Orca Security Extends AI Innovation Leadership With Integrated Chatbot and New Detections for AI Security Posture Management (AI-SPM)

PORTLAND, Ore.--(BUSINESS WIRE)--Orca Security, the leading innovator in agentless cloud security, today launched the latest innovations for Orca AI and new detections to secure sensitive AI training data in cloud-native environments. Orca AI now provides instant access to deep cloud telemetry from the Orca Unified Data Model through a simple, intuitive, chat-like experience to quickly and easily understand cloud security risks and compliance gaps.

"We’ve been the frontrunner in leveraging generative AI to help simplify, accelerate, and enhance cloud security for our customers. The latest Orca AI innovations announced today further deliver on that promise." -- Orca CEO Gil Geron

Share

Orca’s approach is built on a vision of making cloud security easy for everyone who uses the Orca Cloud Security platform. The foundation is Orca’s patented SideScanning and Unified Data Model, which provides the broadest and deepest cloud telemetry available in any platform. Orca AI builds on that foundation with a collection of GenAI-powered capabilities, including natural language search and code remediation recommendations to help simplify, accelerate, and enhance cloud security for security and DevOps teams.

Through the addition of an in-app chatbot, Orca AI now makes all this intelligence more accessible and actionable. For example, security analysts can ask Orca AI simple questions, such as, “What are my most critical alerts?” and receive quick summaries, reducing the time to insight. They can then collaborate with Orca AI within the context of an alert to assess the potential impact and recommend the appropriate mitigating controls. Application security teams can also explore more complex problems like, “Why is this code commit producing a critical alert, and how do I fix it?” Orca AI will explain the issue in plain English and then recommend code snippets to fix the security gap, extending Orca’s AI-driven remediation capabilities into the chatbot experience.

“We’ve been the frontrunner in leveraging generative AI to help simplify, accelerate, and enhance cloud security for our customers,” said Gil Geron, CEO and co-founder at Orca Security. “At the end of the day, they value solutions that make them more efficient while ensuring their clouds – and the AI applications running on them – are secure. The latest Orca AI innovations announced today further deliver on that promise.”

New Sensitive Data Detections in AI-SPM

As organizations accelerate their AI adoption, Orca research shows that many are overlooking basic security measures. Orca’s 2025 State of Cloud Security report found that 84% of organizations now use AI in the cloud, and 62% of organizations have at least one vulnerable AI package. Through AI-SPM, Orca leverages its agentless SideScanning technology to provide the same visibility, risk insight, and deep data for AI models that it does for other cloud resources. It also addresses use cases unique to AI security, including detecting sensitive data in training sets.

Orca enhanced its AI-SPM capabilities with new detections for sensitive data in training models, risk of data poisoning due to editable or replaceable AI training data, and advanced AI misconfigurations mapped to the OWASP LLM Top 10 and OWASP ML Top 10. New graph visualizations make it easy for security teams to understand and quickly remediate the risk to AI training models. These new training model detections will first be made available for Azure Open AI, with AWS Sagemaker, with support for Google Cloud’s Vertex AI to follow.

Please read Orca’s blog to learn more. You can schedule a personalized demo at https://orca.security/demo/.

About Orca Security

Orca enables organizations to make cloud security a strategic advantage. With the most comprehensive coverage and visibility across multi-cloud environments, the agentless-first Orca Platform unites teams to eliminate complexities, vulnerabilities and risks. Backed by Temasek, CapitalG, ICONIQ Capital, Redpoint Ventures and others, Orca is trusted by hundreds of organizations, including SAP, Gannett, Autodesk, Unity, Lemonade and Digital Turbine. Connect your first account in minutes: https://orca.security or book a personalized demo.