{"id":"FR2301844932","name":"Orca Cloud Security Platform","provider":"Orca Security","providerSlug":"orca-security","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2025-02-10","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":[""],"assessor":"Fortreum, LLC","assessorId":"201664","smallBusiness":true,"website":"https://app.orcasecurity-gov.io","description":"Orca Security provides an agentless Cloud Security Platform that discovers all cloud assets, and identifies, prioritizes, and remediates risks and compliance issues across your cloud environments in AWS GovCloud, AWS US East/West and Azure Government. The platform detects cloud risks, including vulnerabilities, malware, misconfigurations, API risks, lateral movement risks, weak and leaked passwords, and overly permissive identities. Orca deploys in minutes, provides visibility into all your assets, and automatically includes new assets as they are added. The Orca Platform helps federal agencies and contractors achieve regulatory compliance with over 65 out-of-the-box frameworks, CIS Benchmarks, and custom compliance checks. Leveraging a Unified Data Model, Orca performs contextual analysis of all the risks in your cloud estate, uncovering potential attack paths (with references to the MITRE ATT&CK framework), enabling rapid identification of which risks present the highest danger to mission data and security objectives.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Orca%20Logo.png","inMarketplace":true,"agencies":["22-034-02"],"reuseCount":0,"leverages":["AGENCYAMAZONEW","F1603087869","FR2003061248","FR1823447014"],"leveragedBy":[],"timeline":[{"date":"2022-10-17","to":"FedRAMP Ready","certType":"Rev5"},{"date":"2023-08-02","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2024-01-13","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2025-02-10","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Fortreum, LLC"},"sponsor":"22-034-02","trustCenterCheck":null}