Orca Security

Orca Security (www.orca.security) is a cloud-native security platform that uses block-level side-scanning to non-invasively assess IaaS and PaaS implementations for vulnerabilities and compromised assets - without agents and within minutes. The scanning approach takes a read-only filesystem-deep snapshot of cloud services via the relevant provisioning APIs to create an out-of-band "block copy" of your entire cloud environment. The snapshot is then pentested with automated red team technology that identifies malware, misconfigurations, leaked/weak passwords, lateral movement potential, sensitive data stores, etc. -  which are then prioritized according to operational risk to accelerate the remediation path for cloud architecture and security teams. Because it's not your production environment - there's zero-risk to operational stability, enabling the platform to holistically evaluate your entire security posture - even for sleeping workloads that may spin up selectively in the future.

‍