Orca Security
Tel Aviv agentless cloud security platform that scans workloads through cloud APIs
Quick Overview
| Company | Orca Security Ltd. |
|---|---|
| Category | Cloud Security Platforms (CNAPP) |
| Headquarters | Tel Aviv, Israel |
| Founded | Not stated |
| EU Presence | Yes - Israel |
| Data Location | Region choice listed: USA, Europe, Australia, US-Gov |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | No |
| Main Features | Agentless SideScanning, CSPM, CIEM, vulnerability management, container and Kubernetes security, API security, cloud detection and response, runtime sensor, AI inventory |
| Pricing | Pricing on request |
| Best For | Teams that want broad multi-cloud visibility without deploying agents first |
| Replaces | Wiz, Prisma Cloud, Lacework |
Detailed Review
Orca's approach to cloud workloads is SideScanning, which its site describes as agentless scanning across every cloud workload. It is the nearest conceptual match to Wiz on this page.
The terms of use and privacy policy name Orca Security Ltd., 3 Tushia St., Tel Aviv.
One model across cloud, code and AI
The platform pages list CSPM, CIEM, vulnerability management, container security, API security and cloud detection under one data model, with risk scoring and attack path analysis.
A recent AI inventory feature discovers models, packages and agents running in the cloud, including shadow AI.
Six cloud providers
The integration list names Amazon Web Services, Microsoft Azure, Google Cloud, Oracle Cloud, Alibaba Cloud and Tencent Cloud, a wider list than most challengers.
For multi-cloud estates that include Asian providers, that breadth removes a gap.
Region and compliance signals
The log-in selector lists USA, Europe, Australia and US-Gov. The site shows SOC 2 Type II and ISO 27017, 27018 and 27701 badges.
Which region your tenant data sits in is something to confirm in the order form.
Limitations to Consider
Orca does not publish prices; the pricing page returned not found. Agentless scanning sees snapshots, so live process behaviour needs the separate runtime sensor. The product has grown wide, so a small team may use only a fraction of it. Ask for the data location of your tenant in writing.
Who Should Use Orca Security
Security teams with several cloud providers who want inventory and risk ranking before they commit to agents.
Pros and Cons
Pros
- Agentless scanning
- Six cloud providers listed
- Named Israeli contracting entity
- Broad scope in one data model
- Separate runtime sensor available
Cons
- No public pricing
- Snapshot view without the sensor
- Wide scope can overwhelm small teams
- Tenant region needs confirming
Alternatives to Orca Security
Other European cloud security platforms (cnapp) worth comparing before you decide:
Aikido Security
Belgium · Ghent platform that joins code, container and cloud posture checks
ARMO
Israel · Runtime-driven Kubernetes and cloud security built on Kubescape
Sweet Security
Israel · Runtime-first CNAPP that reasons from live workload behaviour
Aqua Security
Israel · Agent-based runtime enforcement for containers, serverless and VMs
See all European cloud security platforms (cnapp) or compare them directly against Wiz on our alternatives page.
Frequently Asked Questions
Its core scanning is agentless; a separate Orca Sensor adds runtime observability and protection.
The site lists AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud and Tencent Cloud.
No, the pricing page was not found on the day we checked.