Orca Cloud Security Platform

No trust center linked in FedRAMP's data as of Nov 2, 2026. TrustBox builds and hosts trust centers for FedRAMP providers. Get started

FedRAMP Marketplace listing · Provider website · JSON

Orca Security provides an agentless Cloud Security Platform that discovers all cloud assets, and identifies, prioritizes, and remediates risks and compliance issues across your cloud environments in AWS GovCloud, AWS US East/West and Azure Government. The platform detects cloud risks, including vulnerabilities, malware, misconfigurations, API risks, lateral movement risks, weak and leaked passwords, and overly permissive identities. Orca deploys in minutes, provides visibility into all your assets, and automatically includes new assets as they are added. The Orca Platform helps federal…

Facts

FedRAMP ID: FR2301844932
Status: FedRAMP Authorized
Impact level: Moderate
Authorization path: Agency
Authorized: Feb 10, 2025
Service model: SaaS
Deployment: Government Community Cloud
Assessor: Fortreum, LLC
Initial authorizing agency: United States Forest Service
Small business: Yes

CR26 trust center

Package: FedRAMP Rev5
Trust center: Not listed
Next ongoing report: Not stated
Schema check: Passes FedRAMP's schema

Gaps found

No business category listed CDS-CSO-PUB
No trust center link; CR26 requires one with access instructions CDS-CSO-UTC
No link to secure configuration guidance SCG-CSO-RSC
No next Ongoing Certification Report date CDS-CSO-PUB
No service list; CR26 requires the services in scope CDS-CSO-SVC
No documentation overview (repositories) listed CDS-CSO-PUB

Built on

AWS US East/West Amazon
Azure Government (includes Dynamics 365) Microsoft
Salesforce Government Cloud Plus Salesforce
Slack Slack Technologies

Agencies with an ATO 1

United States Forest Service Initial

Status history

Feb 10, 2025 FedRAMP Certified Rev5
Jan 13, 2024 FedRAMP In Process Rev5
Aug 2, 2023 Agency Authorization In Process Rev5
Oct 17, 2022 FedRAMP Ready Rev5