CISO Tribune

Vendor comparison · 2 companies

Orca Security vs Palo Alto Networks

The Orca Cloud Security Platform discovers risks across code, cloud, runtime, and AI. Palo Alto Networks sells network security, security operations, cloud security, identity security, AI security and observability platforms, along with threat intelligence and incident response services. CISO Tribune files both under Cloud-native application protection (CNAPP). This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Orca Security
  • Palo Alto Networks
Orca Security vs Palo Alto Networks: Products, Customers and Funding Compared
Orca SecurityThe Orca Cloud Security Platform discovers risks across code, cloud, runtime, and AI.orca.securityPalo Alto NetworksPalo Alto Networks sells network security, security operations, cloud security, identity security, AI security and observability platforms, along with threat intelligence and incident response services.paloaltonetworks.com
What it sells
  • Orca Sensor[4][13]Provides runtime visibility and protection that extends the capabilities of the Orca Cloud Security Platform.
  • API Security[12][14]Identifies, prioritizes, and addresses API misconfigurations and security risks across a cloud estate, without agents or network changes.
  • AI AppGen Security[10]Provides posture management for applications built on AI app generator platforms like Replit, Lovable, Vercel, and Bolt.
  • Strata[1][12][21]A network security platform built for Zero Trust and powered by AI.
  • Next-Generation Firewalls[20]Physical appliances and virtualized firewalls that can be managed with Panorama.
  • Cortex XSIAM[22]A security operations platform used by Abraxas.
  • Cortex XCOR[12]An AI-driven platform for observability.
  • Cortex Cloud[1][23]A cloud security product that unifies posture, runtime and investigation workflows.
  • Idira[1][11][12][25]An identity security product for human, machine and agentic identities.
  • Prisma AIRS[26][27]An AI security platform for enterprise AI applications and LLM deployments.
  • Prisma AIRS AI Gateway[27]A product that brings AI governance, identity and runtime controls together.
Categories
Headquarters
Not stated on its pagesSanta Clara, United States[24]
Founded
Not stated on its pages2005[4][24]
Ownership and funding
Not stated on its pagesPublic (NASDAQ: PANW)[2][9][13][15][18][19][21][22][30][32][33]
Named customers
Not stated on its pages
  • Village Roadshow[5]
  • Banco Inter[6]
  • State of Louisiana[7]
  • Boyne Resorts[8]
Recent news
  • September 16, 2026Orca Security announced a new global Partner POD Program and an AI-powered Partner Success Platform for its partners.[17]
  • May 12, 2026Orca Security announced it was included in Rising in Cyber 2026, an annual list from Notable Capital covering 30 private cybersecurity startups.[6]
  • April 13, 2026Orca Security announced a strategic distribution agreement with TD SYNNEX covering North America.[5]
  • September 22, 2026Palo Alto Networks announced a new service that lets enterprises continuously find and fix exposures before attackers weaponize them.[17]
  • September 1, 2026Palo Alto Networks acquired Console, an AI-native platform that adds agentic capabilities to security operations workflows.[9]
  • September 1, 2026Palo Alto Networks reported fiscal fourth-quarter 2026 revenue of $3.41 billion, up 34% year over year.[10]
  • May 29, 2026Palo Alto Networks announced it has closed its acquisition of Portkey, a company focused on AI Gateways.[30]
  • May 12, 2026Palo Alto Networks launched Idira, an identity security platform for discovering, controlling and governing human, machine and agentic identities.[11]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[7]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen November 4, 2026[19]
Who it fits
Not written yetFrom its own pages, Palo Alto Networks sells network security for branch offices, data centers, public cloud environments and mobile networks. Its customer stories name a tire manufacturer headquartered in India and a provider of IT solutions for the public sector in Switzerland. That provider has state and local government organisations under management. Its pages describe operational technology security for networks that manage physical hardware across manufacturing plants and water utilities, and cover healthcare delivery organizations such as hospitals and clinics.
Last verified
September 27, 2026October 10, 2026

Where they overlap

  • Orca Security and Palo Alto Networks are both filed under Cloud-native application protection (CNAPP).

Where they differ, field by field

  • Orca Security's primary category is Cloud-native application protection (CNAPP); Palo Alto Networks's is Firewalls and NGFW.
  • Orca Security is also filed under Cloud workload protection and Cloud detection and response. Palo Alto Networks is also filed under EDR and XDR and Privileged access management.
  • Orca Security lists Orca Sensor, API Security and AI AppGen Security. Palo Alto Networks lists Strata, Next-Generation Firewalls, Cortex XSIAM, Cortex XCOR, Cortex Cloud and 3 more.
  • Palo Alto Networks is headquartered in Santa Clara, United States.
  • Palo Alto Networks was founded in 2005.
  • Palo Alto Networks is a public company listed on NASDAQ as PANW.
  • Palo Alto Networks publicly names Village Roadshow, Banco Inter, State of Louisiana and Boyne Resorts.

What it sells: Orca Security

What Orca Sensor does[4][13]
Orca Sensor monitors runtime activity across public cloud, private cloud, and on-premises environments. Orca Sensor uses eBPF-based technology to deliver runtime visibility and protection. Orca Sensor identifies whether a vulnerable package is actually being executed.
What API Security does[12][14]
Orca provides security teams with a full inventory of APIs and related web domains in their cloud estate, and API-related security and compliance risks, without agents. Orca continuously monitors API behavior and usage and alerts teams to potentially unwanted API drift. Orca scans a cloud estate and surfaces potentially hazardous API security risks, providing actionable data and remediation suggestions.
What AI AppGen Security does[10]
AI AppGen Security continuously discovers apps built on those platforms and identifies the misconfigurations they ship with by default. AI AppGen Security connects each finding to the surrounding cloud environment.

What it sells: Palo Alto Networks

What Strata does[1][12][21]
Palo Alto Networks says the Strata Network Security Platform is built for Zero Trust and powered by AI. Palo Alto Networks says Strata proactively monitors, analyzes and prevents sophisticated threats in real time.
What Next-Generation Firewalls does[20]
Palo Alto Networks offers next-generation firewalls as physical appliances and virtualized firewalls. They can be managed individually or centrally using Panorama, and Strata Cloud Manager supports them. Palo Alto Networks says its NGFW uses App-ID technology to classify applications across all ports.
What Cortex XSIAM does[22]
Abraxas says Cortex XSIAM unites SIEM and EDR in one integrated solution. Cortex XSIAM provides SecOps across 3,000 clients and in-house Abraxas devices.
What Prisma AIRS does[26][27]
Prisma AIRS is an AI security platform designed to secure the entire enterprise AI ecosystem and to protect AI applications and LLM deployments. Prisma AIRS offers deployment modes such as Network Intercept and API Intercept.
What Prisma AIRS AI Gateway does[27]
Prisma AIRS AI Gateway brings AI governance, identity and runtime controls together in one place. Prisma AIRS AI Gateway intercepts and optimizes agentic traffic while inspecting and securing communications to protect agents from attacks.

Questions about Orca Security and Palo Alto Networks

What do Orca Security and Palo Alto Networks sell?
Orca Security sells Orca Sensor, API Security and AI AppGen Security. Palo Alto Networks sells Strata, Next-Generation Firewalls, Cortex XSIAM, Cortex XCOR, Cortex Cloud and 3 more.
Are Orca Security and Palo Alto Networks in the same category?
They share Cloud-native application protection (CNAPP). Orca Security's primary category is Cloud-native application protection (CNAPP) and Palo Alto Networks's is Firewalls and NGFW.
Where are Orca Security and Palo Alto Networks headquartered?
Palo Alto Networks is headquartered in Santa Clara, United States.
When were Orca Security and Palo Alto Networks founded?
Palo Alto Networks was founded in 2005.
Who owns Orca Security and Palo Alto Networks?
Palo Alto Networks is a public company listed on NASDAQ as PANW.
Which customers do Orca Security and Palo Alto Networks name?
Palo Alto Networks publicly names Village Roadshow, Banco Inter, State of Louisiana and Boyne Resorts.
Who are Orca Security and Palo Alto Networks sold to?
From its own pages, Palo Alto Networks sells network security for branch offices, data centers, public cloud environments and mobile networks.
What have Orca Security and Palo Alto Networks announced recently?
September 16, 2026: Orca Security announced a new global Partner POD Program and an AI-powered Partner Success Platform for its partners. September 22, 2026: Palo Alto Networks announced a new service that lets enterprises continuously find and fix exposures before attackers weaponize them.

About Orca Security

The Orca Cloud Security Platform discovers risks across code, cloud, runtime, and AI. The platform unifies cloud posture, identity permissions, workload security, sensitive data at risk, and runtime threats into one connected view. Orca applies a risk score to each alert, considering severity, accessibility, exploitability, and business impact. Orca evaluates and prioritizes the paths to crown jewels, combining misconfigurations, identity risks, lateral movement and more.[4]

Orca Security offers a product area for knowing cloud exposure and proving to the board that risk is under control. Orca Security offers a product area for governing every AI system in the cloud. Orca finds every AI model, package, and agent running across a cloud, including shadow AI. AI AppGen Security is posture management for applications built on AI app generator platforms like Replit, Lovable, Vercel, and Bolt. AI AppGen Security continuously discovers apps built on those platforms, identifies the misconfigurations they ship with by default, and connects each finding to the surrounding cloud environment. AI AppGen Security is a capability within Orca's existing AI Security, not a standalone tool. Orca AI includes Core Agents, a natural-language AI Assistant, and an MCP Server, all grounded in Orca's Unified Data Model.[4][8][10][11]

Orca scans code, dependencies, IaC, images, and secrets agentlessly and prioritizes each finding by what is reachable and exposed in the running cloud. Orca scores every code vulnerability against live cloud context: reachability, internet exposure, identity permissions, and proximity to sensitive data. Orca generates SBOMs and flags vulnerable and license-risky open-source packages before they ship. Orca pushes findings and context straight into the IDE, repos, and ticketing tools that developers use. For high-impact issues, Orca drafts AI-generated fixes and opens pull requests. Orca's AppSec Triage Agent uses code context to automatically deprioritize false positives and escalate true positives.[12]

Orca Security offers a product area for hardening every cloud workload without slowing pipelines down. SideScanning™ technology covers VMs, containers, and serverless, and cloud infrastructure resources such as storage buckets, VPCs, and KMS keys. Orca Security offers a product area for catching cloud and AI attacks as they unfold and containing the blast radius. Orca Sensor provides runtime visibility and protection that extends the capabilities of the Orca Cloud Security Platform. Orca Sensor monitors runtime activity across public cloud, private cloud, and on-premises environments. Orca Sensor secures workloads across Linux, Kubernetes, and Windows environments, including servers and workstations. Orca Sensor uses eBPF-based technology to deliver runtime visibility and protection. Orca Sensor includes a library of runtime detections that alert on active threats and can be configured to terminate processes. Orca Sensor identifies whether a vulnerable package is actually being executed. Orca monitors AI workloads at runtime, detecting model exfiltration attempts, prompt injection patterns, unusual inference traffic, and configuration drift.[1][4][8]

Orca offers API Security to identify, prioritize, and address API misconfigurations and security risks across a cloud estate, without agents or network changes. Orca provides security teams with a full inventory of APIs and related web domains in their cloud estate, and API-related security and compliance risks, without agents. Orca continuously monitors API behavior and usage and alerts teams to potentially unwanted API drift. Orca scans a cloud estate and surfaces potentially hazardous API security risks, providing actionable data and remediation suggestions. Orca provides linked alerts for adhering to compliance frameworks like PCI-DSS.[12][14]

Orca states that, since Orca is agentless-first, scanning can start as soon as cloud provider accounts are connected, without the need to install agents. Orca offers three deployment options: a SaaS platform, hosting in the customer's own boundary, and running from government cloud such as FedRAMP. Orca connects to Slack for alerting, Jira for ticketing, and SIEM platforms for streaming data.[8]

Orca Security is FedRAMP® Moderate and GovRAMP® authorized and TX-RAMP certified. The Orca Platform is FedRAMP Moderate and StateRAMP authorized and holds SOC 2 TYPE II, ISO/EC 27001, ISO/EC 27017, and ISO/EC 27018 certifications. Orca supports 150+ compliance frameworks and CIS benchmarks, including NIST SP 800-53, NIST CSF, DISA STIG, and ISO 27001. Access to the Orca Platform can be procured from partners including Carahsoft, SAIC, GuidePoint Security, Lumen technologies, Braxton Grant technologies, and Optiv+Clearshark. Orca Security is available on the GSA Multiple Schedule through its partner Guidepoint Federal. Orca has full-time dedicated technical support staff based in the US. Orca Security's customers range from Fortune 500 enterprises to cloud-native disruptors. Orca Security supports customers in the Americas, Asia Pacific, and Europe. Orca Security brought its platform to market in 2019. Orca Security has raised nearly $630 million in combined funds at a $1.8 billion valuation. Orca Security's investors include Capital G, ICONIQ, GGV, and SVCI.[2][3][4][8][15][16]

Orca Security on the record

Sources

Orca Security full record

  1. [1]orca.securityOrca Security · orca.security · undated page, accessed September 27, 2026 · Tier A
  2. [2]PlatformOrca Security · orca.security · undated page, accessed September 27, 2026 · Tier A
  3. [3]Orca Security Report 99.9 of Fixable AI Vulnerabilities Remain Unpatched as AI Moves Into ProductionOrca Security via Business Wire · businesswire.com · published July 9, 2026 · Tier A
  4. [4]Orca Security | AI-Powered Cloud Security Platform & CNAPPOrca Security · undated page, accessed October 27, 2026 · Tier A
  5. [5]Orca Security Accelerates AI-Driven Cloud Security Growth with TD SYNNEX PartnershipBusiness Wire · published April 13, 2026 · Tier A
  6. [6]Orca Security Named to Rising in Cyber 2026 for Third Consecutive YearBusiness Wire · published May 12, 2026 · Tier A
  7. [7]Orca Security Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 27, 2026 · Tier C
  8. [8]Trusted Cloud Security Platform | Orca SecurityOrca Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Government Cloud Security | Orca SecurityOrca Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]AI AppGen Security: Uncover Shadow App Builders | Orca SecurityOrca Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Orca AI Overview: AI Agents, MCP Server & Assistant | Orca SecurityOrca Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Code Securely with Orca SecurityOrca Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Runtime Visibility and Protection for Cloud and AI | Orca SecurityOrca Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]API Security Company and Services | Orca SecurityOrca Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]About Us - Cloud Security Innovation | Orca SecurityOrca Security · undated page, accessed November 10, 2026 · Tier A
  16. [16]Sales Engineer | Orca SecurityOrca Security · undated page, accessed November 10, 2026 · Tier A
  17. [17]Orca Launches AI-Powered Partner Success PlatformOrca Security · published September 16, 2026 · Tier A

Palo Alto Networks full record

  1. [1]paloaltonetworks.comPalo Alto Networks · paloaltonetworks.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Palo alto networks to announce fiscal second quarter 2026 financial results on tuesday february 17 2026Palo Alto Networks · paloaltonetworks.com · published February 3, 2026 · Tier A
  3. [3]Panw 20250731Palo Alto Networks via SEC EDGAR · sec.gov · published July 31, 2025 · Tier A
  4. [4]Palo alto networks global identity operations faqPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  5. [5]Village roadshow fortifies entertainment empire with ai powered cybersecurityPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  6. [6]Banco inter resolves cases faster with cortex xsiamPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  7. [7]Louisiana scales security using ai driven cortex xsiamPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  8. [8]Boyne resorts achieves game changing soc improvements with cortex xsiam and unit 42 mdrPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  9. [9]Palo alto networks acquires console to agentify securityPalo Alto Networks · paloaltonetworks.com · published September 1, 2026 · Tier A
  10. [10]Palo alto networks reports fiscal fourth quarter and fiscal year 2026 financial resultsPalo Alto Networks · paloaltonetworks.com · published September 1, 2026 · Tier A
  11. [11]Palo alto networks introduces idira the next generation identity security platform built for the ai enterprisePalo Alto Networks · paloaltonetworks.com · published May 12, 2026 · Tier A
  12. [12]Leader in Cybersecurity Protection & Software for the Modern Enterprises - Palo Alto NetworksPalo Alto Networks · undated page, accessed October 27, 2026 · Tier A
  13. [13]Advanced Threat Prevention - Palo Alto NetworksPalo Alto Networks · undated page, accessed October 27, 2026 · Tier A
  14. [14]Legitimate SaaS Platforms Being Used to Host Phishing AttacksPalo Alto Networks · undated page, accessed October 27, 2026 · Tier A
  15. [15]Palo Alto Networks Completes Chronosphere Acquisition, Unifying Observability and Security for the AI EraPalo Alto Networks · published January 29, 2026 · Tier A
  16. [16]Palo Alto Networks to Acquire Portkey to Secure the Rise of AI AgentsPalo Alto Networks · published April 30, 2026 · Tier A
  17. [17]Palo Alto Networks Delivers Anthropic's Mythos and OpenAI's GPT-5.6 to Customers with Unit 42 Continuous Frontier AI DefensePalo Alto Networks · published September 22, 2026 · Tier A
  18. [18]Palo Alto Networks Next-Generation Firewalls Reviews & Product DetailsG2 · undated page, accessed October 27, 2026 · Tier C
  19. [19]Palo Alto Networks Reviews, Ratings & Features 2026 - GartnerGartner Peer Insights · undated page, accessed October 27, 2026 · Tier C
  20. [20]Next-Generation Firewalls - Product Selection - Palo Alto NetworksPalo Alto Networks · undated page, accessed November 4, 2026 · Tier A
  21. [21]Next-Generation Firewalls - Palo Alto NetworksPalo Alto Networks · undated page, accessed November 4, 2026 · Tier A
  22. [22]Abraxas unlocks agile, AI-powered SecOps across the Swiss public sector using Cortex XSIAM - Palo Alto NetworksPalo Alto Networks · undated page, accessed November 4, 2026 · Tier A
  23. [23]Navigate the Cortex Cloud Runtime Security docs | Cortex Documentation PortalPalo Alto Networks · undated page, accessed November 4, 2026 · Tier A
  24. [24]Apollo Tyres unifies security and slashes MTTR with Palo Alto Networks - Palo Alto NetworksPalo Alto Networks · undated page, accessed November 4, 2026 · Tier A
  25. [25]Authorized Training Partners - Palo Alto NetworksPalo Alto Networks · undated page, accessed November 4, 2026 · Tier A
  26. [26]Prisma AIRS - Palo Alto NetworksPalo Alto Networks · undated page, accessed November 4, 2026 · Tier A
  27. [27]The AI Control Plane for the Enterprise - Palo Alto NetworksPalo Alto Networks · undated page, accessed November 4, 2026 · Tier A
  28. [28]What Is Healthcare Cybersecurity? - Palo Alto NetworksPalo Alto Networks · undated page, accessed November 4, 2026 · Tier A
  29. [29]What Is OT Security? Definition, Architecture & Guide - Palo Alto NetworksPalo Alto Networks · undated page, accessed November 4, 2026 · Tier A
  30. [30]Palo Alto Networks Completes Acquisition of Portkey to Secure AI AgentsPalo Alto Networks · published May 29, 2026 · Tier A
  31. [31]Palo Alto Networks Announces Intent to Acquire Koi to Secure the Agentic EndpointPalo Alto Networks · published February 17, 2026 · Tier A
  32. [32]Palo Alto Networks Completes Acquisition of CyberArk to Secure the AI EraPalo Alto Networks · published February 11, 2026 · Tier A
  33. [33]Palo Alto Networks Completes Acquisition of Koi to Secure the Agentic EndpointPalo Alto Networks · published April 14, 2026 · Tier A

Spot a factual error? Request a correction.