OCompany Does Not Provide H-1B Sponsorship
Orca Security provides cloud security solutions through a Cloud Security Platform that unifies vulnerability management, cloud posture management, container security, cloud workload security, and multi-cloud compliance. It works by connecting to a client’s cloud environment and using its agentless CNAPP built on patented SideScanning to scan the entire cloud estate, revealing misconfigurations, vulnerabilities, identity risks, data exposure, API risks, and threats. The platform prioritizes the most significant cloud risks, identifies critical assets, and provides risk context across multi-cloud environments, enabling faster remediation. It also uses Generative AI to streamline tasks and improve understanding of the cloud landscape. Orca’s goal is to give organizations complete visibility and strong protection for all cloud-based assets across multi-cloud environments, reducing risk and simplifying security operations.
Work here?Claim your company
Industries
Company Size
501-1,000
Company Stage
Series C
Total Funding
$632M
Headquarters
Portland, OR
Founded
2019
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Total Funding
$632M
Above
Industry Average
Funded Over
5 Rounds
Industry standards
AI outside your pipelines: Orca extends AI AppGen Security to Base44's Compliance API. Nov 03, 2026 For years, software reached production through checkpoints security controlled: a ticket, a code review, a CI gate and a security sign-off. AI app builders skip all of them. An HR coordinator describes an app in plain English and can publish it within the hour. 52% of organizations already build custom applications with AI. The opportunity is huge, and so is the need to secure it without slowing anyone down. Base44 is where much of that building happens, no coding required. Base44 passed $100M in annual recurring revenue by early March 2026 and $200M ARR in August. JH Kelly builds department apps in about a week with a 4-person data team, and teams can go from an idea to a live app in a single day. Every AI-generated app has the same parts: the builder, the site it runs on, the database, the login and, more and more often, an AI agent. Most stacks spread those parts across 4 or 5 vendors. Base44 puts all of them in one workspace. With its new Compliance API, it also gives enterprise admins one place to govern them: who can open an app, who can read its data and who its agents can talk to. Base44 just launched its Compliance API, and Orca is ready on day one. Today, Orca is extending AI AppGen Security to Base44. It joins Vercel and Claude in the same risk model and alert queue you already use for AWS, Azure and Google Cloud. You can't block your way out of AI outside your pipelines. You secure it through the platform's control plane, then rank its risk against everything else you run. Base44 built the controls. Orca keeps drift in check. A single Base44 app now leaves a trail in three places: its settings live in Base44, its code can sync to GitHub, and the data it touches sits in your cloud. Each place has its own security view, and none of them shows the whole app. Security teams end up asking three tools one question: can this app put Orca at risk? Base44's enterprise controls are the foundation: SSO enforcement, SCIM, audit logs, IP allowlists, a Security Center that scans app code, and now a Compliance API that opens workspace settings to the rest of the security stack. The next question for security teams is whether those controls stay on as builders publish new apps. Across AI app builders as a whole, drift is common for security controls. Escape's passive scan of 5,600+ public vibe-coded apps found 2,000+ vulnerabilities, 400+ exposed secrets and 175 instances of exposed PII. Take two apps from the same well-governed workspace: * App A is a sales deal-tracking dashboard. It's restricted to the workspace, each rep sees only their own records, and every admin uses MFA. * App B is an HR onboarding portal published last week. Its builder switched it to public for a vendor demo and never switched it back, so its Employees table is now readable without login. From the outside, both are just URLs. Only the workspace configuration, now readable through Base44's Compliance API, shows that App B drifted from policy. The question isn't "is anything misconfigured?" It's "which of these apps can actually create risk?" Introducing the Orca Base44 connector. Orca's connector is built on Base44's new Compliance API, which gives enterprise admins a read-only view of how a workspace is set up. There's nothing to install, and nothing to add to the builder's workflow. The Compliance API is available to Base44 Enterprise customers. A workspace admin creates an API key with the Compliance API permissions and adds it to Orca's Base44 connector. Discover. Orca inventories apps, data schemas, backend functions, secret names, API keys, integrations, custom domains and AI agents, plus members if the admin allows it. It ties each app to the person who built it. Inventory of Base44 apps and assets in the Orca Platform. Govern. Orca checks the workspace against more than 30 out-of-the-box posture rules: * Data exposure: Public apps without login, data entity permissions that don't match app visibility, public apps holding secrets, and backend functions with no login wall. * Identity: Admins without MFA, SSO that is configured but not enforced, guest SSO exemptions, and risky or stale API keys. * AI agents: Superagent and embedded-agent access settings, checked against each app's visibility. * Workspace guardrails: Public default visibility, non-admins who can publish to the internet, a disabled IP allowlist, unrestricted iframe embedding, and domains that point at deleted apps. Findings map to SOC 2, ISO 27001, NIST 800-53, GDPR, PCI DSS and HIPAA, so GRC teams get evidence without chasing app own Security alerts for a Base44 app in the Orca Platform. Context that tells you which app to fix first. In Orca, Base44 findings join the same Unified Data Model as the rest of your environment. * Exposure, ranked. Orca adds every live, published Base44 app to its exposure graph as internet-reachable. It then precisely prioritizes apps that combine public access with open data, secrets, outside connectors or anonymous agents. App B rises to the top, and App A stays quiet. * One queue for every AI builder. Base44 findings sit next to Vercel and Claude findings, with the same workflow, ticketing and compliance reports, and a named business owner on every finding. * Code and workspace, side by side. Base44 builders usually never see a pull request, yet their apps still produce code, and with Base44's GitHub sync (Builder plan and up) that code lands in your repos. Orca already scans the repos you connect to. Now it also sees the workspace that published them: who has access, what is exposed, and what agents and connectors can reach. Base44's Security Center also checks code inside the builder. Builders keep their platform and their speed. Security gets enough context to approve apps instead of blocking them. That's how AI AppGen Security turns "no" into "go." Want to see how Orca keeps your Base44 workspace enterprise ready? Book a demo and Orca'll walk through a live workspace. About the Orca Platform. Orca Security delivers security for the companies that build. As cloud, applications, AI and app generation expand the attack surface, Orca transforms security risk into the context teams need to act. The Orca Platform provides complete visibility across cloud, AI, and application environments, correlates risk across every layer, and prioritizes the exposures that matter most so organizations can remediate faster and innovate with confidence. Trusted by hundreds of organizations, including SAP, Autodesk, Gannett, Lemonade, and Digital Turbine, Orca is backed by leading investors including Temasek, CapitalG, ICONIQ Capital, and Redpoint Ventures.
Solana weekly update: Samsung USDC, DvP standard, 200ms block times. Published: October 11, 2026 Payments, settlement, and speed shape the week for SOL. The latest Solana weekly update covers payments, institutional settlement, and network speed. The official X account of the chain shared its media roundup for Oct 2 to Oct 8 on Oct 10, 2026. SOL also had a softer week, trading near $109.55 on Oct 11 according to CoinGecko data. This article lists the main ecosystem items and the market figures, alongside the latest crypto news from the sector. Samsung Wallet adds USDC transfers for US Galaxy owners. One item in the roundup involves Samsung Wallet. Coverage listed in the post says the wallet plans USDC transfers on the network for users in the United States. The reach cited is about 82 million Galaxy devices. USDC is a stablecoin, meaning a token built to track the US dollar. Its stablecoins guide explains the basics. The listed use case is cross-border remittances, which means sending money to family or businesses abroad. This Solana weekly update notes that the post gives no launch date, so readers should wait for confirmation from Samsung. Institutional DvP standard targets one-step settlement. The Solana Foundation also introduced an institutional settlement standard, according to coverage in the roundup. J.P. Morgan is listed as giving input on the design. The standard uses DvP, short for delivery versus payment. In plain terms, the asset and the cash move together in one transaction. Neither side can deliver without the other side paying. The roundup describes it as an open escrow design for tokenized assets and cash. Its stated aim is to settle institutional trades in seconds. Tokenized assets are real-world items, such as shares, represented as tokens on a blockchain. This part of the Solana weekly update focuses on institutions, not retail users. Securitize, Orca, and block time items round out the list. Other items in the post point to growth across the ecosystem: * Tokenized stocks: Securitize launched stock trading in token form for US investors. * Orca and Loopscale: The two ecosystem projects merged, with a push to finance AI, robotics, and defense. * Faster blocks: The network is about to halve its block times as the final 200-millisecond upgrade nears. Block time is the gap between new blocks. * Intelligence report: A September 2026 report covers Open USD, USDv, and Project Harmonia. Taken together, the Solana weekly update shows work across trading, finance, and speed. Shorter block times mean transactions can confirm faster. That matters for payment and trading uses, though the post gives no release date for the final upgrade. SOL trades near 109 after a 9.2 percent seven-day drop. For this Solana weekly update, CoinGecko data shows SOL ranked seventh by market cap on Oct 11, 2026. The seven-day chart moves from about $122 on Oct 5 and 7 to a low near $106 on Oct 9. SOL then held a narrow band between roughly $108 and $111. | Metric | Reading | | SOL price | $109.55 | | 7-day change | Down 9.2% | | 24-hour range | $108.94 to $110.63 | | Market cap | $64.519B | | 24-hour volume | $1.528B | | Perps open interest | $8.758B | | Circulating supply | 589.051M SOL | Perps open interest means the value of open perpetual futures contracts, which have no expiry date. The figures show activity but do not link the move to any single news item. Note: Prices can change quickly, so figures may not reflect the latest value. Readers should check a live price tracker for current data. Expert take: real use cases meet a cautious market. The roundup items focus on use, not speculation. Wallet payments, tokenized stocks, and DvP settlement each target real financial flows. Adoption will depend on real usage. Wallet rollouts need user uptake, and the settlement standard needs institutions that choose to use it. The decline over the week also shows that news and market moves do not always match. A balanced reading treats this Solana weekly update as a progress report, not a signal. Conclusion: three items to track after this week. Ecosystem work on payments, settlement, and block speed continued through the week, based on the official roundup. Readers following blockchain news can track three items next: details of the Samsung rollout, institutional use of the DvP standard, and the final 200-millisecond block time upgrade. The next Solana weekly update will show whether these items move from announcement to use. YMYL Disclaimer: This article is for educational and informational purposes only. It is not financial advice, a price prediction, or a guarantee of returns. Crypto assets carry risk, so readers should do their own research before making any decision.
Orca Security launches new global Partner Program and ai-powered Partner Success Platform. Orca Security announced its new global Partner POD Program and integrated, AI-powered Partner Success Platform (PSP). The program rewards partners across the full customer lifecycle, including net retention, while custom AI teammates within PSP help them identify opportunities, create content, build expertise and grow more efficiently. The program and platform are directly linked: what the Partner POD Program promises, PSP helps partners execute. Unlike traditional partner portals that primarily provide access to static information and resources, PSP is designed to actively help partners get work done. AI embedded throughout the platform can analyze data, generate materials, surface relevant intelligence, answer technical questions and automate time-intensive tasks. "AI gives us the opportunity to rethink not only what a partner platform can be, but the partner program itself," said Gil Geron, CEO and Co-Founder of Orca Security. "We're moving beyond traditional portals and static resources toward an intelligent experience that can anticipate needs, connect insights and help partners take action. Together, the Partner POD Program and Partner Success Platform create a foundation for AI to become a true growth engine, helping partners uncover opportunities and create more value for customers." The Partner POD Program is built around three principles: making Orca easy to do business with, engineering profitability into the program rather than negotiating it deal by deal, and extending Orca's innovation beyond its security product into how partners transact, sell and get rewarded. Partners are recognized for the value they create across the customer lifecycle, from new business through expansion and net retention. The Partner Success Platform brings marketing, intelligence, enablement and business planning into one AI-powered partner operating system. Key capabilities include: * AI-powered expertise: An AI assistant trained on Orca product documentation, answers partner questions and links directly to relevant source materials. * Intelligent account analysis: The Demand Center analyzes prospective accounts against Orca's ideal customer profile across 11 vectors, returning a match score, relevant intelligence, contacts, and downloadable preparation materials in under 30 seconds. * AI-generated campaigns: Partners can generate co-branded social content and lead-capture landing pages in approximately one minute, replacing processes that can otherwise require weeks and outside agency support. * AI-powered enablement: AI-generated quizzes, certifications, demos, and other activities help partners build expertise while tracking progress directly in the platform. * Automated planning and content: AI can generate business plans, QBR-ready materials, solution briefs, integration guides, and technology alliance battle cards. Together, the program and platform give partners a connected way to build expertise, create demand, support customers and grow their Orca businesses. The program establishes the incentives and rewards, while PSP helps partners put them into action with greater speed and less manual work. "We built the Partner Success Platform around the way partners actually work, making it easier to build expertise, find answers, understand where to focus, and get more done," said John Tavares, SVP, Worldwide Partner and Alliances, Orca Security. "By making benefits easier to access, rewarding outcomes across the customer lifecycle and putting AI directly in partners' hands, we're helping them move faster and build more profitable cloud security practices." For partners, the value is greater speed, efficiency and access to capabilities that traditionally require more time and resources. By automating repetitive work and making Orca expertise, intelligence, content creation and enablement available on demand, PSP helps partners spend less time searching for information, building materials and managing manual processes, and more time applying their expertise to customers and growing their businesses. "As someone who works across a broad portfolio of vendor partnerships, efficiency and precision matter," said Emily Doornbos, Director of Alliances & Programs, GuidePoint Security. "The Orca Partner Success Platform gives us the tools to move faster and smarter... the AI campaign agent removes the heavy lifting from demand generation, and the deal coaching capability means we're not just creating pipeline, we're closing it. It's the kind of platform that turns a good partnership into a great one, and I'm excited to see what it unlocks for our go-to-market motion together." The Partner POD Program combines PSP with enablement, incentives, deal protection and support for partners building their cloud security capabilities. Every partner receives access to the platform, with progress and activities tracked directly through PSP. The Orca Partner POD Program and Partner Success Platform are available globally and localized in six languages at launch. Partners can access PSP at psp.orca.security. Learn more at orca.security/partners/overview. David Marshall is the founder of VMblog.com, one of the industry's longest-running independent publications covering modern data center technologies. What began as a focus on virtualization and cloud computing has expanded to cover the full spectrum of enterprise IT, including AI, security, and DevOps, making VMblog a trusted destination for vendor news, technology analysis, and industry commentary.Beyond publishing, David has spent his career at the intersection of technology and business, inventing, marketing, and launching a number of successful software companies and products, and building a reputation as a skilled marketing executive in the enterprise IT space.David is also a published author, having written two well-regarded books on virtualization and served as technical editor for two "For Dummies" titles covering virtualization and cloud computing. He co-founded CloudCow.com, a publication focused on cloud computing, and has been named a VMware vExpert every year since 2009, one of the longest continuous honoree streaks in the program's history.Connect with David on LinkedIn: https://www.linkedin.com/in/davidmarshall/
Cloud security firm Upwind scores $300M from Bessemer and TCV. The cloud security startup banks $300M at a $3.8B valuation led by Bessemer and TCV. Last updated: September 5, 2026 5:32 am Upwind Security has closed another nine-figure round as cloud security spending keeps climbing. The company raised $300M in Series C funding led by returning backers Bessemer and TCV, with Salesforce Ventures, Greylock and Craft Ventures among the participants, SiliconANGLE reported. The round values Upwind at $3.8B, roughly $2B more than at the start of the year. The raise comes eight months after the company's previous nine-figure round. Upwind sells a platform that automatically maps every asset in a cloud environment, refreshing its view every 30 seconds to catch configuration changes, new workloads and account shifts before they become exposures. Its approach leans on eBPF, a Linux feature that lets the company collect kernel-level telemetry without risky operating system changes. Upwind then applies AI to scan those assets for weak points, comparing each workload's configuration against known attack patterns. The platform can also generate AI-BOMs, bills of materials that list the components inside AI applications so administrators can spot risky software. The funding round underscores how investors are rewarding security startups that target the messy reality of modern clouds, where developers add and remove workloads constantly. Upwind competes with the likes of Wiz and Orca Security in the red-hot cloud security category.
Orca Security protects ai-powered & developer-built applications. Post Views: 1 Orca Security has unveiled two AI-powered solutions designed to address evolving risks in application development. Orca Security's ai-powered solutions. Orca Security has unveiled two AI-powered solutions designed to address evolving risks in application development. The first, Orca AI AppGen Security, identifies and protects applications created outside traditional development pipelines using AI platforms such as Claude, Supabase, and Lovable. The second, AI Code Security Auditor, employs deep static analysis to detect vulnerabilities in code generated through conventional software development processes. These additions expand the Orca Platform's capabilities to secure applications across all stages of creation, from enterprise engineering teams to AI-assisted developers. Key findings from Orca Research Pod. A 2026 report from Orca Research Pod, analyzing anonymized data from over 1,200 cloud environments, revealed that 52% of organizations now construct custom applications with AI assistance. As business units deploy AI-generated applications connected to APIs, cloud infrastructure, and sensitive data, traditional security oversight is increasingly insufficient. Simultaneously, exploitable flaws persist within development pipelines. IBM's research indicates that breaches involving shadow AI systems cost organizations an average of $670,000 more than standard incidents, emphasizing the urgency of comprehensive security measures. "Modern software development is no longer confined to engineering teams. Developers, non-technical employees, and even advanced AI models are generating applications across multiple environments. Security frameworks must adapt to this reality without hindering innovation," stated Gil Geron, CEO of Orca Security. "Our AI Code Security Auditor equips teams to proactively identify critical vulnerabilities in AI-assisted workflows, while AI AppGen Security ensures visibility over applications created outside traditional pipelines. Together, these tools provide unified protection for all software creation methods." Addressing critical challenges. The solutions address two critical challenges in contemporary development. Orca AI AppGen Security provides security teams with visibility into AI-generated applications by: * Identifying applications built outside formal pipelines and tracing their creators * Assessing risk exposure across API integrations, data access points, and third-party dependencies * Prioritizing threats based on potential business impact Orca Code Security Auditor enhances traditional static analysis by: * Detecting vulnerabilities overlooked by conventional SAST tools through AI-driven code evaluation * Conducting comprehensive repository scans to identify risks associated with frontier AI models * Focusing on exploitable weaknesses that pose immediate threats to systems "Developers and business teams are deploying applications at a pace that outstrips our ability to manually review them. Applications created outside our pipeline were previously invisible, creating significant blind spots," said Sangram Dash, CISO at Sisense. "These tools allow us to maintain control while enabling rapid development, ensuring we can govern all software without impeding progress." Expanding risks and industry trends. The report highlights growing risks as AI integration expands. Organizations must now secure applications developed through hybrid models where human and machine-generated code coexist. The tools emphasize the need for context-aware security strategies that balance innovation with risk mitigation. Additional findings from the State of AI Security Report 2026 include: * 78% of surveyed organizations reported increased complexity in managing AI-generated code * 43% of security teams lack tools to assess risks in AI-assisted development * 61% of breaches involving AI systems originated from unmonitored third-party integrations Adaptive security architectures. The report underscores the necessity of adaptive security architectures capable of evolving with emerging technologies. As AI-generated software becomes more prevalent, the focus shifts toward proactive risk assessment and real-time threat detection. The solutions are part of a broader industry trend toward AI-enhanced security. Recent studies show that organizations using AI-driven security tools experience 34% faster threat response times and 22% lower incident resolution costs compared to peers relying on traditional methods. Conclusion. The findings align with growing concerns about AI's role in cybersecurity. While AI accelerates development, it also introduces new attack vectors that require specialized mitigation strategies. The report recommends that organizations adopt unified security platforms capable of addressing both human and machine-generated software risks.
Find jobs on Simplify and start your career today
Don't see your dream role? Check out thousands of other roles on Simplify.Browse all jobs
Industries
Company Size
501-1,000
Company Stage
Series C
Total Funding
$632M
Headquarters
Portland, OR
Founded
2019
Find jobs on Simplify and start your career today
Don't see your dream role? Check out thousands of other roles on Simplify.Browse all jobs