Orion Security

Cover Block

PUBLIC

Attribute	Value
Name	Orion Security
Tagline	AI-driven contextual data security replacing legacy DLP tools
Headquarters	Israel
Founded	2024
Stage	Series A
Business Model	SaaS
Industry	Security
Technology	AI / Machine Learning
Geography	Middle East / North Africa
Growth Profile	Venture Scale
Founding Team	Nitay Milner, Jonathan Kreiner
Funding Label	Series A (total disclosed ~$38,000,000)

Links

PUBLIC

• Website: https://www.orionsec.io/
• LinkedIn: https://www.linkedin.com/company/orion-security-e3dd/

Executive Summary

PUBLIC Orion Security is an Israeli startup building an AI-driven platform that aims to replace legacy data loss prevention tools by using autonomous agents to analyze data context in real time, a bet that has attracted $38 million in venture capital in just over a year [Calcalist, May 2026]. Founded in 2024, the company emerged from stealth in March 2025 with a $6 million seed round and closed a $32 million Series A led by Norwest Venture Partners with IBM participating in May 2026, indicating strong institutional validation for its technical approach [PRNewswire, March 2025] [Calcalist, May 2026]. Its product differentiates by moving away from static, policy-heavy DLP enforcement toward a system where AI agents assess data sensitivity, user intent, and historical patterns to stop leaks before they occur, reportedly reducing false positives [Calcalist, May 2026].

Founders Nitay Milner and Jonathan Kreiner bring a blend of enterprise security and intelligence backgrounds, with prior experience at Cisco, Epsagon, and Israeli Military Intelligence Unit 8200 [LinkedIn, 2026]. The company operates a SaaS business model targeting regulated sectors like finance, healthcare, and technology, and claims to have ramped to seven-figure annual recurring revenue within five months of its seed round [JPost, May 2026] [LinkedIn, 2026]. Over the next 12-18 months, the key watchpoints are the translation of early revenue momentum into named enterprise deployments, the technical performance of its autonomous agents at scale, and the strategic depth of its partnership with investor IBM.

Data Accuracy: GREEN -- Confirmed by multiple independent news reports and founder LinkedIn profiles.

Taxonomy Snapshot

Axis	Value
Stage	Series A
Business Model	SaaS
Industry / Vertical	Security
Technology Type	AI / Machine Learning
Geography	Middle East / North Africa
Growth Profile	Venture Scale
Funding	$38M (Series A + Seed)

Company Overview

PUBLIC

Orion Security is a venture-scale cybersecurity startup founded in 2024, headquartered in Israel, with operational presence in New York and Tel Aviv [Crunchbase] [LinkedIn, 2026]. The company emerged from stealth in March 2025 with a $6 million seed round to address data loss prevention, a category historically reliant on static, policy-based tools [PRNewswire, March 2025]. Its founding thesis, articulated in subsequent funding announcements, is that legacy DLP systems generate excessive false positives and fail to understand the context of data movement, a gap the founders believe can be closed with autonomous AI agents [Calcalist, May 2026].

Key milestones trace a rapid trajectory from concept to Series A. The seed financing, led by PICO Venture Partners and FXP, provided initial capital to build the product [PRNewswire, March 2025]. Within approximately five months of its commercial launch, the company reported ramping from zero to seven-figure annual recurring revenue [LinkedIn, 2026]. This growth momentum culminated in a $32 million Series A round in May 2026, led by Norwest Venture Partners with strategic participation from IBM, bringing total disclosed funding to $38 million [Calcalist, May 2026] [The Jerusalem Post, May 2026].

Data Accuracy: GREEN -- Confirmed by multiple independent news outlets (Calcalist, JPost, PRNewswire) and founder LinkedIn profiles.

Product and Technology

MIXED The core proposition is an autonomous, AI-driven platform designed to replace policy-heavy legacy data loss prevention (DLP) tools [Calcalist, May 2026]. Instead of relying on static rules, Orion's system employs AI agents to analyze outbound data in real time, considering context like data sensitivity, user identity, intent, and historical patterns to distinguish legitimate activity from potential leaks [Calcalist, May 2026]. The stated goal is to prevent data exfiltration before it occurs while reducing the high rate of false positives common in traditional DLP systems.

Public descriptions position the technology as a wedge into established enterprise security stacks, specifically targeting the finance, healthcare, and technology sectors [JPost, May 2026]. The company's marketing emphasizes a shift from policy-based enforcement to contextual, autonomous decision-making, a claim central to its differentiation. No technical specifications, such as deployment models (e.g., SaaS, on-premise) or specific AI model providers, are detailed in available sources.

• Architecture inference. The reliance on real-time analysis of outbound data streams suggests an architecture that likely integrates with enterprise communication and storage endpoints, such as email, cloud storage, and collaboration tools. This is a standard requirement for modern DLP, but the autonomous agentic layer represents the novel component.
• Deployment status. The company claims to serve paying customers across its named verticals, indicating a generally available product, though no specific deployment case studies or named reference customers are provided in public materials [JPost, May 2026].

Data Accuracy: YELLOW -- Product claims are consistently reported across multiple news outlets, but technical implementation details and independent performance benchmarks are not publicly available.

Market Research

PUBLIC

The data loss prevention market is undergoing a fundamental shift, driven by the inadequacy of policy-based tools to manage modern data sprawl and sophisticated insider threats. Orion Security's bet is that this creates a window for a new architectural approach, one that replaces static rules with autonomous, context-aware analysis.

Quantifying the specific market for autonomous DLP is difficult, as the category is nascent. The broader data security market, however, provides a relevant anchor. According to Gartner, the worldwide data security market was valued at approximately $4.5 billion in 2024, with a projected compound annual growth rate (CAGR) of 12.5% through 2028 [Gartner, 2024]. This growth is fueled by several converging drivers. The volume and velocity of data creation continue to accelerate, expanding the attack surface. Simultaneously, the rise of generative AI tools within enterprises introduces new, unpredictable data exfiltration vectors that legacy systems are not designed to monitor [SiliconANGLE, 2026]. Finally, a persistent shortage of skilled security analysts makes manual policy tuning and alert triage unsustainable, increasing demand for automated, accurate threat detection.

Adjacent markets that serve as substitutes or complements are significant. The broader data security and governance platform space, which includes cloud security posture management (CSPM) and data discovery and classification tools, represents a larger total addressable market. Companies in this space often expand into DLP functionality, making them natural competitors. Furthermore, the endpoint detection and response (EDR) and extended detection and response (XDR) markets are converging with data security, as vendors seek to provide unified security platforms. Orion's focus on contextual analysis across user identity, intent, and data history positions its technology at the intersection of these trends.

Regulatory and macro forces provide a consistent tailwind. Global data privacy regulations, such as GDPR in Europe and CCPA in California, impose strict requirements for data protection and breach notification, increasing the compliance cost of failure. In sectors like finance and healthcare, which Orion cites as its initial customer verticals, industry-specific regulations (e.g., HIPAA, GLBA) mandate stringent data controls [JPost, May 2026]. These regulations do not prescribe specific technologies, but they raise the minimum bar for data security, creating a budget line for solutions that can demonstrate comprehensive coverage and reduce risk.

Metric	Value
Data Security Market 2024	4.5 $B
Projected CAGR 2024-2028	12.5 %

The available sizing data points to a large and growing core market, but Orion's success hinges on capturing a segment of it defined by a new architectural paradigm. The 12.5% CAGR suggests sustained budget allocation, though competition for those dollars will be intense.

Data Accuracy: YELLOW -- Market sizing is based on an analogous, broader market report from a named third-party analyst firm. Specific TAM for autonomous DLP is not publicly available.

Competitive Landscape

MIXED Orion Security enters a crowded security market by targeting a specific, high-friction pain point: the operational burden and high false-positive rates of legacy data loss prevention tools. The company's public positioning frames it as an autonomous, AI-driven alternative to policy-heavy incumbents [Calcalist, May 2026].

Without named competitors in the cited sources, a direct comparison table cannot be constructed. The competitive analysis must therefore proceed from the company's stated wedge and the broader market structure.

The competitive map for data-in-motion security is segmented by approach. On one side are the established DLP incumbents, such as Broadcom (Symantec), Forcepoint, and Microsoft (Purview), which rely on predefined policies and rulesets. These vendors hold entrenched enterprise relationships but are frequently criticized for complex deployments and alert fatigue. A second segment includes cloud-native security posture management (CSPM) and data security posture management (DSPM) platforms like Wiz, Lacework, and Palo Alto Networks (Prisma Cloud), which focus on discovering and classifying data at rest in cloud environments. Their motion into runtime data monitoring is a logical, adjacent expansion. The third and most direct segment comprises newer AI-native challengers aiming to contextualize data flows. While no specific names are confirmed in Orion's coverage, this space includes startups applying large language models to understand data sensitivity, user intent, and behavioral context for real-time enforcement.

Orion's claimed edge rests on two pillars: its AI agent architecture for real-time analysis and its focus on replacing policies with autonomous decision-making [Calcalist, May 2026]. The durability of this edge is unclear. The technology differentiation,using LLMs to interpret context,is not inherently proprietary, as the underlying models are increasingly commoditized. A defensible advantage would need to be built on unique training data, such as a proprietary corpus of labeled insider threat events or domain-specific data flows from its finance and healthcare customers [JPost, May 2026]. Without visibility into specific model performance or data moats, the technical edge appears perishable on an 18-month horizon, contingent on rapid iteration and customer feedback loops. The participation of IBM as a strategic investor could provide a channel and validation advantage, though the nature of that partnership is not detailed [Calcalist, May 2026].

The company's most significant exposure is to incumbents with broader platforms. Microsoft, Google, and CrowdStrike, which already have endpoint and cloud security agents deployed, could add similar contextual AI features as a module, leveraging their existing distribution and trust. Orion also appears exposed on the sales motion; displacing entrenched DLP suites requires navigating complex procurement cycles and security teams accustomed to policy-based controls. A lack of publicly named flagship customers makes it difficult to assess real-world traction against these hurdles. Furthermore, the company's focus on "autonomous" enforcement may face regulatory scrutiny in highly governed sectors like healthcare and finance, where explainability of AI decisions is critical.

The most plausible competitive scenario over the next 18 months hinges on execution speed and partnership depth. If Orion can rapidly convert its Series A capital into a handful of marquee, referenceable enterprise deployments in its named verticals, it could establish a beachhead as the specialist for AI-driven data-in-motion security. A winner in this case would be a platform like Wiz or CrowdStrike, should they choose to acquire rather than build the capability. Conversely, if product-market fit proves slower than anticipated or if incumbents launch credible AI features, Orion risks becoming a feature within a larger suite. A loser in that scenario would be any pure-play, policy-based DLP vendor that fails to adapt its core architecture, ceding ground to more adaptive, context-aware systems.

Data Accuracy: YELLOW -- Competitive positioning is sourced from company claims in news coverage; specific competitor names and market structure are inferred from the broader category, not from direct Orion disclosures.

Opportunity

PUBLIC

The prize for Orion Security is a foundational role in the next generation of enterprise data security, moving from a reactive, policy-based cost center to an autonomous, context-aware control layer.

The headline opportunity is to become the default platform for autonomous data security, effectively rendering the traditional DLP market obsolete. The evidence for this outcome being reachable, not just aspirational, lies in the rapid validation from both capital and strategic partners. Norwest Venture Partners, a firm with a history of backing infrastructure software leaders, led the Series A, and IBM participated as a strategic investor [Calcalist, May 2026]. This combination suggests investors see a path where Orion's AI-driven, policy-agnostic approach can scale to meet the acute pain point of false positives and operational overhead that plagues incumbent solutions. The company's claim of ramping to seven-figure annual recurring revenue within five months of its seed round, while not independently audited, indicates early product-market fit is being achieved at a venture-scale pace [LinkedIn, 2026].

Growth is likely to follow one of several concrete, high-scale paths. The following scenarios outline plausible routes to dominance.

Scenario	What happens	Catalyst	Why it's plausible
IBM-Led Enterprise Standard	Orion becomes the recommended or embedded data security layer within IBM's hybrid cloud and security portfolios, achieving rapid global distribution.	A formal technology or go-to-market partnership announcement with IBM following the Series A investment.	IBM's participation in the funding round is a clear signal of strategic interest [Calcalist, May 2026]. Embedding with a legacy enterprise vendor provides instant scale and credibility.
Sector-Specific Dominance in Finance	The company becomes the de facto security standard for financial data protection, starting with capital markets and expanding to retail banking.	A flagship deployment with a top-tier global bank is publicly referenced, creating a powerful reference case.	Orion already lists the finance sector as a core customer vertical [The Jerusalem Post, May 2026], where data sensitivity and regulatory pressures are highest, creating a strong beachhead.
The "Security Co-Pilot" Platform	Orion's AI agents evolve beyond data loss prevention to become a general-purpose security analysis layer, integrating with SIEM, CASB, and email security tools.	The company launches an API or marketplace allowing other security vendors to use its contextual analysis engine.	The foundational technology,AI agents analyzing context, intent, and history,is applicable to a broad range of security use cases beyond pure data exfiltration [Calcalist, May 2026].

Compounding for Orion would manifest as a data and trust flywheel. Each new enterprise deployment, particularly in regulated sectors like finance and healthcare, feeds the AI models with more nuanced examples of legitimate versus malicious data movement across diverse environments [The Jerusalem Post, May 2026]. This improves detection accuracy and reduces false positives, which in turn lowers the operational burden for security teams. That proven reduction in operational overhead becomes the core sales narrative, accelerating adoption in similar organizations and creating a distribution advantage. Early signals of this flywheel are the rapid ARR growth and the recognition from industry analysts, such as being named a leading Emerging Player in the SACR report on agentic defense platforms [LinkedIn, 2026].

The size of the win can be framed by the market it seeks to displace. The legacy Data Loss Prevention market was estimated at over $2 billion annually in prior years. A company that successfully redefines this category as an autonomous, AI-native platform could command a premium valuation multiple. As a scenario-based illustration, if Orion captured a 10% share of a modernized $3 billion market within five years, it could support a revenue base of $300 million. Applying a forward revenue multiple in line with high-growth security software peers (which have historically traded between 10x and 20x), the company's potential enterprise value in this scenario could approach several billion dollars. This is a scenario, not a forecast, based on category displacement rather than total market expansion.

Data Accuracy: YELLOW -- Core opportunity thesis is built on cited funding events, investor composition, and early traction claims. Market size comparables and specific growth catalysts are inferred from the company's stated verticals and partner signals.

Sources

PUBLIC

1. [Calcalist, May 2026] Cyber startup Orion raises $32 million Series A backed by IBM for AI-driven data-leak prevention | https://www.calcalistech.com/ctechnews/article/byzup00kw11e

2. [The Jerusalem Post, May 2026] Israeli startup ORION raises $32 million in Series A round | https://www.jpost.com/business-and-innovation/tech-and-start-ups/article-885400

3. [Crunchbase] ORION Security - Crunchbase Company Profile & Funding | https://www.crunchbase.com/organization/orion-security-e3dd

4. [PRNewswire, March 2025] Orion Security launches from stealth with $6M to secure enterprise data from insider threats using generative AI | https://www.prnewswire.com/il/news-releases/orion-security-launches-from-stealth-with-6m-to-secure-enterprise-data-from-insider-threats-using-generative-ai-302404662.html

5. [LinkedIn, 2026] Daniel Bass - ORION Security | LinkedIn | https://www.linkedin.com/in/daniel-bass-8b2bb81ab/

6. [LinkedIn, 2026] Itay Maor - ORION Security | LinkedIn | https://www.linkedin.com/in/itaymaor/

7. [LinkedIn, 2026] Or Daniel - ORION Security | LinkedIn | https://www.linkedin.com/in/or-daniel-864018140/

8. [SiliconANGLE, 2026] Orion Security raises $32 million to advance autonomous data loss prevention | https://siliconangle.com/2026/02/03/orion-security-raises-32-million-advance-autonomous-data-loss-prevention/

9. [Orion Security, 2026] ORION - DLP Beyond Policies | https://www.orionsec.io/

10. [LinkedIn, 2026] Nitay Milner - Orion Security | LinkedIn | https://www.linkedin.com/in/nitay-milner/

11. [Gartner, 2024] Data Security Market Analysis | Not applicable (proprietary report)

12. [PRNewswire, May 2026] ORION Security Closes $32 Million in Funding Ushering in Autonomous Data Loss Prevention Without Reliance on Policies | https://www.prnewswire.com/news-releases/orion-security-closes-32-million-in-funding-ushering-in-autonomous-data-loss-prevention-without-reliance-on-policies-302676870.html