Orca Security
Agentless-first cloud security platform with AI agents that triage and fix
Overview
Orca Security is a cloud-native application protection platform that scans AWS, Azure and Google Cloud without agents using its patented SideScanning, with an optional eBPF runtime sensor. Orca AI adds natural-language search, drafted code fixes, triage and remediation agents, and an MCP server for AI assistants. It is sold by private offer or through AWS Marketplace starter packs.
Pricing
Pricing shown for reference only. These figures reflect RECATOOLS research as of 14 Oct 2026 and may be out of date or incomplete. This is not financial or purchasing advice — always confirm the current price on the provider’s official website before making any decision.
- Small starter pack of concurrent EC2 workloads
- Small-medium starter pack of concurrent EC2 workloads
- Medium starter pack of concurrent EC2 workloads
- Large starter pack of concurrent EC2 workloads
- Additional platform licensing not shown in the listing
Use cases
What you can produce with Orca Security
- Agentless SideScanning of AWS, Azure and Google Cloud workloads, configurations and identities
- Attack paths that chain misconfigurations, identity risks and lateral movement to critical assets
- AI-drafted code and IaC fixes, with the option to open a pull request
- Red, blue and green AI agents that probe exposure, triage alerts and route fixes
- An inventory of AI models, packages and MCP servers running in the cloud, with prompt analysis
- Real-time runtime detection through the optional eBPF Orca Sensor
- Orca context inside Claude, Cursor and other assistants through the Orca MCP Server
Orca connects to a cloud account in hours and correlates misconfigurations, vulnerabilities, identities and sensitive data into prioritised attack paths, which is still the reason to buy it. The AI layer is now substantial: agents that triage alerts and dismiss false positives, fixes drafted as pull requests, and an MCP server for teams working in Claude or Cursor.
Entry cost is the hurdle. The smallest published AWS Marketplace pack is $7,000 a month, though a free trial is available. Best for mid-size and large multi-cloud teams; overkill for a handful of instances.
What we found
Orca Security sells a cloud-native application protection platform, the category usually shortened to CNAPP, for AWS, Azure, Google Cloud and other clouds. Its founding idea, brought to market in 2019, is SideScanning: reading workload storage through the cloud provider's own interfaces instead of installing an agent on every machine, so an account can be connected and assessed within hours. Orca now also sells an optional eBPF runtime sensor for workloads that need real-time blocking, so the old line that it never installs anything is out of date.
The AI layer has grown quickly. Orca AI reasons over the platform's graph of assets, risks and identities, and powers natural-language search, drafted code fixes that can be opened as pull requests, and groups of agents: red agents that probe what is exposed, blue agents that triage alerts and dismiss false positives, and green agents that route a finding to its owner with a fix attached. An MCP server carries the same context into Claude, Cursor and other assistants. In May 2025 Orca bought Opus, an agentic remediation start-up, and in July 2026 it previewed AI AppGen Security, which finds apps employees build on platforms like Lovable or Supabase, alongside an AI Code Security Auditor; both were due for release later in 2026.
Earlier versions of this page said there was no trial and quoted typical contracts of $36,000 to $60,000 a year; neither held up. Orca's AWS Marketplace listing offers a free trial and four starter packs priced by concurrent EC2 workloads, from $7,000 to $30,000 a month, or $84,000 to $360,000 on a 12-month contract, with larger licences by private offer. The listing showed 4.7 out of 5 from 343 ratings, read 14 October 2026.
Orca says it has raised nearly $630 million at a $1.8 billion valuation, and no sale of the company had been announced. It is a strong fit for multi-cloud estates that want fast coverage and prioritised attack paths; small teams will find the entry price steep.
Compiled by RECATOOLS from public sources: vendor documentation and pricing, code repositories and published reporting.
About this listing
This entry was compiled from publicly available data including Orca Security's official website, press releases, documentation, and reputable third-party publications. RECATOOLS is not affiliated with Orca Security unless explicitly stated.
Third-party AI tools update their pricing, features, availability, and policies frequently. Information here may be outdated by the time you read this — we make reasonable efforts to keep listings current, but cannot guarantee absolute accuracy.
For the latest details, please refer to Orca Security directly →
Spotted something out of date? Suggest an update →
Alternatives to Orca Security
More in Security & Safety
