Company: Orca Security
Founder: Gil Geron (CEO) and Avi Shua (Chief Innovation Officer)
Website: https://orca.security/
About Orca Security
Orca Security is a cloud and AI security platform that helps security, IT and DevOps teams understand which risks across their cloud environments create real exposure, and fix those first. It covers infrastructure, workloads, identities, data, applications and AI, including AI agents, across AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud, Tencent Cloud and Kubernetes, and is used by organisations including SAP, Autodesk, Gannett, Lemonade and Digital Turbine.
Orca was founded in 2019 by Gil Geron and Avi Shua, who had both spent years building security products at Check Point Software Technologies. They saw that cloud security was still being approached like the data centre, with endpoint agents installed on every workload, which meant long deployments, gaps wherever an agent was missing and constant friction with the DevOps teams left to maintain them. Their answer was patented SideScanning technology, which reads workload data directly through cloud provider APIs and block storage, so customers can connect a cloud account in minutes and see their whole environment without installing anything.
The first challenge was persuading a market that assumed agents were essential to trust a different approach, and agentless scanning has since become a standard much of the industry has followed. The next was volume, because full visibility produces more findings than any team can work through. Orca built a Unified Data Model that assesses each vulnerability alongside the identities, permissions, sensitive data and exposure paths around it, and its Agentless Reachability capability, now used by more than 40% of customers, lets organisations safely deprioritise up to 90 to 95% of vulnerability noise.
The most recent challenge is AI, which has changed both how quickly software is written and who writes it. Orca saw this first-hand when a business leader at the company used an AI app builder to create a new partner platform, and the security review that followed found access issues the builder had missed. That experience shaped AI AppGen Security, which finds applications built outside engineering pipelines and shows what data and systems they can reach, alongside AI Code Security Auditor for code written inside them. More than 70% of Orca customers now use the platform to discover AI assets, and Orca was the first cloud security platform to support the Model Context Protocol.
Beyond its own platform, the Orca Research Pod has discovered 31 major vulnerabilities in public cloud platforms, and the company is now rolling out its partner programme worldwide as AI reshapes what organisations need to secure.
Want to find out what TechRound can do for your business?
