Orca Security

Israel-based Orca Security is a provider of agentless cloud-based security and compliance for AWS, Azure, and Google Cloud Platform environments. The company uses its “SideScanning'' technology to detect vulnerabilities, malware, misconfigurations, lateral movement risk, authentication risk, secret keys, and unsecured personally identifiable information (PII). In February 2023 , Orca launched data security posture management (DSPM) capabilities to its cloud security platform, providing the ability to continuously monitor and detect sensitive data vulnerabilities across multi-cloud environments.  Further, Orca Security launched cloud-to-dev capabilities in April 2023, offering the ability to automatically trace cloud security risks from production back to their code origins. According to the company, Orca is the first CNAPP to provide this solution, with an estimated 80% reduction in remediation time and a significant decrease in the mean time to resolution (MTTR).

As of March 2021, the company had an employee base of 97 staff and had plans to double the employee count by the end of 2021. Further, as of March 2021, Orca Security had plans to expand its geographical presence in the UK, Austria, Australia, and Japan, and increase its revenue contribution from international markets to 30%-35% within a year, up from 20% currently. Notable customers of the company include Robinhood, Databricks, Unity, Live Oak Bank, Lemonade, and BeyondTrust.

In January 2023, Orca integrated OpenAI’s GPT-3 into its CNAPP. A fine-tuned version of the GPT-3 model processes security alerts to generate detailed remediation instructions for direct action via command line or security platform, or in issue tracking tools such as Jira. In May 2023, the company announced full integration with Microsoft’s Azure OpenAI GPT-4 . The GPT-4 extension is able to generate code-snippets, and is more accurate than the previous version.

Orca Security acquired the web application security startup RapidSec for USD 5 million in order to further expand Orca Security’s agentless cloud security platform with application programming interface (API) and web application protection capabilities. RapidSec’s technology will be integrated into Orca Security’s platform by Q3 of 2022. The company also has plans to engage in more acquisitions that primarily focus on technologies which can be integrated into its platform.

In October 2021, the company secured an extension of USD 340 million to its Series C funding at a valuation of USD 1.8 billion. This investment also includes USD 150 million it reportedly secured in July 2021 from Temasek Holdings. The extension was led by Temasek, and the company’s total Series C fundraise amounts to USD 550 million. The company expects to leverage Temasek’s network to expand its presence in the APAC region, across industries such as telecommunications and financial services. In a bid to expand its base in the EMEA region, the company intends to open a physical office and R&D center in London, which will employ two dozen staff by the end of 2021. These expansions are in line with an overall strategy to expand its global footprint and customer base.