Orca Security is a Cloud & Application Security company founded in 2019 and based in Portland, United States. It has raised $550M in total funding, most recently a Series C in 2021 at a $1.8B valuation.
| Date | Stage | Amount | Valuation | Lead investors |
|---|---|---|---|---|
| Oct 5, 2021 | Series C | $550M | $1.8B | Temasek, CapitalG, Redpoint Ventures |

Orca Security discloses a critical Atlassian path traversal vulnerability (CVSS 9.3) affecting 8 Data Center and Server products.

Orca Security discloses a high-severity Citrix NetScaler zero-day exploited in the wild that crashes SAML auth services.

Orca Security discloses two critical Citrix NetScaler zero-days (CVSS 9.5) under active exploitation, with unauthenticated RCE via input validation and memory overflow flaws.

Orca Security blog details the security gaps found when reviewing a partner portal built entirely by AI over a weekend.

Orca Security launches an AI-powered Partner Success Platform and refreshes its global Partner Program.
Orca's agentless CNAPP connects to AWS, Azure, Google Cloud, Oracle Cloud, and Kubernetes in minutes and uses patented SideScanning to read workload data from cloud snapshots without deploying agents. It combines vulnerability management, cloud security posture management, workload protection, identity and entitlement management, data security posture management, and API security in one platform, then contextualizes and prioritizes risks across the estate so security teams fix the alerts that actually create attack paths.
SideScanning is Orca's patented agentless data-collection technology. Rather than running software inside each workload, it analyzes the runtime block storage of cloud assets out-of-band alongside cloud configuration metadata, reconstructing a full picture of operating systems, applications, libraries, and data. This delivers 100% coverage across an environment without performance overhead, agent maintenance, or gaps from unmanaged assets, and underpins all of Orca's risk detection and prioritization.
2 patents on file, but none with both an extractable figure and an abstract on Google Patents yet.