DevOps Lead - FedRAMP

Cloud security firm Upwind scores $300M from Bessemer and TCV. The cloud security startup banks $300M at a $3.8B valuation led by Bessemer and TCV. Last updated: September 5, 2026 5:32 am Upwind Security has closed another nine-figure round as cloud security spending keeps climbing. The company raised $300M in Series C funding led by returning backers Bessemer and TCV, with Salesforce Ventures, Greylock and Craft Ventures among the participants, SiliconANGLE reported. The round values Upwind at $3.8B, roughly $2B more than at the start of the year. The raise comes eight months after the company's previous nine-figure round. Upwind sells a platform that automatically maps every asset in a cloud environment, refreshing its view every 30 seconds to catch configuration changes, new workloads and account shifts before they become exposures. Its approach leans on eBPF, a Linux feature that lets the company collect kernel-level telemetry without risky operating system changes. Upwind then applies AI to scan those assets for weak points, comparing each workload's configuration against known attack patterns. The platform can also generate AI-BOMs, bills of materials that list the components inside AI applications so administrators can spot risky software. The funding round underscores how investors are rewarding security startups that target the messy reality of modern clouds, where developers add and remove workloads constantly. Upwind competes with the likes of Wiz and Orca Security in the red-hot cloud security category.

Orca Security protects ai-powered & developer-built applications. Post Views: 1 Orca Security has unveiled two AI-powered solutions designed to address evolving risks in application development. Orca Security's ai-powered solutions. Orca Security has unveiled two AI-powered solutions designed to address evolving risks in application development. The first, Orca AI AppGen Security, identifies and protects applications created outside traditional development pipelines using AI platforms such as Claude, Supabase, and Lovable. The second, AI Code Security Auditor, employs deep static analysis to detect vulnerabilities in code generated through conventional software development processes. These additions expand the Orca Platform's capabilities to secure applications across all stages of creation, from enterprise engineering teams to AI-assisted developers. Key findings from Orca Research Pod. A 2026 report from Orca Research Pod, analyzing anonymized data from over 1,200 cloud environments, revealed that 52% of organizations now construct custom applications with AI assistance. As business units deploy AI-generated applications connected to APIs, cloud infrastructure, and sensitive data, traditional security oversight is increasingly insufficient. Simultaneously, exploitable flaws persist within development pipelines. IBM's research indicates that breaches involving shadow AI systems cost organizations an average of $670,000 more than standard incidents, emphasizing the urgency of comprehensive security measures. "Modern software development is no longer confined to engineering teams. Developers, non-technical employees, and even advanced AI models are generating applications across multiple environments. Security frameworks must adapt to this reality without hindering innovation," stated Gil Geron, CEO of Orca Security. "Our AI Code Security Auditor equips teams to proactively identify critical vulnerabilities in AI-assisted workflows, while AI AppGen Security ensures visibility over applications created outside traditional pipelines. Together, these tools provide unified protection for all software creation methods." Addressing critical challenges. The solutions address two critical challenges in contemporary development. Orca AI AppGen Security provides security teams with visibility into AI-generated applications by: * Identifying applications built outside formal pipelines and tracing their creators * Assessing risk exposure across API integrations, data access points, and third-party dependencies * Prioritizing threats based on potential business impact Orca Code Security Auditor enhances traditional static analysis by: * Detecting vulnerabilities overlooked by conventional SAST tools through AI-driven code evaluation * Conducting comprehensive repository scans to identify risks associated with frontier AI models * Focusing on exploitable weaknesses that pose immediate threats to systems "Developers and business teams are deploying applications at a pace that outstrips our ability to manually review them. Applications created outside our pipeline were previously invisible, creating significant blind spots," said Sangram Dash, CISO at Sisense. "These tools allow us to maintain control while enabling rapid development, ensuring we can govern all software without impeding progress." Expanding risks and industry trends. The report highlights growing risks as AI integration expands. Organizations must now secure applications developed through hybrid models where human and machine-generated code coexist. The tools emphasize the need for context-aware security strategies that balance innovation with risk mitigation. Additional findings from the State of AI Security Report 2026 include: * 78% of surveyed organizations reported increased complexity in managing AI-generated code * 43% of security teams lack tools to assess risks in AI-assisted development * 61% of breaches involving AI systems originated from unmonitored third-party integrations Adaptive security architectures. The report underscores the necessity of adaptive security architectures capable of evolving with emerging technologies. As AI-generated software becomes more prevalent, the focus shifts toward proactive risk assessment and real-time threat detection. The solutions are part of a broader industry trend toward AI-enhanced security. Recent studies show that organizations using AI-driven security tools experience 34% faster threat response times and 22% lower incident resolution costs compared to peers relying on traditional methods. Conclusion. The findings align with growing concerns about AI's role in cybersecurity. While AI accelerates development, it also introduces new attack vectors that require specialized mitigation strategies. The report recommends that organizations adopt unified security platforms capable of addressing both human and machine-generated software risks.

Orca Security extends its Platform to the new generation of AI builders. Ahead of Black Hat USA 2026, Orca unveils AI AppGen Security and AI Code Security Auditor, giving security teams one platform to find truly exploitable code in development and discover shadow builders, safely enable them, and govern the AI applications employees build outside engineering LAS VEGAS - July 29, 2026 - Software is no longer built solely by professional developers inside traditional development pipelines. As AI turns employees across the business into builders, organizations need security that protects software wherever it gets built. Today, Orca Security, a leader in cloud and AI security, announced two new AI-powered capabilities: Orca AI AppGen Security, which discovers and secures AI applications built outside the development pipeline on AI-powered platforms like Claude, Supabase, and Lovable, and AI Code Security Auditor, which delivers deep AI-driven static analysis for code developed within traditional pipelines. Together, the capabilities extend the Orca Platform to secure software across the full spectrum of modern application development, from professional engineering teams to the growing population of AI-assisted builders. The shift is already well underway. Orca's newly released State of AI Security Report 2026, based on anonymized telemetry from more than 1,200 production cloud environments analyzed by the Orca Research Pod, found that 52% of organizations now build custom applications with AI. As business teams increasingly deploy AI-generated applications connected to APIs, cloud resources, and sensitive data, software development is expanding beyond security's traditional visibility. At the same time, exploitable risks continue to persist within development pipelines. IBM estimates breaches involving shadow AI cost organizations an average of $670,000 more than other incidents, underscoring the need for organizations to secure software consistently, whether it's built by developers in the pipeline or employees using AI outside of it. "Everyone is a builder now. Developers are creating software in the pipeline, employees are building AI applications outside it, and the next generation of frontier AI models will increasingly generate and modify software on their own. Organizations need security that can keep pace with this shift without slowing innovation. Our AI Code Security Auditor prepares customers for the next wave of AI-assisted software development, while giving security teams the deep, accurate context they need to understand what's truly exploitable. Combined with AI AppGen Security, Orca helps organizations secure every builder and every application, wherever and however it's created." Gil Geron, CEO and Co-Founder, Orca Security Whether software is written by professional developers or generated by AI-powered builders, security teams need the same outcome: complete visibility, meaningful context, and the ability to prioritize real risk. Together, Orca AI AppGen Security and Orca Code Security Auditor extend the Orca platform to secure modern software development wherever it happens. Orca AI AppGen Security: secure the new generation of AI builders. As AI expands software development beyond engineering, Orca AI AppGen Security gives security teams visibility and control over applications built outside the development pipeline by: * Discovering AI-generated applications and who built them. * Mapping application risk across APIs, integrations, and data access. * Prioritizing high-risk exposures based on real business impact. Orca Code Security Auditor: secure ai-assisted development. Orca Code Security Auditor helps developers identify and prioritize the vulnerabilities that matter most by: * Finding vulnerabilities traditional SAST misses with AI-powered code analysis. * Full repository scanning to uncover Mythos class frontier model vulnerabilities. * Prioritizing exploitable risk so teams can focus on what attackers can actually reach. "My developers and my business teams are both shipping software faster than my team can review it, and the apps built outside our pipeline were a complete blind spot. Seeing exploitable code and the AI apps our employees stand up in one platform lets us say yes to builders instead of slowing them down - and still know exactly what we're governing." Sangram Dash, Chief Information Security Officer, Sisense One platform for everyone who builds. Software is no longer built solely by developers. Employees across the business are creating applications with AI, while autonomous agents increasingly contribute to how software is developed and deployed. As the population of builders continues to grow, organizations need a single platform to secure and govern every application, regardless of who - or what - built it. Recent additions, including support for Anthropic Claude through its Compliance API, further extend Orca's unified approach to AI governance. Orca delivers on its promise of security for the companies that build by providing unified visibility and risk prioritization across the entire software lifecycle, enabling organizations to innovate with confidence while keeping every builder building. Availability. Orca AI AppGen Security and Code Security Auditor will be unveiled at Black Hat USA 2026 and will be generally available later in 2026. Orca will demonstrate both capabilities at booth 5115 at Black Hat USA 2026 in Las Vegas. The State of AI Security Report 2026 is available now at orca.security. About Orca Security. Orca Security delivers security for the companies that build. As cloud, applications, AI and app generation expand the attack surface, Orca transforms security risk into the context teams need to act. The Orca Platform provides complete visibility across cloud, AI, and application environments, correlates risk across every layer, and prioritizes the exposures that matter most so organizations can remediate faster and innovate with confidence. Trusted by hundreds of organizations, including SAP, Autodesk, Gannett, Lemonade, and Digital Turbine, Orca is backed by leading investors including Temasek, CapitalG, ICONIQ Capital, and Redpoint Ventures. Learn more at orca.security. Connect your first account in minutes: https://orca.security or book a personalized demo.