Company Overview

Orca Security is a cloud security company co-founded in 2019 by Avi Shua, Gil Geron, Tomer Kalifon, and Yuval Snir, with dual headquarters in Portland, Oregon, and Tel Aviv, Israel. Orca is known for its patented SideScanning technology — an agentless security detection method that scans workload disks and configurations from the cloud side without installing any agents, delivering comprehensive cloud security visibility without impacting business operations.

Orca Security completed Series C funding in 2022 at a valuation of $1.8 billion, becoming a unicorn in the cloud security space. The platform is widely adopted by enterprises for vulnerability management, security posture management, and compliance auditing across AWS, Azure, and GCP environments.

Related providers: Cloud Security Services

Core Products

  • Orca Cloud Security：Core cloud security product providing agentless scanning of cloud workloads via SideScanning technology to discover vulnerabilities, malware, sensitive data, and configuration risks. Covers AWS, Azure, and GCP.
  • Orca CNAPP：Unified platform integrating Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Cloud Infrastructure Entitlement Management (CIEM), and vulnerability management.
  • Orca AI-SPM (AI Security Posture Management)：Security protection for AI and ML workloads, including AI model security, data pipeline protection, and training infrastructure risk assessment.
  • Orca Compliance：Automated compliance auditing and reporting supporting SOC 2, PCI DSS, HIPAA, ISO 27001, NIST 800-53, CIS Benchmark, and GDPR.
  • Orca Cortex (Threat Detection & Response)：Advanced threat detection engine leveraging cloud-native threat intelligence and the MITRE ATT&CK framework to identify APT attacks and complex attack chains.
  • Vulnerability Management：Continuous scanning of OS and application vulnerabilities in cloud workloads with prioritization and remediation recommendations.
  • Malware Detection：Detects hidden malware and suspicious files in cloud disks using SideScanning technology.

Core Strengths

  • Patented SideScanning Technology：Orca's proprietary technology reads cloud storage disk snapshots for analysis — no agents, no network traffic monitoring, no VM snapshots needed — truly zero-impact security scanning.
  • Full-Stack Cloud Visibility：Unified visualization of workloads, networks, identity, and data layers in a single platform covering the entire cloud asset inventory.
  • Context-Driven Risk Prioritization：Orca's Context-Based Risk Analysis engine combines vulnerability severity, accessibility, and data sensitivity to provide prioritized remediation.
  • Low-Friction Agentless Deployment：First scan completed in minutes without coordinating cross-team agent installations — security teams can deploy independently.
  • Unified CNAPP Platform：Consolidates CSPM, CWPP, CIEM, and vulnerability management into a single platform, eliminating multi-tool complexity.

Key Milestones

  • 2019：Co-founded by Avi Shua, Gil Geron, Tomer Kalifon, and Yuval Snir in Portland and Tel Aviv.
  • 2020：Completed Series A funding; officially launched the Orca Cloud Security Platform.
  • 2021：Completed Series B funding; accelerated global expansion with Fortune 500 customers.
  • 2022：Completed Series C funding at $1.8B valuation, becoming a cloud security unicorn.
  • 2023：Launched Orca AI-SPM and Orca Cortex, expanding CNAPP coverage.
  • 2024–Present：Continuing to strengthen AI security capabilities and multi-cloud support, solidifying leadership in agentless CNAPP.

Market Position

Orca Security competes with the following providers in the CNAPP and agentless cloud security markets:

  • Wiz：Wiz is Orca's most direct competitor, also employing an agentless approach with highly overlapping market positioning, product strategy, and target customers.
  • Palo Alto Networks (Prisma Cloud)：Prisma Cloud, as one of the most comprehensive CNAPP platforms, competes head-on with Orca in cloud security posture management and compliance.
  • Lacework：Lacework's Polygraph platform competes with Orca in the CNAPP space, though Lacework relies on agents and behavioral analysis while Orca remains agentless.
  • CrowdStrike (Falcon Cloud Security)：CrowdStrike competes in cloud security leveraging its endpoint security ecosystem.
  • Sysdig：Sysdig competes with Orca in container security and runtime security, though Sysdig relies on agent-based deployment.