What Orca is
Orca offers the standard suite of CNAPP features with a focus on agentless scanning. They're a good all around CNAPP offering mostly focused on the posture side. The vendor site is orca.security. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Orca covers
Orca is in the catalog for these capabilities. Categories: AI Security, CNAPP, CSPM, CDR, SAST, IaC, and SCA. Catalog tags: Hot Right Now and Best for Enterprise.
How to evaluate Orca in a security program
Use Orca as a stack candidate, not as diligence evidence. The oneNorma score for Orca is 6/10 (percentile 83). If the real gap is in AI Security, CNAPP, CSPM, CDR, SAST, IaC, and SCA, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what orca.security publishes. Contrast it with pentesting and Security Cloud & Compliance.