Orca Security is a Cloud & Application Security company founded in 2019 and based in Portland, United States. It has raised $640M in total funding, most recently a Series C (extension) in 2021 at a $1.8B valuation.
| Date | Stage | Amount | Valuation | Lead investors |
|---|---|---|---|---|
| Oct 5, 2021 | Series C | $550M | $1.8B | Temasek, CapitalG, Redpoint Ventures |

CISA issues BOD 26-04, giving federal agencies three days to patch top-risk vulnerabilities and dropping CVSS score as the sole prioritization criterion.

Orca Security defines a new category: AI AppGen security for governing apps generated by AI builders outside the dev pipeline.

Orca Security details its AI Agent Pods, domain-expert agents for its cloud security platform.

Orca Security details a supply-chain attack where 10 npm packages (619M monthly downloads) were compromised to harvest cloud credentials and SSH keys.

Orca Security publishes a blog post positioning itself as an alternative to CrowdStrike for cloud security buyers.
Orca's agentless CNAPP connects to AWS, Azure, Google Cloud, Oracle Cloud, and Kubernetes in minutes and uses patented SideScanning to read workload data from cloud snapshots without deploying agents. It combines vulnerability management, cloud security posture management, workload protection, identity and entitlement management, data security posture management, and API security in one platform, then contextualizes and prioritizes risks across the estate so security teams fix the alerts that actually create attack paths.
SideScanning is Orca's patented agentless data-collection technology. Rather than running software inside each workload, it analyzes the runtime block storage of cloud assets out-of-band alongside cloud configuration metadata, reconstructing a full picture of operating systems, applications, libraries, and data. This delivers 100% coverage across an environment without performance overhead, agent maintenance, or gaps from unmanaged assets, and underpins all of Orca's risk detection and prioritization.
2 patents on file, but none with both an extractable figure and an abstract on Google Patents yet.