Orca Security logo

    Orca Security

    Paid
    https://orca.security
    >> OPEN TOOL

    Orca Security is an agentless AI-powered cloud security platform that provides comprehensive visibility and risk prioritization across AWS, Azure, and GCP environments. Its SideScanning technology captures full cloud workload data without agents, detecting vulnerabilities, misconfigurations, and sensitive data exposure.

    Category

    Security

    Subcategory

    Vulnerability Scanning

    Free Tier

    Not available yet

    Paid Plans

    Enterprise pricing, custom quotes based on cloud assets

    API Cost

    Not available yet

    Web AppAPI

    Orca Security Trust & Security Report

    Certifications, AI-training posture, and security controls, with sourced proof.

    VIEW
    ●SOC 2 Type II●ISO/IEC 27001●ISO/IEC 27017●ISO/IEC 27018●ISO/IEC 27701 (Privacy Information Management)●FedRAMP Moderate●PCI DSS SAQ-D (v4.0)●CSA STAR Level 1 (Self-Assessment)●CSA Trusted Cloud Provider●IRAP (Australia, Protected Level)●GovRAMP●TX-RAMP●AWS Advanced Technology Partner Security Competency●GDPR (DPA available)

    Verified against Orca Security's own trust and security pages. See the full report for sourced proof →

    Region

    No specific data residency options publicly documented. Privacy policy mentions EU/EEA transfers are covered by Standard Contractual Clauses, and access from Israel is covered by the EU Adequacy Decision for Israel. Trust center notes Impact Level: Moderate.

    Self-hostable

    No

    Cloud security posture managementWorkload vulnerability detectionSensitive data discovery in cloudCompliance monitoringCloud attack path analysis

    // MORE IN VULNERABILITY SCANNING

    Wiz logoWiz
    Paid
    SecurityVulnerability ScanningVerified
    #cloud security#cspm
    Aqua Security logoAqua Security
    Paid
    SecurityVulnerability ScanningVerified
    #container security#cloud-native security
    Tenable AI logoTenable AI
    Paid
    SecurityVulnerability ScanningVerified
    #cloud security#agentless security#cspm#vulnerability management#aws azure gcp