Orca Security, a startup founded last year by Check Point executives, scored a $20 million Series A funding round to expand the reach of its multicloud visibility software.

The security startup essentially combines cloud security posture management (CSPM) and cloud workload protection platform (CWPP) capabilities into one platform. It competes against CSPMs, which are hot acquisition targets these days, and agent-based vulnerability management tools from Qualys, Tenable, Rapid7, and Trend Micro.

Avi Shua, CEO and co-founder of Orca Security and former chief technologist at Check Point, says Orca’s two dozen paying customers include Fortune 100 and Fortune 500 companies such as a top 10 global consultancy, a top five private equity firm, and a big four professional sports league. Others include translation and artificial intelligence (AI) data services firm Lionbridge, cloud services companies including Qubole and People.ai, and financial tech organizations Rapyd and Paidy.

The company began selling its cloud security platform last August. The product supports Amazon Web Services (AWS), Microsoft Azure, and Google Cloud.

In building its platform, Orca set out to provide deep visibility and analysis across multicloud environments but without complexity and a lengthy time to deploy.

“The most important thing you want to make sure that you detect the important issues, but not less important to do it without organizational friction,” Shua said. This means that if a vendor’s security product requires the customer to install agents on every server and cloud workload, “it’s simply not going to happen,” he added. “I’ve been in this industry for 20 years and there are so many breaches that happen simply because the tools were not applied.”

Additionally, Orca wanted its platform to show risk to a customer’s specific environment. “You don’t want just a list of tens of thousands of alerts,” Shua said. “And there was absolutely nothing that could do this. You had to choose between a solution that is very easy to integrate but provides a very partial view, and a solution that provides a deeper view but requires deploying agents, which simply doesn’t work. We decided to find a way to do that, and this is what we built.”

Orca built its software-as-a-service platform on proprietary SideScanning technology, which is based on reading the workloads’ run time block storage out of band and cross-referencing this with cloud context pulled directly from the cloud vendors’ APIs. It treats a customer’s cloud resources as an interconnected web of assets and prioritizes risk based on environmental context along with a path to remediation. The agentless product can find vulnerabilities, malware, misconfigurations, leaked and weak passwords, lateral movement risk, and high-risk data within minutes, the company claims.

One of Orca’s Fortune 500 customers compared the startup’s technology with a leading vulnerability management company — Shua declined to say which one. The Fortune 500 customer said Orca saved them massive amounts of time and headache, Shua added. While the competitor’s product would have required the company to coordinate with 200 people across multiple departments to schedule downtime to deploy and test agents, “with us, he deployed in three days including the testing.”

With the Series A round, in addition to $6.5 million in seed funding, Orca plans to double its team and total business by the end of 2020 and hire additional employees for its U.S. and Israel offices.

The startup will also add more security capabilities to its platform, Shua said. Orca wants to be a “one-stop shop for your cloud security environments delivered in an agentless method.”

GGV Capital led the latest funding, which also included participation from YL Ventures, a global VC firm exclusively focused on seed-stage Israeli cybersecurity investments, and Silicon Valley CISO Investments (SVCI), a new angel syndicate of more than 40 prominent CISOs that pool their own funds to invest in security companies. “What I like most about Orca Security is that you get very deep results with only a small investment in time,” said Akamai CISO Andy Ellis. “You get value on day one.”