Orca Security is a privately owned company headquartered in the US, founded in 2019 and employing approximately 480 individuals. Its main product is in computer and network security. The company provides a platform that identifies, prioritizes, and remediates security risks and compliance issues across cloud estates spanning AWS, Azure, Google Cloud, and Kubernetes.
On February 5, 2026, Orca Security reported that the automatic execution of VS Code-integrated configuration files when opening a repository or pull request in GitHub Codespaces could lead to supply chain attacks. The firm also uncovered attack vectors that enable remote code execution (RCE) through opening malicious repositories or pull requests, allowing for code execution, credential theft, and access to sensitive resources without explicit user approval. This follows Orca Research Pod's earlier disclosure on February 4, 2026, of these multiple attack vectors in GitHub Codespaces, which detailed how abusing VS Code-integrated configuration files could enable adversaries to execute arbitrary commands, exfiltrate GitHub tokens and secrets, and access premium Copilot models. Previously, on February 3, 2026, Orca integrated with Tencent Cloud, becoming the first third-party Cloud Native Application Protection Platform (CNAPP) to support agentless security assessments for Tencent Cloud workloads, enabling customers to identify, prioritize, and remediate risks across their environments.
Similar Companies
Subscribe for full access to Orca Security's profile
Orca Security offers products in the telecoms tech industry. Orca Security's product portfolio comprises of enterprise security.
Subscribe for full access to Orca Security's products in full detail
Subscribe for full access to Orca Security's revenue in full detail
Subscribe for full access to Orca Security's products in full detail 
