Orca Security
Security and trust center evidence
Orca is a next-generation, comprehensive solution for providing full-stack, context-aware visibility for cloud
Summary
Orca Security has 2 registry-verified rows in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 26 Sep 2026, Orca Security is listed in the FedRAMP Marketplace as FedRAMP Authorized. As of 26 Sep 2026, the FedRAMP listing for Orca Security shows an authorization date of 10 Feb 2025 with Fortreum, LLC as the assessor. As of 17 Sep 2026, Orca Security is listed in the CSA STAR Registry with a Level 1 self-assessment (CAIQ) dated 29 May 2023. As of 17 Sep 2026, no public evidence found for SOC 2 or ISO/IEC 27001 for Orca Security. As of 17 Sep 2026, no public evidence found for HIPAA for Orca Security, so no BAA is confirmed.
- Listed in FedRAMP Marketplace as FedRAMP Authorized since 10 Feb 2025, assessor Fortreum, LLC (as of 26 Sep 2026)
- Listed in CSA STAR Registry, Level 1 self-assessment (CAIQ) dated 29 May 2023 (as of 17 Sep 2026)
- No public evidence found for SOC 2, ISO/IEC 27001, or HIPAA (as of 17 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 27 Sep 2026; it is regenerated whenever a row changes.
Among security vendors
2verified rows
Category median 1, across 172 indexed security vendors. Orca Security has more verified rows than 76 percent of them.
cloud securitycloud workload protectioncspmvulnerability management
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Security category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
JupiterOne
Security
JupiterOne is a cyber asset analysis platform every modern security team needs to collect and transform asset data into actionable insights
Lacework
Security
Lacework is the data-driven cloud security company delivering end-to-end visibility and automated insight into risk across multicloud
Wiz
Security
Wiz is on a mission to transform cloud security for customers – which include 40% of the Fortune 100 – by empowering them to embrace a new
Sysdig
Security
From runtime to development, gain real-time visibility into your cloud with
Evidence against regulations
All regulations for Orca SecurityHow much of each regulation’s vendor requirements Orca Security’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read