Orca Security

Orca Security is a cloud security company headquartered in Portland, Oregon, delivering agentless cloud security posture management (CSPM), vulnerability management, and AI-powered risk prioritization across AWS, Azure, Google Cloud, and Kubernetes environments. Founded in 2019, Orca has raised over $640 million across multiple rounds, achieving a $1.8 billion valuation following its Series C extension led by Google Ventures and Redpoint Ventures.

Orca's patented SideScanning technology reads cloud workload runtime data at the storage layer without deploying agents or requiring network scanners, enabling comprehensive visibility across virtual machines, containers, serverless functions, databases, and cloud services within minutes of onboarding. The Orca Cloud Security Platform uses AI to correlate findings across attack paths, prioritizing risks that combine critical vulnerabilities with exposure, sensitive data proximity, and blast radius—surfacing the small percentage of findings that represent real business risk.

Orca AI Assistant enables security teams to query their cloud security posture in natural language, automate compliance checks, and generate remediation guidance. The platform covers CSPM, cloud workload protection (CWPP), cloud infrastructure entitlement management (CIEM), data security posture management (DSPM), and API security.

Customers include Robinhood, Lemonade, Databricks, and hundreds of enterprises across financial services, healthcare, and technology. Orca acquired Opus in May 2025 to strengthen application security posture management (ASPM).

The company holds SOC 2 Type II, ISO 27001, and PCI DSS certifications and employs approximately 400–500 people globally.