as part of its CNAPP.
- Wavelinkcore regional distribution partnership (anz)Wavelink is Orca's distribution partner for the Australia and New Zealand (ANZ) region as part of Orca's partner-first expansion strategy announced October 2024. The partnership supports the growing regional demand for cloud security.
- Globe (Globe Business)regional distribution partnership (philippines)Globe Business partnered with Orca Security to elevate cloud security offerings for Philippine enterprises, supporting Orca's expansion into the Philippines market.
- Coalfirecore preferred assessment partnerCoalfire selected Orca Security as a Preferred Partner for cloud risk assessments, supporting joint customers with security validation and assessment engagements.
- RapidSecacquisition (now part of orca)Orca Security acquired RapidSec, an Israeli cybersecurity startup specializing in web application protection from client-side attacks. The acquisition brought RapidSec's technology, eight employees, and two founding engineers into Orca, enhancing its client-side and API security capabilities integrated into the Orca platform by the end of 2022.
- Chainguardco-marketing / event sponsorship partnerChainguard is a Platinum sponsor alongside AWS, Orca Security, and Zscaler for the Black Hat USA 2026 Las Vegas Grand Prix F1 go-kart networking event, indicating a co-marketing relationship in the cloud security ecosystem.
- Nucleusco-marketing / event sponsorship partnerNucleus is a Gold sponsor alongside AWS for the Black Hat USA 2026 Las Vegas Grand Prix F1 go-kart networking event co-hosted with Orca Security, AWS, and Chainguard.
- Managed Service Providers (MSPs)managed services ecosystemOrca Security operates a formal Managed Service Provider (MSP) program that enables partners to deliver managed cloud security services using the Orca platform, listed on the partner overview page.
Scale indicators11 records
Recent moves9 records
Expansion highlights6 records
Orca Security competitors and assessment
Company assessmentDirect peers
- Wiz: Wiz is the closest direct competitor to Orca in the agentless CNAPP space, offering cloud security posture, workload, identity, and data security across AWS, Azure, GCP, and OCI. Both companies pioneered agentless approaches and target enterprise CISOs with consolidated cloud security platforms.
- Aqua Security: Aqua Security is a cloud-native application protection specialist focused on containers, Kubernetes, and software supply chain security. Aqua has an active co-marketing partnership with Orca but also overlaps in CWPP and runtime security, making it both partner and partial competitor.
- Lacework: Lacework is an agent-based cloud security platform that offers CSPM, workload protection, and threat detection. It was acquired by Fortinet and competes with Orca in multi-cloud posture and anomaly detection, particularly for AWS-native customers.
- Sysdig: Sysdig is a cloud security platform specializing in runtime threat detection, container and Kubernetes security, and CDR. It overlaps with Orca's CWPP, CDR (via Orca Sensor), and AI workload detection, targeting similar cloud-native enterprise buyers.
Broad incumbents
- Palo Alto Networks (Prisma Cloud): Palo Alto Networks offers Prisma Cloud as part of a broader security platform spanning network, endpoint, and SOC. Prisma Cloud is a stitched-together CNAPP that competes head-to-head with Orca's unified data model in CSPM/CWPP/CIEM, often anchored by enterprise-wide Palo Alto deployments.
- Microsoft Defender for Cloud: Microsoft Defender for Cloud (formerly Azure Defender) is a hyperscaler-native CNAPP offering that ships with Azure and increasingly supports AWS/GCP. It competes on price (bundled) and integration with Azure workloads, pressuring standalone CNAPP vendors on cost-sensitive deals.
- CrowdStrike (Falcon Cloud Security): CrowdStrike has expanded its Falcon endpoint platform into cloud security (CNAPP, workload protection, identity threat protection). It competes with Orca for the security leader wallet by bundling cloud security with its dominant endpoint franchise.
- Tenable (Tenable Cloud Security / Ermetic): Tenable acquired Ermetic to add agentless CNAPP and CIEM capabilities to its vulnerability-management franchise. It competes with Orca in CSPM, CIEM, and vulnerability prioritization for the same enterprise security buyer.
- Check Point Software Technologies: Check Point is a broad network and cloud security incumbent (CloudGuard) that Orca's co-founders and CPO Gera Dorfman previously worked at. It competes in CNAPP and is a comparable Israeli cybersecurity origin story, though its cloud-native depth is less agentless-focused than Orca's.
Others
- Zscaler: Zscaler is a Zero Trust networking and SSE/SASE leader and an Orca strategic partner ingesting ZPA metadata into the Orca platform. While not a direct CNAPP competitor, Zscaler competes for the broader cloud-security budget and represents both an integration partner and an adjacent strategic risk.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat7 records
Key risks6 records
Key highlights4 records
Customer concentration
Orca Security social profiles
Digital presenceOrca Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Orca Security leadership team
Management profileNumber of profiles
Profiles14 records
Orca Security subsidiaries and ownership
Company hierarchySubsidiaries2 records
Orca Security funding detail
Funding detailFunding overview
Funding rounds5 records
Investors18 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Orca Security M&A and investment
M&A and investmentM&A2 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Orca Security
What does Orca Security do?
Orca Security provides an agentless, AI-powered Cloud-Native Application Protection Platform (CNAPP) that consolidates CSPM, CWPP, CIEM, DSPM, AI-SPM, CDR, vulnerability management, API security, and application security on a single Unified Data Model. Its patented SideScanning technology reads cloud workload block-storage snapshots and cloud provider APIs out-of-band, eliminating agent deployment while delivering full multi-cloud visibility across AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud, and Tencent Cloud within hours. The platform is sold as enterprise SaaS subscriptions to thousands of large organizations across financial services, technology, government, healthcare, retail, and media.
Is Orca Security a public or private company?
Orca Security is a private company. It is classified as venture growth investor backed and is currently operating.
When was Orca Security founded?
Orca Security was founded in 2019. It employs 251 to 500 people.
Where is Orca Security based?
Orca Security is headquartered in Portland, United States, in the North America region.
How does Orca Security make money?
Four revenue lines are on record. Enterprise SaaS subscription is the primary driver. The others are marketplace transactions (AWS & Oracle), channel/Partner-enabled distribution revenue and implementation/Advisory services via partners.
Who are Orca Security's main competitors?
Direct peers on record are Wiz, Aqua Security, Lacework and Sysdig. Broad incumbents are Palo Alto Networks (Prisma Cloud), Microsoft Defender for Cloud, CrowdStrike (Falcon Cloud Security), Tenable (Tenable Cloud Security / Ermetic) and Check Point Software Technologies. Zscaler is listed as an others.
Does Orca Security have an API?
Yes. Orca Security became the first cloud security platform to deliver universal access to any GenAI model through support for the Model Context Protocol (MCP), enabling AI agents and assistants to interact with Orca's cloud security data. The platform also exposes integrations with developer/SIEM/SOAR platforms (e.g., Splunk, ServiceNow, Slack, GitHub) and cloud provider APIs (AWS, Azure, GCP, Oracle, Alibaba, Tencent) for ingesting security signals and pushing findings. A developer documentation portal is available at https://docs.orcasecurity.io/ (covers user, partner and integration guides). Developer documentation is at docs.orcasecurity.io.
What industry is Orca Security in?
Orca Security's product category is Cloud Security Platform (CNAPP). Its primary akta.pro industry code is HDADADAA, CNAPP Platforms (Unified CNAPP), with a secondary code of HDADAGAJ, Attack Detection & Response for Cloud/SaaS (SOC for Cloud). Its NAICS code is 513210 and its SIC code is 7370.