Orca Security is a cloud security platform that provides agentless visibility and protection across cloud environments. It uses a proprietary SideScanning™ technology to collect data from cloud workloads without requiring agents, enabling coverage across virtual machines, containers, and serverless functions. The platform is structured as a Cloud-Native Application Protection Platform (CNAPP) and encompasses several security domains: - **Cloud Security Posture Management (CSPM):** Identifies and remediates misconfigurations across cloud environments. - **Cloud Workload Protection Platform (CWPP):** Protects VMs, containers, and serverless functions. - **Cloud Infrastructure Entitlement Management (CIEM):** Manages cloud identities, users, and entitlements. - **Data Security Posture Management (DSPM):** Identifies data breach risks and protects sensitive PII. - **Container & Kubernetes Security:** Secures container images and Kubernetes workloads. - **Vulnerability Management:** Agentless vulnerability detection with risk prioritization. - **API Security:** Provides API discovery, posture management, and drift detection. - **Cloud Detection and Response (CDR):** Offers 24x7 monitoring and response across the cloud attack surface. - **Application Security:** Covers the software development lifecycle (SDLC) and traces developer risks to production. - **AI Security Posture Management (AI-SPM):** Inventories cloud AI models, identifies AI risks, and ensures compliance. - **Multi-Cloud Compliance:** Supports regulatory compliance checks for industry standards and custom policies. The platform also includes an optional runtime sensor for advanced CDR and a GenAI-powered assistant called Orca AI. It supports multiple cloud providers including AWS, Azure, Google Cloud, Alibaba Cloud, Oracle Cloud, and Tencent Cloud.