Orca Security Cloud Platform

Orca Security is a cloud security and compliance platform that provides agentless cloud security posture management CSPM, cloud workload protection CWPP, and container security across public cloud environments. Founded in 2019 by Avi Shua, Gil Geron, and Or Shalom in Tel Aviv, Israel, Orca Security raised over 300 million USD in funding and achieved unicorn status in 2021. Key features: agentless scanning (Patented SideScanning technology reads cloud workload filesystems from cloud storage snapshots without installing agents, providing complete visibility including dead and dormant VMs in minutes). Multi-cloud support (AWS, Azure, GCP, Alibaba Cloud, and OCI with unified risk dashboard across all cloud accounts). Full cloud security (CSPM for misconfiguration detection, CWPP for workload protection including VMs, containers, and serverless functions, Kubernetes security, and CIEM Cloud Infrastructure Entitlement Management for identity risk). Local privilege escalation (LPE) vulnerability detection without running scans inside the workload. Malware scanning (agentless malware and ransomware detection across cloud assets using signature-based and heuristic analysis). Vulnerability assessment (CVE scanning for OS packages and application dependencies across all cloud workloads, prioritized by exploitability and exposure). Secret detection (scanning for exposed credentials, API keys, tokens, and certificates in cloud workloads and storage). Compliance (automated compliance assessment against CIS Benchmarks, PCI-DSS, HIPAA, GDPR, SOC 2, ISO 27001, NIST, and AWS Foundational Security Best Practices). Attack path analysis (graph-based risk correlation connecting vulnerabilities, misconfigurations, and permissions into exploitable attack paths for risk-based prioritization). API-first design (full REST API for automation, integration with SIEM, SOAR, and ticketing systems).