The Leader in Cloud Security Research

Our expert security research team discovers and analyzes cloud risks and vulnerabilities to strengthen the Orca platform and promote cloud security best practices. The Orca Research Pod has discovered 15+ major vulnerabilities on public cloud platforms which were subsequently fixed, and continually analyzes the security of public cloud assets being scanned by the Orca platform, and observes attacker tactics and techniques in the wild.
2023 Honeypotting in the Cloud Report
Get the Report

In The News

Top 5 cloud security risks and best countermeasures

May 19, 2023

Azure admins warned to disable shared key access as backdoor attack detailed

Apr 11, 2023

Microsoft Patches ‘Dangerous’ RCE Flaw in Azure Cloud Service

Mar 30, 2023

Featured Research

Bad.Build: A Critical Privilege Escalation Design Flaw in Google Cloud Build Enables a Supply Chain Attack

Jul 18, 2023

Two XSS Vulnerabilities in Azure with Embedded postMessage IFrames

Jun 14, 2023

The Top 5 Cloud Security Risks of 2023 (so far)

May 18, 2023

Categories

Discovered Vulnerabilities

20 Posts

Critical cloud infrastructure vulnerabilities discovered by the Orca Research Pod.

‘Orca Watch’ Series

16 Posts

Blog series that discusses trends and new risks as seen on the Orca platform.

Technical Deep Dives

15 Posts

In-depth, technical articles on cloud security and recommended best practices.

Latest from the Orca Research Pod

Discovered Vulnerabilities

Azure HDInsight Riddled With XSS Vulnerabilities via Apache Services

Sep 13, 2023

Research

Beware the Azure Guest User: How to Detect When a Guest User Account Is Being Exploited

Aug 28, 2023

Research

Using AI to Detect Cloud Anomalies: A Supply Chain Attack Example

Jul 18, 2023

‘Orca Watch’ Series

2023 Honeypotting in the Cloud Report: Attackers Discover and Weaponize Exposed Cloud Assets and Secrets in Minutes

Jun 20, 2023

Research

Dependency Confusion Supply Chain Attacks: 49% of Organizations Are Vulnerable

May 09, 2023

See All Posts

Cloud Risk Encyclopedia

Search 2000+ cloud security risks or filter by cloud vendor, compliance framework, risk category, and criticality. 5 cloud platforms. 100+ compliance frameworks. 18 risk categories. 4 risk levels.
Learn more