Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Avi Shua
The New AI Gap: Product Velocity Vs. Customer Adoption
Avi Shua is the Chief Innovation Officer at Orca Security. AI is making product development more efficient across nearly every software category. A recent survey found that more than 90% of software development firms now use AI-powered tools throughout the development lifecycle, with many reporting efficiency gains. Teams can accelerate workflow automation, build integrations more quickly, streamline development processes and reduce the time required to bring new functionality to market.
There Is No 'Most Critical' Layer In Cloud Security—And That Belief Keeps Failing Us
Avi Shua is the Chief Innovation Officer at Orca Security. Living in Sydney, where shark sightings regularly make the evening news, you quickly learn something about how humans think about risk. The coverage is dramatic, even though shark attacks kill only about three people per year in Australia, compared to nearly 20,000 annual deaths from cardiovascular disease. But talking about preventable heart attacks doesn’t sell newspapers.
Orca Security Accelerates AI-Driven Cloud Security Growth with TD SYNNEX Partnership
PORTLAND, Ore. – April 13, 2026 – Orca Security, the pioneer of agentless cloud security, today announced a strategic distribution agreement for North America with TD SYNNEX, a leading global distributor and solutions aggregator for the IT ecosystem.
Orca Security Advances AI-First Cloud Defense with Autonomous Agents and Runtime AI Threat Detection
Ahead of RSAC 2026, Orca Security unveils new AI-driven capabilities that help organizations cut through alert noise, accelerate investigations, and focus on the risks that truly impact multi-cloud and AI environments PORTLAND, Ore.
Orca Security Signs Strategic Collaboration Agreement with AWS to Advance AI-Powered Cloud Security
The collaboration enables organizations to strengthen cloud security, accelerate remediation, and operationalize AI across AWS environments Portland, OR – March 11, 2026– Orca Security, a leader in agentless cloud security, today announced it has signed a strategic collaboration agreement (SCA) with Amazon Web Services (AWS) to help organizations strengthen their cloud security posture and accelerate innovation using AI-powered security solutions.
Security That Fixes Itself Is The Future Of Cloud Protection
Avi Shua is the Chief Innovation Officer at Orca Security. Cybersecurity has long focused on visibility. The old line about not being able to protect what you can’t see is still true, but it’s only half the equation. Seeing everything doesn’t help if teams are buried under endless alerts that drain their time and slow real fixes. CISOs are facing an alert fatigue crisis, where every tool promises “full coverage,” but few help reduce the manual work required to fix what is found.
Orca Security Expands Strategic Partnership with Zscaler to Strengthen Zero Trust and Cloud Risk Management
Partnership delivers unified visibility across cloud workloads and access infrastructure, enabling faster, smarter, and more secure operations PORTLAND, Ore.
Orca Security Names Gera Dorfman Chief Product Officer to Accelerate Cloud Security Innovation
Seasoned product leader from Check Point will advance Orca’s AI-first platform, simplifying and strengthening cloud security for organizations worldwide PORTLAND, Ore. – December 1, 2025 – Orca Security, the pioneer in agentless cloud security, today announced the appointment of Gera Dorfman as Chief Product Officer (CPO).
Orca Security Now Available on Oracle Cloud Marketplace
Cloud-native application protection platform available to customers for instant-on security and compliance PORTLAND, Ore. – November 19, 2025 – Orca Security, a leading provider of agentless cloud security and an Oracle partner, today announced its Cloud Native Application Protection Platform (CNAPP) is available in Oracle Cloud Marketplace and can be deployed on Oracle Cloud Infrastructure (OCI).
Orca Security Achieves IRAP Assessment at PROTECTED Level, Bolstering Cloud Security for Australian Public Sector
Australian government agencies gain access to Orca’s cloud security platform ensuring unparalleled visibility and protection across cloud assets PORTLAND, Ore. – XX,XX, 2025 – Orca Security, the pioneer of agentless cloud security, today announced the successful completion of the Australian Information Security Registered Assessors Program (IRAP) assessment at the PROTECTED classification level for its Orca Cloud Security Platform.
Orca Security Expands Runtime Protection to Hybrid and Private Clouds
CNAPP pioneer delivers unprecedented visibility and threat prevention from public cloud to on-premises workloads, solving massive challenges for customers PORTLAND, Ore. – July 30, 2025 – Orca Security, the pioneer in agentless-first cloud security, today announced a significant expansion of its platform, delivering the industry’s first comprehensive runtime protection solution for hybrid cloud environments.
Orca Security Extends AI Innovation Leadership with Integrated Chatbot and New Detections for AI Security Posture Management (AI-SPM)
Latest GenAI innovations significantly enhance customer productivity and efficiency PORTLAND, Ore. – June 10, 2025 – Orca Security, the leading innovator in agentless cloud security, today launched the latest innovations for Orca AI and new detections to secure sensitive AI training data in cloud-native environments.
Orca Security Named to Redpoint 2025 InfraRed 100 for Third Consecutive Year
Recognition Honors Long-Term Growth Potential and Cloud Infrastructure Momentum PORTLAND, Ore. – June 10, 2025 – Orca Security, the pioneer of agentless cloud security, announced today that it has been named to the Redpoint 2025 InfraRed 100, a comprehensive list of the 100 top private companies in Cloud Infrastructure, for the third year in a row.
62% Deploy Vulnerable AI in Cloud, Says Orca Report
Study Reveals Accelerating AI Usage in Cloud, Leading to Influx of New Attack Paths PORTLAND, Ore., June 5, 2025 – Orca Security, a pioneer of agentless cloud security, today released the 2025 State of Cloud Security Report, providing critical insight into cloud security risks identified by the Orca Cloud Security Platform. Among the key findings, 84% of organizations now use AI in the cloud, and 62% of organizations have at least one vulnerable AI package.
Orca Security Honored in Notable Capital’s Rising in Cyber 2025
Company named to list for second consecutive year; Recognizes most promising cybersecurity companies endorsed by leading CISOs, venture capitalists, and security figures PORTLAND, Ore. – June 4, 2025 – Orca Security, the pioneer of agentless cloud security, announced today that it has been honored by Notable Capital for its Rising in Cyber 2025.
The Evolution Of CNAPP: From Unified Platforms To AI-Driven Security
Avi Shua is the Chief Innovation Officer at Orca Security. Successful cloud security deployment is contingent on a variety of factors. Different eras of threat actors and their methods have contributed to our modern-day situation—a complex mix of fragmented security tools.
How cloud security teams should think about AI
Tech News Tube is a real time news feed of the latest technology news headlines.Follow all of the top tech sites in one place, on the web or your mobile device.
How cloud security teams should think about AI
Exponential Interactive, Inc d/b/a VDX.tv Cookie duration: 90 (days). Data collected and processed: IP addresses, Device identifiers, Probabilistic identifiers, Browsing and interaction data, Non-precise location data, Users’ profiles, Privacy choices more Cookie duration resets each session. View details | Privacy policy Consent Cookie duration: 365 (days).
Council Post: Multi-Cloud Environments: How Secure Are They?
Avi Shua is the Chief Innovation Officer at Orca Security. We live in a multi-cloud world, and there’s no going back. As organizations continue to prioritize flexibility amid rapid growth, the adoption of multi-cloud environments has become commonplace. A recent study from Orca Security, in partnership with Gatepoint Research, found that 53% of organizations are already using a hybrid cloud approach, while 64% operate up to half of their environment in the public cloud.
Council Post: Is Your Cloud Environment Vulnerable To ‘Denial Of Funds’ Attacks?
Avi Shua is the Chief Innovation Officer at Orca Security. Denial-of-service (DoS) and distributed-denial-of-service (DDoS) attacks have been around for so long that they might be considered old school compared with today’s sophisticated spear-phishing and ransomware attacks. But DoS and DDoS are still among the most common attack vectors because taking down a system or service—whether for blackmail, hacktivism or other reasons—is still effective.
Council Post: Why Companies Need To Be Cloud-Native By 2030
Avi Shua is the Chief Innovation Officer at Orca Security. The speed of business, the pace of innovation and the evolution of the cloud have led inexorably toward the adoption of cloud-native environments. For most organizations, the sooner the better. At many organizations, the cloud has evolved fitfully. In its early days, considerations of cost tended to go back and forth.
Council Post: Cloud Security Needs Solutions, Not More Alerts
Chief innovation officer at Orca Security. As cloud computing has evolved and expanded, the cloud security industry has focused on a series of top issues, each one taking turns at the top of the priority pile. The risks of misconfigurations gave way to identity and access management (IAM) issues, which gave way to securing Kubernetes containers and finally to API security.
Council Post: The Pros And Cons Of A Single Security Platform
Chief innovation officer at Orca Security. A new strategy designed to entice customers to adopt a single security platform cropped up recently and could shake up the cybersecurity industry. The idea is that customers contracting for a single platform could get certain point solutions for free from the platform until the existing contracts they already have for those solutions run out.
Council Post: Cloud Security Due Diligence Is Essential For Mergers And Acquisitions
Chief innovation officer at Orca Security. Many mergers and acquisitions (M&As) these days discover their Achilles' heel when it comes to integrating two organizations' systems, especially if they involve multiple clouds and cloud providers.
Orca Security lays off 15% of workforce
Israeli cybersecurity company Orca Security is laying off 15% of its workforce across all departments and equally in both Israel and abroad, sources close to the company have told "Globes." The sources also say that beyond downsizing the number of employees the aim is to reorganize and streamline the company. Orca Security currently has 430 employees, many of them in Israel as well as offices in London, Bangkok and Portugal. RELATED ARTICLES 2023 was not an easy year for Orca Security.
Council Post: Is The Cloud Right For Critical Business Applications?
Chief innovation officer at Orca Security. The move to the cloud continues unabated, with increasingly more business enterprises operating in hybrid and multi-cloud environments. A recent study by Oracle, for instance, found that 98% of respondents have or expect to have at least two cloud infrastructure providers and 31% four or more.
Council Post: Cloud Spend And Cloud Security Have A Symbiotic Relationship
The most common cliche in security today is, "You can't protect what you can't see." It's catchy, and it makes sense given that great security in 2023 is all about deep visibility. This means knowing not only which applications, virtual machines, containers, images, databases and so on exist in your cloud estate but—more importantly—their status and whether they're being used, updated, patched, maintained, configured properly and more.
Council Post: Why Cloud Security Consolidation Should Be On Your Radar This Year
getty There are several thousand security vendors in business today, and the driving force behind that reality is the never-ending need to innovate. The industry’s ultimate purpose is to protect organizations from ever-evolving threats and attackers, forcing vendors to remain up to date and enable organizations to stay secure.
Three cloud security lessons learned in 2022 - and the path forward
Enterprises across every vertical in every geography have moved to the cloud en masse. The cloud has revolutioned the way IT infrastructure gets managed – removing the need to purchase, install, and configure hardware – shifting the focus to building applications. Cloud-first enterprises are reaping the benefits of greater flexibility, improved business continuity, and cost reduction.
The Top Cloud Security Trends to Watch for in 2023
Cybersecurity never lacks challenges. This was as true as ever in 2022, as IT and security teams entered the year dealing with one of the most critical and ubiquitous vulnerabilities in recent memory in Log4Shell. The ransomware threat remained ever-present throughout the year. As the calendar turns to 2023, the cloudy economic outlook brings added pressures to drive efficiencies in IT and security operations.
Prepare to Patch Critical OpenSSL Vulnerability
The OpenSSL project team announced that they will be releasing a new version (3.0.7) of OpenSSL on Tuesday, November 1st, 2022, between 8 am – 12 pm Eastern time, which fixes a critical vulnerability in OpenSSL (but does not affect any versions before 3.0). No details on the vulnerability are available yet, as these will be disclosed once the patch is released. OpenSSL is a toolkit to secure network communications and is widely used by Internet servers, including the majority of HTTPS websites.
Insufficient Tenant Separation in Azure Synapse
This blog was originally published by Orca Security on May 9, 2022. Written by Avi Shua, Orca Security. TL;DR Orca Security is issuing this security advisory for CVE-2022-29972 to address hazards in the use of the Microsoft Azure Synapse service. We believe the tenant separation in this service is insufficiently robust to protect secrets against other tenants.
Azure Synapse Security Advisory
TL;DR Orca Security is issuing this security advisory for CVE-2022-29972 to address hazards in the use of the Microsoft Azure Synapse service. We believe the tenant separation in this service is insufficiently robust to protect secrets against other tenants. This belief is based on Orca Security researchers bypassing tenant separation multiple times, beginning in January, and again bypassing fixes deployed by Microsoft in March and April.
Cloud Attack Path Analysis: Work Smarter Not Harder
Enterprises have moved to the cloud and adopted cloud-native architectures at a rapid pace. This dramatic shift has allowed organizations to scale more easily and ship code to production more quickly.
Nouvelle Faille Log4J - Déclaration d'Avi Shua, CEO d'Orca Security
Nouvelle Faille Log4J - Déclaration d’Avi Shua, CEO d’Orca Security décembre 2021 par Avi Shua, CEO et cofondateur d’Orca Security De nouvelles failles Log4J viennent d’être annoncées et un nouveau patch a été déployé vendredi (2.17.0). Cela implique que d’autres vulnérabilités risquent encore d’apparaître dans les prochains jours.
Orca Security Secures $550M to Mature the Security Industry
After raising $550M this year from top investors such as Temasek, CapitalG (Alphabet’s VC arm), RedPoint, GGV, Iconiq Capital, Lone Pine, Stripes, Adams Street, Redpoint Ventures, Harmony, Splunk, SAIC, and more, at this point I should probably be writing about how Orca Security is providing a single ‘AI-powered, military grade’ cyber gimmick that solves all cybersecurity problems.
Orca Security Reaches Cybersecurity Unicorn Status
Abstract: Less than 27 months since its inception, Orca Security is proud to announce a $210M series C funding. That brings total funding to around $300M, making Orca one of the world’s fastest companies to become a cybersecurity unicorn. 2020 results for Orca were stellar – >1000% YoY growth, following numerous forward-thinking organizations that chose the Orca platform. These include Robinhood, Databricks, Unity, Live Oak Bank, Lemonade, and BeyondTrust, to name just a few.
Security Experts Insight On Nissan Source Code Leaked
Nissan North America has had the source code of mobile apps and internal tools leaked online after misconfiguring one of its Git Servers. The Git Server has default username and password (admin/admin) and is now taken offline. The Nissan is investigating the leak. Offering insight on the story are the following cybersecurity professionals. Experts Comments
Why I'd Take Good IT Hygiene Over Security's Latest Silver Bullet
Bells and whistles are great, but you can stay safer by focusing on correct configurations, posture management, visibility, and patching. Here's the scenario: A state-sponsored attacker uses a zero day to breach the environment. This foothold lets him run previously unknown, fileless attacks originating from an exploited process.
Orca Security Research: Top Virtual Appliance Vendors Neglect the Security of their Products
Even though 2020 started with accelerated cloud computing adoption, Covid-19 kicked that into hyperdrive as remote working became the norm. Cybersecurity concerns surrounding a near 100 percent remote workforce also accelerated to ensure both users and cloud computing infrastructure remained safe.
The Cybersecurity Community Demands Transparency, Not Legal Threats
Abstract: A few weeks ago, Orca Security published a comparison between the Orca Cloud Security Platform and a few other cloud security tools—including a comparison with Palo Alto Networks Prisma. In response, Palo Alto Networks sent a cease and desist letter, demanding the comparison be removed immediately. Here is my response.
Securing the Weakest Links in Today’s Public Cloud Environments
By Avi Shua, CEO, Orca Security The demand for cloud security is continuing to explode, with short-term needs being accelerated by the shift to remote work during the pandemic. According to Gartner, the Cloud Security market is projected to grow 33 percent by the end of 2020, as deployments and threats increase in tandem.
Security Boulevard
Orca Security Gets More Fuel to Help Global Enterprises Gain Deep Cloud Security in Minutes, Not Months I’m thrilled to announce that we closed a $20.5M Series A funding round led by GGV Capital, with participation from our seed investors, YL Ventures, and SVCI (Silicon Valley CISO investments). This, together with the seed investment announced last June, brings Orca Security total funding to $27M USD in less than 12 months.
Security Boulevard
Provisioning assets in the cloud has never been easier and with this, Gartner estimates that 90% of organizations will share sensitive data due to uncontrolled public cloud usage over the next six years. As deployments grow more complex, so too does the risk of exposing assets and data to the outside world.
Security Boulevard
Managing keys to assets and data in cloud deployments have become a key concern for many organizations. As explained by Kenneth Hui, a Solutions Architect at Rubrik, paraphrasing Kerckhoffs Principle, poor key management is “like having a state of the art anti-burglar system for your home but leaving the house keys and alarm codes under the welcome mat.” Keys provide access to countless cloud resources, from SaaS services to SSH servers.
Security Boulevard
The prevalence of migration to the cloud highlights the catch-22 of cybersecurity: the security vs. convenience tradeoff. But it doesn’t have to be this way. “Houston, We Have an Unmanaged Cloud Problem” With cloud applications there is no need to worry about planning ahead or setting up servers, networks, and physical infrastructure. Instances are spun up and down in seconds.
Security Boulevard
Gartner lists cloud computing as one of the top technology investments for the next five years, and the global public cloud computing market is set to reach $258 billion in 2019. The ability to access data from anywhere is the top reason for cloud adoption, with about a third of companies’ IT budgets going to cloud services. However, many enterprises transitioning to an only cloud or hybrid cloud environment are unnecessarily hitting roadblocks on issues of security and privacy.
Security Boulevard
Security Challenges Facing Cloud Deployments In the cloud, code is deployed at an increasingly neck-breaking speed. As a result, bugs, security holes, and critical errors (sometimes human) are becoming both more likely and more devastating. Against the backdrop of the unprecedented scalability, reliability, flexibility, and rapid deployment capabilities, relying on pre-cloud solutions to secure cloud deployments is no longer effective.
Security Boulevard
Data breaches through mismanagement and misconfigurations in the cloud are becoming commonplace. Gartner has predicted that “through 2022, at least 95% of cloud security failures will be the customer’s fault.” In fact, nearly all successful attacks in the cloud to date, including the recent high-profile Capital One breach, involved customer misconfigurations. To avoid costly mistakes, enterprises must stop relying on manual checks and transition to the use of automatic tools.
Security Boulevard
We live in a cloud-first world. The global cloud computing market is expected to grow to more than $600 billion by 2023, exceeding the GDP of the twentieth largest economy in the world, Switzerland. And yet, 66% of IT pros say that security in the cloud remains their number one concern. But it seems that the cloud itself is not to blame.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Avi
Contact Avi, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack