Orca acquires web application security firm RapidSec

Cloud cybersecurity startup Orca Security Ltd. today acquired Israeli web application security firm RapidSec Ltd. for an undisclosed price.

Founded in 2020, RapidSec offers a software-as-a-service platform designed to provide rapid web security in a self-service manner. Pitched as helping customers quickly improve their web security posture, the service generates strong security headers and content-security policy, or CSP, without breaking a site.

Using CSP and security headers, RapidSec improves security posture through “ace audits” on the scanners used by customers. The service monitors and protects access from threats with Slack and security event and incident management alerts for cross-site scripting, clickjacking and Magecart with robust threat detection.

The service can be deployed in minutes by manually setting HTTP headers, the RapidSec application programming interface or pre-built integrations.

Notable RapidSec customers include Dun & Bradstreet Corp. and Konica Minolta Inc. The company has seven employees who are expected to join Orca and form the nucleus of a new development group.

“Orca’s vision has been and remains a cloud security solution that works for the customer, enabling organizations to grow in the cloud safely,” said Avi Shua, chief executive officer and co-founder of Orca. “The acquisition will allow us to further expand our platform.”

Prior to its acquisition, RapidSec had raised $500,000 in funding, according to Crunchbase. Investors included Spinach Angles, F2 Capital and Ofer Ben Noon. Calcalist reported that the estimated acquisition price was about $5 million.

This is Orca’s first acquisition since its founding in 2019. Orca itself has raised $632 million to date. It first hit unicorn status in March 2021 before raising $550 million in an extended Series C round in October on a $1.8 billion valuation.

Orca’s technology provides full-stack visibility into an organization’s cloud infrastructure by reading the runtime block storage of a virtualized workload out of band. The technology then cross-references the image with comparative information pulled from each cloud vendor’s application programming interfaces, treating each customer’s cloud estate as an interconnected web of assets.

Orca investors include Temasek, CapitalG, Redpoint Ventures, GGV, ICONIQ Capital, Lone Pine Capital, Stripes, Adams Street Partners, Willoughby Capital and Harmony Partners.

Image: RapidSec