Orca Security

Orca Security is an agentless cloud security platform that uses its patented SideScanning technology to provide visibility into risks across AWS, Azure, Google Cloud, Oracle Cloud, Kubernetes, and serverless environments, covering CSPM, CWPP, CIEM, DSPM, vulnerability management, malware detection, API security, and AI security in a single platform. Orca exposes a region-aware REST API for assets, alerts, integrations, automations, and user management, plus SCIM 2.0 for identity provisioning and a Terraform provider for infrastructure-as-code workflows.

Orca Security publishes 2 APIs on the APIs.io network. Tagged areas include Agentless, API Security, CIEM, Cloud Security, and CNAPP.

Orca Security’s developer surface includes documentation, engineering blog, and 15 more developer resources.

🌐 Visit website 📡 Source on GitHub

31.7/100 thin ▲ 8.8 Agent 19/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6

AccessFree

2 APIs

AgentlessAPI SecurityCIEMCloud SecurityCNAPPCSPMCWPPDSPMSideScanningVulnerability Management

Kin Score

Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6

Composite quality — 31.7/100 · thin

Contract Quality 10.8 / 25

Developer Ergonomics 2.2 / 20

Commercial Clarity 10.0 / 20

Operational Transparency 2.7 / 13

Governance 0.0 / 12

Discoverability 5.9 / 10

Agent readiness — 19/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 0 / 10

MCP Server 0 / 12

Machine-Readable Auth 0 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/orca-security: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 2

Individual APIs this provider publishes, each with its own machine-readable definition.

Orca Security REST API

Orca Security's REST API provides programmatic access to the Orca Cloud Security Platform for querying cloud inventory and assets, managing alerts and risk findings, configuring...

Orca Security SCIM 2.0 API

SCIM 2.0 endpoint for provisioning and de-provisioning users and groups in Orca Security from identity providers such as Okta, Azure AD, and OneLogin.

GraphQL 1

GraphQL schemas published by this provider.

Rate Limits 1

Documented rate limits and quota policies.

Orca Security Rate Limits

2 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Get Started 1

Portal, sign-up, and the first successful call

Login

Documentation 1

Reference material describing how the API behaves

Documentation

Documentation

Access & Security 3

Authentication, authorization, and security posture

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

DomainSecurity

TrustCenter

TrustCenter

Operate 1

Status, limits, changes, and where to get help

ContactSales

ContactSales

Company 6

The organization behind the API

Website

Blog

Partners

Careers

AboutUs

LinkedIn

Other 5

Properties that don't map to a standard resource type

Platform

Platform

RegionSelection

RegionSelection

TerraformProvider

TerraformProvider

Resources

Resources

Customers

Customers

Source (apis.yml)

aid: orca-security
name: Orca Security
description: Orca Security is an agentless cloud security platform that uses its patented SideScanning technology to provide
  visibility into risks across AWS, Azure, Google Cloud, Oracle Cloud, Kubernetes, and serverless environments, covering CSPM,
  CWPP, CIEM, DSPM, vulnerability management, malware detection, API security, and AI security in a single platform. Orca
  exposes a region-aware REST API for assets, alerts, integrations, automations, and user management, plus SCIM 2.0 for identity
  provisioning and a Terraform provider for infrastructure-as-code workflows.
kind: company
accessModel:
  pricing: free
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Free
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/orca-security.png
tags:
- Agentless
- API Security
- CIEM
- Cloud Security
- CNAPP
- CSPM
- CWPP
- DSPM
- SideScanning
- Vulnerability Management
url: https://raw.githubusercontent.com/api-evangelist/orca-security/refs/heads/main/apis.yml
created: '2026-05-23'
modified: '2026-05-23'
specificationVersion: '0.19'
apis:
- aid: orca-security:orca-security-rest-api
  name: Orca Security REST API
  description: 'Orca Security''s REST API provides programmatic access to the Orca Cloud Security Platform for querying cloud
    inventory and assets, managing alerts and risk findings, configuring integrations and automations, running queries against
    the unified data model, and managing users, groups, and business units. The API is region-specific and uses API tokens
    generated from the Orca console with an "Authorization: Token <value>" header.'
  humanURL: https://docs.orcasecurity.io/
  tags:
  - Alerts
  - Assets
  - Automations
  - Cloud Security
  - Integrations
  - REST API
  properties:
  - type: Documentation
    url: https://docs.orcasecurity.io/
  - type: APIReference
    url: https://app.orcasecurity.io/api-doc
  - type: Authentication
    url: https://docs.orcasecurity.io/docs/orca-api
  - type: TerraformProvider
    url: https://registry.terraform.io/providers/orcasecurity/orcasecurity/latest/docs
  - url: graphql/orca-security-graphql.md
    type: GraphQL
- aid: orca-security:orca-security-scim-api
  name: Orca Security SCIM 2.0 API
  description: SCIM 2.0 endpoint for provisioning and de-provisioning users and groups in Orca Security from identity providers
    such as Okta, Azure AD, and OneLogin.
  humanURL: https://docs.orcasecurity.io/
  tags:
  - Identity
  - Provisioning
  - SCIM
  - User Management
  properties:
  - type: Documentation
    url: https://docs.orcasecurity.io/
common:
- type: VulnerabilityDisclosure
  url: security/orca-security-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/orca-security-domain-security.yml
- type: Website
  url: https://orca.security/
- type: Platform
  url: https://orca.security/platform/
- type: Documentation
  url: https://docs.orcasecurity.io/
- type: Login
  url: https://app.orcasecurity.io/
- type: RegionSelection
  url: https://region-selection.orcasecurity.io/
- type: TerraformProvider
  url: https://registry.terraform.io/providers/orcasecurity/orcasecurity/latest
- type: TrustCenter
  url: https://trust.orca.security/
- type: Blog
  url: https://orca.security/resources/blog/
- type: Resources
  url: https://orca.security/resources/
- type: Customers
  url: https://orca.security/customers/
- type: Partners
  url: https://orca.security/partners/
- type: Careers
  url: https://orca.security/company/careers/
- type: AboutUs
  url: https://orca.security/company/
- type: ContactSales
  url: https://orca.security/contact-us/
- type: LinkedIn
  url: https://www.linkedin.com/company/orca-security/
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com