Orca Security acquired cloud-security automation startup Opus Security on May 13, 2025. The deal is intended to move Orca’s cloud-native application protection platform (CNAPP) beyond finding and prioritizing risks toward executing remediation and prevention with agentic AI. Orca did not disclose the purchase price.
What Orca acquired from Opus
Opus Security built technology for agentic, AI-driven cloud-security automation. Orca’s announcement said the acquisition would add agentic AI-based remediation and prevention to its CNAPP platform. In practical terms, Orca is seeking to connect three stages that are often separated in cloud programs: discovering exposure, deciding what matters most, and carrying out the fix.
| Deal detail | What is established |
|---|---|
| Announcement | May 13, 2025 |
| Acquirer | Orca Security |
| Acquired company | Opus Security |
| Purchase price | Not disclosed |
| Opus leadership named | Meny Har and Or Gabay, previously part of the Siemplify founding team |
| Team integration | Industry reporting said nearly 50 Opus engineers joined Orca |
Har and Gabay were previously involved with Siemplify, which Google Cloud acquired in 2021. Orca co-founder and CEO Gil Geron called the transaction “the next big leap for Orca and the cloud security industry.”
Why the deal matters for cloud-security teams
Cloud-security products commonly generate more findings than security teams can investigate and fix manually. A CNAPP can show a vulnerable workload, exposed identity, misconfigured resource or risky code path, but the operational question is what should happen next and who should do it.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →#1 Best Overall
Orca’s stated strategy is to use Opus technology to automate triage, workflow execution and remediation while preserving centralized policy and security context. That could shorten the path from a prioritized finding to an approved change across cloud environments. The acquisition therefore targets the operational gap between visibility and action rather than simply adding another detection feed.
How Orca describes the AI-remediation model
1. Discover and contextualize risk
Orca’s CNAPP provides the visibility and prioritization layer. The intended advantage of combining that context with Opus automation is that an action can be selected using broader information about assets, identities, exposure and policy instead of treating every alert independently.
2. Triage and select a response
Agentic automation is meant to evaluate the finding, determine which workflow applies and coordinate the required steps. The announcement describes this as a move from observing and prioritizing risk toward autonomous remediation and prevention.
3. Execute remediation through workflows
Execution may include running a predefined workflow or making a change in a connected cloud or security system. The public announcement does not specify which actions are fully autonomous, which require approval, or what rollback safeguards are available for each workflow.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteRank #3
4. Apply prevention controls
Orca also positions the combined technology as a prevention capability: using policy and automated actions to stop repeat exposure, not merely close an individual finding. The sources do not establish the prevention coverage or its measured effectiveness.
Is Orca’s remediation truly autonomous?
The acquisition’s language is explicitly “agentic AI-based remediation and prevention,” but the available public material does not independently verify how often Orca completes fixes without human approval. It also does not publish remediation rates, mean time to repair, error rates, rollback results or production case-study metrics after the deal.
The safest interpretation is that Orca is building toward autonomous execution on top of workflow and policy controls. Buyers should ask Orca to demonstrate the approval model, permitted actions, audit trail, rollback process, handling of failed changes and boundaries between recommendation, workflow-assisted execution and no-touch automation.
What was the Opus acquisition price?
Financial terms were not disclosed in Orca’s announcement, and industry coverage did not provide a verified figure. Any dollar amount attributed to the transaction would therefore be speculation.
Best Value
How the deal fits Orca’s 2026 ecosystem
Orca’s later partnerships indicate that the company is expanding both its cloud-provider alignment and its route to market:
- AWS: In March 2026, Orca announced a strategic collaboration focused on securing AWS AI services and improving visibility and remediation.
- TD SYNNEX: In April 2026, Orca announced a North American distribution agreement intended to support reseller procurement, credit facilities and partner adoption.
- QBS Software: In July 2026, QBS announced an EMEA distribution agreement covering the United Kingdom, Ireland, Germany, Austria, Switzerland, France, the United Arab Emirates and Saudi Arabia, with further expansion contemplated.
These relationships may make Orca’s remediation platform easier to procure and deploy through enterprise and channel partners, but they do not by themselves demonstrate the effectiveness of the Opus-derived automation.
Quick Recap
What enterprise buyers should verify
- Which remediation actions can run without approval and which require a human checkpoint.
- Whether agentless or agent-based deployment is required for each cloud and workload type.
- How policies, audit logs, separation of duties and rollback are enforced.
- Which AWS and other cloud services are covered, including code, runtime and identity contexts.
- How failed, partial or unsafe actions are detected and stopped.
- Independent evidence of remediation speed, completion rate and false-action rate.
- Availability of support and purchasing channels in the buyer’s geography.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
