Orca Security

Israeli-based Orca Security is a provider of an agentless cloud-based security and compliance for AWS, Azure, and GCP environments. The company uses its “SideScanning'' technology to detect vulnerabilities, malware, misconfigurations, lateral movement risk, authentication risk, secret keys, and unsecured personally identifiable information (PII).

In February 2023, Orca launched data security posture management (DSPM) capabilities to its cloud security platform, providing the ability to continuously monitor and detect sensitive data vulnerabilities across multi-cloud environments. Further, in April 2023, Orca Security launched cloud-to-dev capabilities, offering the ability to automatically trace cloud security risks from production back to their code origins. According to the company, Orca is the first CNAPP to provide this solution, with an estimated 80% reduction in remediation time and a significant decrease in the mean time to resolution (MTTR).

In January 2023, Orca integrated OpenAI’s GPT-3 into its CNAPP. A fine-tuned version of the GPT-3 model processes security alerts to generate detailed remediation instructions for direct action via command line or other security tools, or in issue tracking tools such as Jira. In May 2023, the company announced full integration with Microsoft’s Azure OpenAI GPT-4. The GPT-4 extension is able to generate code-snippets, and is more accurate than the previous version.

In January 2022, Orca Security acquired the web application security startup RapidSec for USD 5 million in order to further expand Orca Security’s agentless cloud security platform with application programming interface (API) and web application protection capabilities.

Key customers and partnerships

Notable customers as of February 2024 included Autodesk, Unity, Gannett, Digital Turbine, Postman, SAP, Wiley, and Lemonade.

Additionally, Orca Security has established strategic partnerships to expand its cloud security offerings. As of November 2023, Orca had partnered with the three largest cloud platform providers: AWS (Amazon), Azure (Microsoft), and Google Cloud to integrate GenAI into its cloud security platform. The company integrated its platform with Azure OpenAI GPT-4 in September 2023 to enable automatic generation of remediation instructions based on a prior integration in May and in November with both Google’s Vertex AI and Amazon’s Bedrock AI platform to enable similar code generation capabilities. Other notable partners include Okta, Jira, JupiterOne, Cribl, Datadog, Servicenow, Slack, Snowflake, Splunk, Tines, Sumologic, and Torq.

Funding and financials

In October 2021, the company secured an extension of USD 340 million to its Series C funding at a valuation of USD 1.8 billion. This investment also includes USD 150 million it reportedly secured in July 2021 from Temasek Holdings. The extension was led by Temasek, and the company’s total Series C fundraise amounts to USD 550 million. The company expected to leverage Temasek’s network to expand its presence in the APAC region, across industries such as telecommunications and financial services. In a bid to expand its base in the EMEA region, the company planned to open a physical office and R&D center in London.