Jubilant Foodworks used to juggle a separate console for every AWS service. Now they see their whole cloud in one place, and they’re detecting risk 30% faster because of it. Here’s the full story: orca.security/resources/case…

Your firewall export shows what one rule allows. Your network map should show what all of them allow together, port by port. How to build one with an Orca Custom Agent: orca.security/resources/blog…

We tested NVIDIA Nemotron 3.5 Super VL, an open, customizable multimodal model now available on Hugging Face. Here's what we found: orca.security/resources/blog…

Running your own GitLab? Update today. CVE-2026-97229 lets someone take over the server with one bad line in a project file. No login needed on some setups. Details: orca.security/resources/rese…

“This bucket is public” is a finding. “This bucket is public, it’s a crown jewel, and it’s due in 7 days” is a plan. Orca Custom Agents apply your org’s rules to every alert, so the context is there before anyone has to ask. orca.security/resources/blog…

Building an app used to take an engineering team. Now it takes an afternoon. At The Builder Exchange, Gil Geron, Troy Hunt, and security leaders from Blue Yonder, IDC, and Cimpress share new research and stories on how teams are keeping up. Register: orca.security/builder-exchan…

"It's actually amazing, and terrifying." Our security team's take on reviewing an app built entirely with AI. The AI's own scan said it was ready to ship. Ours said something very different. What we found 👇 orca.security/resources/blog…

Building software used to take a team of engineers and weeks of review. Now it takes an afternoon and a good prompt. The Builder Exchange: how security leaders keep up with the companies building fastest with AI. orca.security/builder-exchan…

Every team is building with AI now. How does security keep up? We're hosting The Builder Exchange on Nov 4 with security leaders. orca.security/builder-exchan…

Our Head of Distribution built a partner portal with AI in one weekend. Our CEO wanted to launch it. Then he asked: had security seen it yet? linkedin.com/safety/go/?url=…

Who's building software at your company that you don't know about? Our CEO Gil talked to Let's Data Science about it. AI isn't just helping attackers move faster, it's letting anyone build apps and automations of their own. Read here: letsdatascience.com/news/orc…

We're heading to the Gartner Security & Risk Management Summit, 22–24 September at ExCeL London. Come find us at booth 418! Book a demo ahead of time or just stop by: try.orca.security/gartner_sr…

🚨 CVE-2026-85706 (CVSS 10.0): unauthenticated file read on self-managed GitLab. One HTTP request exposes SSH keys, deploy tokens, and CI/CD secrets. Already on CISA's KEV list. Patch now 👇 orca.security/resources/blog…

Pre-built agent, or build your own? Orca ships both. Threat Investigator for the alerts you see every day. The MCP Server for the ones only your team would know to look for. Same data, different job. orca.security/resources/blog…

Model cards don't stop sandbox escapes. Federal AI strategies this spring covered paperwork. Four months later, an AI agent chained a sandbox escape into a production breach. 3 gaps between AI governance and AI security 👇 orca.security/resources/blog…

A CMDB nobody trusts isn't an inventory. It's a guess. Orca keeps ServiceNow CMDB current automatically: assets, risk scores, and cleanup, all synced from your cloud in real time. orca.security/resources/prod…

New: the Orca Browser Extension is live on the Chrome Web Store. Orca's findings, right inside the AWS console, on the exact resource you're viewing. No new tab. No context switch. How it works: orca.security/resources/blog…

Most security programs still measure success by counting blocked attacks. What matters is how fast you catch an attacker once they're in. Zero breach isn't the goal. Zero impact is. Full recap from Cloud Security LIVE 2026: orca.security/resources/webi…

The ECB just handed banks a deadline: AI cyber action plan due 31 October. The catch: every commitment in that plan depends on an accurate asset inventory. Most banks don't have one. Here's what the letter actually requires → orca.security/resources/blog…