{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"orca-security","name":"Orca Security","domain":"orcasecurity-gov.io","category":"DevOps and observability","one_liner":"Orca is a next-generation, comprehensive solution for providing full-stack, context-aware visibility for cloud","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/orca-security/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 18 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2025-02-10","expires_at":null,"period_start":null,"period_end":null,"auditor":"Fortreum, LLC","impact_level":"Moderate","as_of":"2026-09-18","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/orca-security/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2301844932","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Orca Security - Orca Cloud Security Platform: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2301844932","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Orca Security - Orca Cloud Security Platform: FedRAMP Authorized","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2023-05-29","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/orca-security/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/orca-security","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"orca security: STAR Level 1 self-assessment (CAIQ)","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Orca Security is listed in the FedRAMP registry as FedRAMP Authorized, with the authorization issued on 10 Feb 2025 and audited by Fortreum, LLC. As of 17 Sep 2026, Orca Security is listed in the CSA STAR registry at STAR Level 1 self-assessment (CAIQ), issued 29 May 2023. No public evidence found for SOC 2 as of 17 Sep 2026. No public evidence found for HIPAA as of 17 Sep 2026. No public evidence found regarding subprocessors as of 17 Sep 2026, as the supplied evidence lists a count of 0.","bullets":["FedRAMP: listed in FedRAMP registry as FedRAMP Authorized, issued 10 Feb 2025, auditor Fortreum, LLC (as of 17 Sep 2026)","CSA STAR: listed in CSA STAR registry at STAR Level 1 self-assessment (CAIQ), issued 29 May 2023 (as of 17 Sep 2026)","SOC 2 and HIPAA: no public evidence found (as of 17 Sep 2026)"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:51:45.130933+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T03:30:43.359Z"}