# Orca Security

**Canonical:** https://apis.io/providers/orca-security/  
**Website:** https://orca.security/  
**APIs profiled:** 2

Orca Security is an agentless cloud security platform that uses its patented SideScanning technology to provide visibility into risks across AWS, Azure, Google Cloud, Oracle Cloud, Kubernetes, and serverless environments, covering CSPM, CWPP, CIEM, DSPM, vulnerability management, malware detection, API security, and AI security in a single platform. Orca exposes a region-aware REST API for assets, alerts, integrations, automations, and user management, plus SCIM 2.0 for identity provisioning and a Terraform provider for infrastructure-as-code workflows.

## Kin Score — 26.8 / 100 (thin)

Scored 2026-08-21 under rubric 0.12.0. Trend: flat (+0.0 from 26.8).

| Facet | Score |
|---|---|
| Discoverability | 59.3 |
| Contract Quality | 38.9 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 21.1 |
| Developer Ergonomics | 2.4 |
| Commercial Clarity | 39.5 |
| Access Clarity | 39.5 |

## Agent readiness — 18.4 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Free — onboarding: unknown, pricing: free, trial: no (confidence: medium).

## APIs (2)

- **Orca Security REST API** — Orca Security's REST API provides programmatic access to the Orca Cloud Security Platform for querying cloud inventory and assets, managing alerts and risk findings, configuring...
- **Orca Security SCIM 2.0 API** — SCIM 2.0 endpoint for provisioning and de-provisioning users and groups in Orca Security from identity providers such as Okta, Azure AD, and OneLogin.

## Security (2)

- **Orca Security Domain Security** — TLSv1.3 · HSTS · DMARC
- **Orca Security Vulnerability Disclosure** — security.txt · contact published

## Plans (1)

- **Orca Security Plans Pricing**

## Tags

Agentless, API Security, CIEM, Cloud Security, CNAPP, CSPM, CWPP, DSPM, SideScanning, Vulnerability Management

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/orca-security/). Scores are computed from the provider's own public artifacts under a published rubric.