Orca Security scored a $55 million Series B financing round, which brings the startup’s overall funding to more than $82 million in its fight against cloud security heavyweights including Palo Alto Networks.
ICONIQ Capital led the round with participation from existing YL Ventures, GGV Capital, and SVCI, a group of more than 50 CISOs that act as angel investors in security startups.
CEO Avi Shua said Orca will use the new investment to further accelerate its product development and support growing demand for its cloud security platform. Shua co-founded Orca, and he’s the former chief technologist at Check Point.
Orca Cloud Security PlatformOrca essentially combines cloud security posture management (CSPM) and cloud workload protection platform capabilities into one platform. It provides agentless workload security and compliance across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP).
“And we are always adding more to become more comprehensive, whether it’s on the product side to add more capabilities around identity and access management, serverless functionality, Kubernetes, etc.,” Shua said, noting that the company’s been on a growth spurt since announcing its Series A funding seven months ago.
“At the same time, we’re expanding the go-to-market efforts,” he said. “We grew the team in the U.S. by tenfold, from two people to 20, and we’re opening sales offices in other locations such as Australia, and we are considering Japan and Europe.”
Shua won’t comment on the company’s valuation, but he said Orca grew its revenue more than 10 times since its Series A, “and 2020 is not over yet.”
The company competes against CSPM tools like Palo Alto Networks’ Prisma and agent-based vulnerability management tools from Qualys, Tenable, Rapid7, and Trend Micro.
“Our customers are using us to replace a large set of functionalities that they use for detecting misconfiguration in the cloud, workload protection, doing things like vulnerability management, and malware scanning, integrity monitoring, looking for identity and access management risks, looking for customer data, which is not protected,” Shua said. “This emphasizes the comprehensiveness of our solution, with out goal to become the only solution you need to answer the question: what are the risks in my public cloud environment?”
Orca Vs. Palo Alto NetworksShua said Palo Alto Networks is one of the security vendors that Orca’s platform replaces in customers’ environment. As a sign of success against the larger security vendor, he pointed to Palo Alto Networks using legal threats and demanding Orca take down a product comparison with Prisma as part of Orca’s Cloud Security Punch Out series.
“So Palo Alto Networks is definitely one of the top vendors, and customer that look at the vulnerability management area usually come to Orca after looking at Qualys, Tenable, Rapid7. And others who are looking more on the CSPM side might be looking at [Check Point’s] Dome9.”
Looking ahead to 2021, Orca’s top priority is growth, Shua said. “There was a time in August where we simply couldn’t support the demand,” he said. “Prospective customers wanted to talk to us, and they had to wait three weeks before they could speak to a person because Orca only had two salespeople. So the go to market is growing, and also gaining a markedly larger share of the market is a top priority.”
Additionally, Orca is working with some of its larger customers to add customized capabilities on top of its platform. “Some of our more mature customers want not only their Orca-build library of alerts, but they want to create their own custom alerting capabilities,” Shua said.
Comments