What ORION Security does

ORION Security is a private cybersecurity company that develops an AI-native data loss prevention (DLP) platform intended to replace traditional policy-based DLP tools. Founded in 2024 and headquartered in New York City with an engineering and operations office in Tel Aviv, the company was built by veterans of Epsagon and WalkMe — Nitay Milner (CEO) and Jonathan Kreiner (CTO) — and operates as Orion Cyber Security Inc. ORION's core platform deploys in approximately 30 minutes and is composed of six proprietary AI agents (Data Classification, Data Lineage, Identity, Environment, External Relations, and a central Analysis Agent) that read content, lineage, identity, environment, and business relationships in real time to detect data-loss indicators and autonomously decide whether to allow, block, redact, or quarantine a data movement. The company reports a 96% reduction in false positives versus policy-based DLP and cites deployments where alert volume dropped from roughly 10,000 per week to under 100.

ORION sells through a direct enterprise sales motion targeting Fortune 500 and large-enterprise security teams, with pricing delivered through a consultative "Book a Demo" process and annual subscription contracts. Named customers include LinkedIn, Elastic, AMEX Global Business Travel, Incode, Alera Group, and Omegapoint, with additional unnamed enterprise references in financial services, insurance, mortgage servicing, and identity verification. The company has raised $38 million in total venture funding — a $6M seed round in March 2025 followed by a $32M Series A in February 2026 led by Norwest Venture Partners with participation from IBM Ventures, PICO Venture Partners, LAMA Partners, and Underscore VC — and holds SOC 2 Type II, ISO 27001, and GDPR compliance certifications.

The go-to-market is supplemented by a technology-partner ecosystem (Microsoft Purview, Wiz, Sentra, Grip Security), analyst relationships with former Gartner analyst Lawrence Pingree of Software Analyst Cyber Research, and a category narrative around the "DLP Reset." The product surface has expanded into dedicated DLP modules for generative-AI tools (ChatGPT, Claude, Gemini, Microsoft 365 Copilot), reflecting a focus on data leakage into AI assistants as a primary growth wedge. Revenue is not publicly disclosed, and the company is at an early commercialization stage with 11–50 employees and Fortune 500 traction established within roughly five months of go-to-market.

Name

ORION Security

Legal name

Orion Cyber Security Inc.

Website

https://orionsec.io

Company type

Private

Founded year

2024

Operating status

Operating

Headcount range

51–100 employees

Short description

ORION Security is a New York–based, venture-backed cybersecurity company that sells an AI-native, multi-agent data loss prevention platform to large enterprise customers. Founded in 2024, it replaces policy-based DLP with autonomous AI agents that analyze data movement context in real time to prevent exfiltration.

Ownership category

akta.pro rank

Product category

Data Loss Prevention Software

NAICS

Software Publishers (513210), Computer Systems Design and Related Services (5415)

SIC

Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Data Loss Prevention (DLP) (HDADAFAA)

akta.pro secondary industries

Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK), Endpoint Data Protection (Device DLP/Encryption) (HDADAEAG), Cloud Data Security (DSPM, Cloud DLP) (HDADADAJ), Email Data Loss Prevention & Encryption (HDADAKAD), Collaboration Security for File Sharing & Content (M365/Google Drive/Box) (HDADAKAG), Collaboration Security for Chat & Messaging (Teams/Slack) (HDADAKAF), Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)

Keywords

• Data loss prevention
• DLP software
• Enterprise data security
• Insider threat detection
• Cybersecurity platform

Headquarters

HQ city

New York

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure, Others

Revenue model

1. Enterprise SaaS DLP Platform Subscription: ORION Security sells its AI-powered autonomous DLP platform as a subscription to enterprise customers, targeting the $5 billion DLP market. The company focuses on Fortune 500 customers and enterprise demand, with a sales-led motion complemented by product-led growth elements (demo booking, self-serve evaluation paths).

Pricing tiers

Go-to-market motion2 records

Distribution channels5 records

Marketing channels5 records

Core offering

ORION Security builds and sells an AI-native data loss prevention (DLP) platform that replaces traditional policy-based DLP with six proprietary autonomous AI agents. The agents analyze data in motion across endpoints, SaaS, web, cloud, email, storage, and AI tools (ChatGPT, Claude, Gemini, Copilot) using contextual signals — who is moving data, what data, where, and whether the behavior is normal — and make autonomous prevention decisions (block, redact, quarantine) in real time. The platform deploys in 30 minutes, reports a 96% reduction in false positives versus policy-based DLP, and is sold as an enterprise SaaS subscription.

Product overview

ORION Security offers an AI-native data loss prevention platform designed to replace traditional policy-based DLP tools. The core platform consists of six proprietary AI agents (Data Classification, Data Lineage, Identity, Environment, External Relations, and Analysis) that work together to analyze data movement in real-time, achieving a 96% reduction in false positives. The platform deploys via Endpoint Sensors, Browser Extensions, and API Integrations, covering endpoints, SaaS, web, cloud, email, storage, print, and AI tools. Specialized DLP modules for AI assistants (ChatGPT, Claude, Gemini, Copilot) are built on the core agentic platform and extend its capabilities to specific AI surfaces. The Policy Engine component allows policy-supported (not policy-reliant) compliance workflows. Integration with Microsoft Purview provides unified DLP visibility while partnerships with Wiz, Sentra, and Grip Security extend data security from data-at-rest to data-in-motion protection.

Differentiator

Problem solved

Functional benefit

Products and services

• ORION DLP Platform AI-native data loss prevention platform that replaces traditional policy-based DLP tools. Uses six proprietary AI agents (Data Classification, Data Lineage, Identity, Environment, External Relations, and Analysis) to analyze data movements in real time across endpoints, SaaS, web, cloud, email, storage, AI tools (ChatGPT, Claude, Gemini, Copilot), and browsers, achieving a reported 96% reduction in false positives. Deploys in 30 minutes, makes autonomous prevention decisions (block, redact, quarantine), and is sold as an enterprise SaaS subscription targeting Fortune 500 CISOs and security teams.

Quantifiable outcome

• 96% reduction in false positives compared to traditional policy-based DLP
• +5 more outcomes

Named customers10 records

Segments2 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration35 records

AI capability10 records

Feature6 records

Partnerships

Five partnerships are on record, tiered core partnership, partner and research influencer.

• Microsoft Purviewcore partnershipTechnology or IntegrationORION integrates with Microsoft Purview to extend native compliance capabilities into a fully automated, agentic data protection solution. ORION's behavioral engine works alongside Purview's MIP labels, adding real-time context so teams act on real intent rather than data type alone. ORION provides accurate data classifications that feed into Purview to automate retention and compliance. The partnership enables unified detection visibility through a single pane of glass and full coverage across encryption-aware inspection, incognito browsing visibility, and endpoint enforcement across Windows and MacOS.
• Sentracore partnershipTechnology or IntegrationORION and Sentra deliver end-to-end, context-aware data protection. Sentra provides next-gen DSPM with deep data discovery and classification across cloud, SaaS, and on-prem environments. ORION provides next-gen, behavior-driven DLP for data in motion. Together they create a closed loop: Sentra gives ORION high-quality data classification context (sensitivity, exposure, identity-to-data relationships) for smarter detections, while ORION's view into actual data movement feeds back into Sentra, exposing data stores that repeatedly appear in risky behaviors. They jointly target AI assistant security for Gemini and Copilot.
• Wizcore partnershipTechnology or IntegrationORION integrates with Wiz, the DSPM market-leading platform, to combine Wiz's deep visibility into where sensitive information resides in the cloud with ORION's tracking and protection of data in motion across the entire enterprise. While Wiz tells customers 'your sensitive data lives in this S3 bucket,' ORION then tells them 'a developer just downloaded that data, encrypted it, and uploaded it to a personal Dropbox — and we blocked it.' Together they provide both complete data visibility and operational tools to act on it.
• Grip SecuritypartnerTechnology or IntegrationORION and Grip Security announced a partnership in March 2026 to join forces in securing sensitive data across SaaS and AI ecosystems with identity context and real-time data loss prevention. The partnership combines ORION's behavior-driven DLP with Grip Security's SaaS security platform.
• Software Analyst Cyber Research (SACR) / Lawrence Pingreeresearch influencerOthersLawrence Pingree, founder of Software Analyst Cyber Research (SACR) and former Gartner analyst, co-hosted a webinar with ORION on 'The Great DLP Reset' and published independent research validating ORION's approach. His research positioned ORION as a leading AI-native DLP vendor and coined the 'DLP Reset' industry narrative.

Scale indicators6 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Cyberhaven: Closest direct competitor in AI-native data security and DLP. Cyberhaven uses AI-driven data lineage and behavior analysis to detect and prevent data exfiltration across endpoints, cloud, and SaaS, overlapping directly with ORION's six-agent agentic DLP positioning.
• Concentric AI: AI-native data security and DSPM vendor extending into data-in-motion protection. Targets the same enterprise buyers with semantic understanding of data, directly competing for AI-driven DLP and data governance budgets.
• Next DLP: Emerging AI-era DLP vendor (spun out of DTEX) focused on insider risk and data exfiltration prevention. Competes in the same enterprise DLP category with a similar land-and-expand motion into Fortune 500 security teams.
• Code42 / Incydr: Insider risk and data exfiltration vendor focused on file movement across endpoints and cloud. Competes with ORION for the same insider-threat and DLP modernization budget, particularly in regulated industries.

Broad incumbents

• Microsoft Purview: Microsoft's enterprise DLP and data governance suite, bundled with E5 licenses and integrated across Microsoft 365. The dominant incumbent against which ORION positions, and ORION's named integration partner.
• Forcepoint DLP: Long-established enterprise DLP vendor with deep global installed base across endpoint, network, and cloud DLP. Represents the legacy policy-based DLP approach ORION explicitly displaces, and a primary competitive incumbent.
• Broadcom Symantec DLP: One of the largest legacy enterprise DLP franchises, now part of Broadcom's security portfolio. Competes on the same Fortune 500 RFPs with a broad but policy-based product suite.
• Trellix (formerly FireEye/McAfee DLP): Broad cybersecurity platform including DLP capabilities, serving large enterprises and government customers. Competes indirectly as incumbents add AI features to existing DLP offerings.
• Digital Guardian: Established endpoint DLP vendor with agent-based data protection for enterprises. Represents the legacy endpoint DLP approach that ORION's endpoint sensor and behavioral agents position against.
• Netskope: SASE/CASB leader with integrated cloud DLP capabilities across SaaS, web, and cloud workloads. Competes for the same data-in-motion budget ORION targets, particularly through Gartner-aligned enterprise security buyers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/orionsec

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds3 records

Investors8 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ORION Security