Companies / Orca Security
Orca provides a cloud and AI security platform that discovers risks across code, cloud, runtime, and AI systems. It serves companies building with AI and security-driven enterprises.
Summarized from its homepage on 3 Nov 2026.
16-19 Eastcastle St, London, United Kingdom, W1W 8DY, GB+19713425080
Vendors of Orca Security and the evidence for each
CloudflareCloud and infrastructureLikely
Google Tag ManagerAnalyticsLikely
script: = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBe10 Nov 2026Source
Google WorkspaceProductivityLikely
MarketoCRM and salesLikely
script: true; s.src = '//munchkin.marketo.net/munchkin.js'; s.onreadystatechange =10 Nov 2026Source
OneTrustSecurity and identityLikely
WordPressWebsites and CMSLikely
script: ttps://orca.security/wp-content/plugins/weglot/dist/front-js.js?ver=6.4.310 Nov 2026SourceNo public list found
We did not find a public subprocessor list. The company may still publish one, or share it privately.
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| SOC 2 Type IICompany's statement | “PCI SAQ-D SOC 2 TYPE II Certified”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 10 Nov 2026Source |
We last read its homepage on 10 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Orca Security lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Orca Security's full stack
Every vendor with its source and date, and an alert when Orca Security adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call