“While other cloud security players with a similar legacy in CSPM are moving into cloud detection, response, and runtime agents (e.g. Wiz’s acquisition of Gem Security), with this move, Orca is expanding its capabilities to situational only, and is relying more heavily on side-scanning technology to increase its breadth across the software supply chain,” said Tweedy Yates.
Additionally, Orca said it is implementing a remediation and workload integration process that will enable it to provide comprehensive remediation instructions for each alert, speeding up response time for security and development teams.
“It may seem that in the context of the recent partnership announcement with Aqua Security, with its mature runtime capabilities, Orca is making a situationally focused bet versus real-time scanning or responding,” Tweedy-Yates added.