ORION builds ORION Security, a data loss prevention platform that uses AI agents to decide whether each movement of sensitive data is legitimate. It is for security teams that need to stop data leaving through SaaS apps, email, browsers, endpoints and AI tools, but are tired of rule-based DLP that floods them with false alerts.
The problem it targets is the gap between rules written in advance and the way people actually work, which leaves real exfiltration hidden among false alarms.
At A Glance
| Vendor | ORION |
|---|---|
| Category | Data security, agentic data loss prevention |
| Deployment | Browser extension, API and endpoint sensor |
| Agentic AI | Specialised AI agents and a proprietary LLM that analyse each data movement |
| Customers | Alera Group, Omegapoint, Incode, LinkedIn, AMEX Global Business Travel |
| Market classification | Data Security |
What ORION Does
Traditional DLP depends on policies and data classification set up in advance, which takes time and produces alerts that analysts learn to ignore. ORION instead learns how data is used across the organisation. Its agents weigh content sensitivity, data lineage, user identity, behavioural intent and the purpose of the environment to work out why data is moving, separating normal business activity from exfiltration.
Protection starts from day one, with no discovery or classification lag. Policies remain for deterministic, predictable cases, and an analysis agent handles everything else. ORION reports a false positive rate near 5% among its Fortune 500 customers.
Products
ORION Platform
The ORION platform discovers and monitors every data movement across every surface at the same time, in real time. It catches risky uploads, pastes and shares before sensitive information leaves trusted environments, and returns a verdict of allow, deny or coach for each risk signal, so users can be coached as well as blocked. The problems it is built for include:
| AI data leakage | Sensitive data sent into AI tools |
|---|---|
| Insider and leaver risk | Employees, including leavers, moving data out |
| External collaboration and oversharing | Files shared too widely with outside parties |
| Source code and secrets | Code and secrets leaving trusted environments |
| Unmanaged devices and personal channels | Data moving to devices and channels outside IT control |
How It Works
ORION observes data movement through three protection points and analyses each movement against the context of its path. The result is a verdict for each movement rather than a match against static rules alone.
| Component | What it does |
|---|---|
| Browser extension | Protects data inside the web tools employees use every day. |
| API | The second protection point, used alongside the extension and the sensor. |
| Endpoint sensor | Covers data movement on the device itself. |
| Analysis agents | Specialised AI agents and a proprietary LLM examine data loss indicators in real time, capture the context of each movement and issue the verdict. |
Agentic AI Capabilities
Incident Investigation
When an incident occurs, an agent compiles the full incident story, so an analyst starts from a timeline of who moved what, where and why rather than from a raw alert.
AI Tools As Data Channels
AI assistants and agentic workflows are treated as data channels in their own right, alongside email and SaaS, so prompts and uploads to tools such as ChatGPT, Claude, Gemini, Copilot and Cursor are inspected like any other movement. These tools are now a routine destination for code and documents, so leaving them out of DLP leaves a large gap.
Integrations
| Area | Integrations |
|---|---|
| Outlook, Gmail | |
| File storage | Dropbox, Google Drive |
| Business apps | Salesforce, HubSpot, Zoom |
| Development | GitHub |
| Strategic integrations | AWS, Google Cloud, Grip, Microsoft, Sentra, Torq and Wiz |
Company Background
| Founded | 2024, Tel Aviv, Israel. |
|---|---|
| Founders | Nitay Milner (co-founder and CEO). |
| Funding | A $32 million Series A in February 2026 led by Norwest Venture Partners, with IBM and existing investors PICO Venture Partners and Lama Partners, following a $6 million round in March 2025. |
| Recognition | SINET16 Honoree, and Cyber Defense Magazine’s 2026 Top InfoSec Innovator awards in the data loss prevention category. |
Note: This overview is compiled from ORION’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.