Orca Security

What it does

Orca Security provides agentless cloud security covering vulnerabilities, misconfigurations, identity and data risks with AI-assisted prioritization and workflows. TX-RAMP Level 2 certified (TX1858466) on the Texas DIR list updated 13 Oct 2026.

Frameworks (vendor-stated)

SOC 2ISO 27001GovRAMPTX-RAMP

Government authorizations

Registry records checked 2026-10-18. Scope “listing” means the certified product is this listing or the government boundary it already documents; “platform-only” means another product line is certified and the vendor does not state this agent is inside that boundary.

Pricing (as published)

Not published

Tasks

cloud securityvulnerability managementcompliance posture

Sources

1. orca.security/ (primary)
2. dir.texas.gov/resource-library-item/tx-ramp-certified-cloud-products
3. govramp.org/program-participants

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Use-case comparisons

• Cloud security (CNAPP) AI agents — 9 verified listings (Cloud and container security posture, exposure and remediation)

Compare Orca Security with

• 
  Wiz vs Orca Security vs Plerion Pleri (AI security engineer) vs Sysdig Agentic AI (Sysdig Secure AI agents) vs Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) vs Maze AI Agents (Maze Cloud and Maze Code) vs Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents)
• A
  Andesite Human-AI SOC (Azimuth for Government) vs Orca Security
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) vs Orca Security
• 
  Conveyor vs Orca Security
• 
  Hadrian Nova (agentic pentesting) vs Orca Security
• 
  Mondoo vs Orca Security
• 
  Orca Security vs SafeBase
• 
  Orca Security vs SentinelOne Purple AI (agentic AI security analyst)
• 
  Orca Security vs Snyk
• 
  Dropzone AI SOC Analyst vs Orca Security

Alternatives

• A
  Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized. (shared tags: SOC 2, ISO 27001, TX-RAMP)
• 
  Wiz — Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments. (shared tags: SOC 2, ISO 27001, TX-RAMP)
• 
  Secureframe — Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. (shared tags: SOC 2, ISO 27001, TX-RAMP)
• 
  UpGuard — Cyber risk and third-party risk management platform with published CRPM pricing page. (shared tags: SOC 2, ISO 27001, TX-RAMP)
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized. (shared tags: GovRAMP, TX-RAMP)
• 
  Conveyor — Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. (shared tags: SOC 2, ISO 27001)

See all Orca Security alternatives →

FAQ (from this dataset)

What does Orca Security do?

AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.

How much does Orca Security cost?

Not published

Where is Orca Security headquartered?

Israel

Which frameworks does Orca Security support?

Frameworks (vendor-stated): SOC 2, ISO 27001, GovRAMP, TX-RAMP. Framework tags indicate relevance, not certification.

What are alternatives to Orca Security?

See the Orca Security alternatives page for category-sharing listings in relevance order, not a ranking. Orca Security alternatives.

Stay updated