Orca Security

The agentless cloud security pioneer for #AWS, #Azure, #GoogleCloud, #Kubernetes and more.

[Orca Security @orcasec]

Builders building for builders.

For two days, 142 Orcas across 42 teams paused the day-to-day to brainstorm, build, and explore what's next for our platform.

Take a look inside this year's Orcathon!

[Orca Security @orcasec]

What if your coding agent could fix your critical vulnerabilities, and your engineers still trusted every fix?

One of our customers did exactly that. They reached zero critical alerts in 30 days using Orca MCP and Claude Code.

See how it worked: https://t.co/XgJMLrFGW8

[Orca Security @orcasec]

Discovery AI turns plain language security questions into validated cloud queries in 15 seconds.

Here's how we built it on Amazon Bedrock: https://t.co/4lqnvjZnXH

[Orca Security @orcasec]

A critical PHP flaw lets attackers take over web servers without logging in. A fix is out for PHP 8.2 and newer, but older versions won’t get one.

Orca shows you which of your servers are exposed so you know what to fix first.

https://t.co/txFlFrSQ3N

[Orca Security @orcasec]

Jubilant Foodworks used to juggle a separate console for every AWS service. Now they see their whole cloud in one place, and they’re detecting risk 30% faster because of it.

Here’s the full story: https://t.co/9h1Ouyx4qj

[Orca Security @orcasec]

Your firewall export shows what one rule allows.

Your network map should show what all of them allow together, port by port.

How to build one with an Orca Custom Agent: https://t.co/DrUAv1lmIo

[Orca Security @orcasec]

We tested NVIDIA Nemotron 3.5 Super VL, an open, customizable multimodal model now available on Hugging Face.

Here's what we found: https://t.co/23egubd44L

[Orca Security @orcasec]

Running your own GitLab? Update today.

CVE-2026-97229 lets someone take over the server with one bad line in a project file. No login needed on some setups.

Details: https://t.co/5Fw2erWGvU

[Orca Security @orcasec]

“This bucket is public” is a finding.

“This bucket is public, it’s a crown jewel, and it’s due in 7 days” is a plan.

Orca Custom Agents apply your org’s rules to every alert, so the context is there before anyone has to ask.

https://t.co/tBgYlTL1X4

[Orca Security @orcasec]

Building an app used to take an engineering team. Now it takes an afternoon.

At The Builder Exchange, Gil Geron, Troy Hunt, and security leaders from Blue Yonder, IDC, and Cimpress share new research and stories on how teams are keeping up.

Register: https://t.co/hWmTTUO9hQ

[Orca Security @orcasec]

"It's actually amazing, and terrifying."

Our security team's take on reviewing an app built entirely with AI.

The AI's own scan said it was ready to ship. Ours said something very different.

What we found 👇
https://t.co/vWYC1NpWza

[Orca Security @orcasec]

Building software used to take a team of engineers and weeks of review.

Now it takes an afternoon and a good prompt.

The Builder Exchange: how security leaders keep up with the companies building fastest with AI.

https://t.co/hWmTTUO9hQ

[Security Today @SecurToday]

#AI tools and autonomous agents are redefining who can build software.

@orcasec CEO Gil Geron breaks down why security teams must rethink visibility and permissions as shadow #IT evolves.

Read the full article 👇️
https://t.co/YqfIGAE3Wf

[Orca Security @orcasec]

Every team is building with AI now. How does security keep up?

We're hosting The Builder Exchange on Nov 4 with security leaders.

https://t.co/hWmTTUO9hQ

[Orca Security @orcasec]

Our Head of Distribution built a partner portal with AI in one weekend.

Our CEO wanted to launch it. Then he asked: had security seen it yet?

https://t.co/tVwo9e0ekP

[Orca Security @orcasec]

Who's building software at your company that you don't know about?

Our CEO Gil talked to Let's Data Science about it. AI isn't just helping attackers move faster, it's letting anyone build apps and automations of their own.

Read here: https://t.co/8blyQHQJf8

[Orca Security @orcasec]

We're heading to the Gartner Security & Risk Management Summit, 22–24 September at ExCeL London. Come find us at booth 418!

Book a demo ahead of time or just stop by: https://t.co/5qb1B3y1Xi

[Orca Security @orcasec]

🚨 CVE-2026-85706 (CVSS 10.0): unauthenticated file read on self-managed GitLab. One HTTP request exposes SSH keys, deploy tokens, and CI/CD secrets.

Already on CISA's KEV list. Patch now 👇
https://t.co/HNNpMFaOeq

[Orca Security @orcasec]

Pre-built agent, or build your own?

Orca ships both. Threat Investigator for the alerts you see every day. The MCP Server for the ones only your team would know to look for.

Same data, different job.

https://t.co/NWS0Sosym0

[Orca Security @orcasec]

Model cards don't stop sandbox escapes.

Federal AI strategies this spring covered paperwork. Four months later, an AI agent chained a sandbox escape into a production breach.

3 gaps between AI governance and AI security 👇

https://t.co/PpbMQGQCf5