Orca adds discovery for shadow AI apps and agents
Original title: Orca Security adds visibility into AI-generated code and agent risks
Agentless scanning looks for builder fingerprints and maps agent permissions, credentials and access to sensitive cloud data.
Orca Security expanded its AI Security offering to find AI-generated applications and autonomous agents in customer cloud environments. AI AppGen Security uses agentless SideScanning to match fingerprints from builders such as Lovable, v0, Replit, Base44 and Bolt, plus hosting services including Vercel, Netlify and Supabase, then ties them to identities and data access. A new Agents view inventories cloud-managed and self-hosted agents, including Claude Code, Codex and Gemini CLI, and flags excessive permissions, exposed MCP credentials and insecure connections. Orca also says it can attribute repository code to the agents and models that produced it.
Unconfirmed: Detection coverage is described by Orca; the announcement does not include independent validation.
- Discovery uses DNS records, packages, file markers, commit identities and cloud permissions.
- Support is being extended to Base44, OpenAI and Vercel.
- Checks include disabled row-level security in Supabase projects.
- An Agents tab in the AI Bill of Materials lists agents beside models, packages and MCP servers.
- Vendors
- Orca Security
- Organizations
- IDC
From the original article
4 min read at helpnetsecurity.comOrca Security has announced new capabilities to help organizations discover and secure AI-generated applications and autonomous agents across their cloud environments. The expansion builds on Orca’s AI Security offering, enabling security teams to uncover previously unknown AI applications, assess the risks associated with autonomous agents, and gain deeper visibility into AI-generated code.
By Industry News · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.