Orion Security emerges from stealth using LLMs to track your enterprise’s data flow and stop it from leaking out

If you are totally following cybersecurity news, then there is a good chance you have heard horrible reports about companies hiring remote contractors that have proven to be hackers or North Korean spy Stand out with sensitive, proprietary data.

But even without that cloak and dagger, the international spy veneer, the truth is that all organizations have reason to care about their data security and “prospect”penetration” or unauthorized data movement. IBM’s 2024 data breach report cost The incidents involving data stripping are now increasing ransomware, with an average of about $5.21 million per event.

In an era that has never been important or valuable to an organization (but more important than ever, but more valuable among silos), how can a business best protect its sensitive information without destroying the bank?

A new company, Orion Security, believes that the generated AI large language model is key. Today, the company announced $6 million seed funding led by PICO Partners and FXP from Stealth and has been involved in the participation of Inderscore VC and renowned cybersecurity leaders such as the founder of 81 Peripheral and the founder of Elastic CISO.

According to an interview with Milner last week, Orion Security, founded by Nitay Milner (CEO) and Yonatan Kreiner (CTO), has partnered with leading technology companies to help them protect sensitive business data from insider threats.

“I’ve spent many years as a product leader in several companies that have focused on the very complex challenges of observability and security in cloud environments, helping T-Mobile and BlackRock get help from people to their very complex system stacks and better understand,” Milner said. “I’ve experienced first-hand the main problem of data security is understanding how companies use sensitive data in business environments.”

AI-driven context data protection (AI CDP)

Unlike traditional data protection tools that rely on strict rules and manual policies, Orion Security’s platform can dynamically learn and map an organization’s business process.

By understanding how organizations usually move within an organization, Orion can distinguish between legitimate workflows and potential threats, whether intentional or accidental.

“Orion revolutionized data protection by understanding the company’s business processes and data flows and using the capabilities of AI to automate data loss,” Milner explained.

This approach runs contrary to the traditional security model based on manual policy, which Milner believes is fundamentally flawed.

“Most security solutions rely on manual policies, but the policies have not been extended.

He further highlights how security teams struggle with outdated methods: “Security teams write endless policies over and over again, are attacked by false alarms, and data is still leaking from the enterprise.”

Orion Security uses a combination of proprietary AI models and fine-tuned open source LLM to automatically protect data.

“All our AI is developed by us…we don’t use third parties, such as Chatgpt or something like that.”

The platform relies on two core models: one for classification, which identifies a context-based way of sensitive data and the other for business reasoning, which evaluates user roles, workflows, and typical data movements to detect anomalies.

Orion’s AI makes subtle adjustments to industry-specific and organization-specific data to improve accuracy, ensuring it adapts to the unique operations of each company.

Although they utilize fine-tuned open source LLMS, Milner points out their surprising effectiveness even without a lot of pre-training, saying: “Open source LLMs… have a lot of background and you don’t believe the level they bring to you by just investing sensitive data into it.”

How Orion’s solution works

The platform connects to your organization’s cloud services, browsers and devices to fully map data flows.

At the heart of its detection capability is the metrics of its Leakage (IOL) engine, which utilizes proprietary inference models and large language model (LLM) classifications to analyze data motion patterns.

Key features include:

• Real-time risk assessment: The platform continuously evaluates business processes and assigns risk scores based on observed behaviors.
• Sensitive data detection: Orion identify and classify data types including Personally Identifiable Information (PII), Trade Secrets, Payroll, and Intellectual Property (IP).
• Minimum manual configuration: Unlike traditional DLP tools that require extensive setup, Orion can automatically detect and respond with minimal user intervention.
• Reduce error alerts: By combining the business environment, Orion ensures that the security team warns only truly suspicious activity, reduces noise and unnecessary investigations.

Milner compared Orion’s approach to endpoint detection and response (EDR) solutions, but for data protection. “We act as EDRs of data, for example, for your data, we will be like yours even if there is no predefined policy.

In addition to attracting malicious insiders, Orion distinguishes between human error and external attackers. “The three main vectors of data breaches are malicious insiders, human errors and external attackers,” Milner said.

Business leaders can see the process of company data at a glance

Orion Security provides users with a dashboard-driven experience that provides real-time insights into business data flows. The interface classifies risks by severity, allowing security teams to quickly identify and resolve high-risk activities.

Some notable elements of the Orion UI include:

• Top-level data types to monitor: The system classifies and tracks PII, marketing materials, product-related data and source code.
• Risk score distribution: Critical, visual collapses in high school and low-risk activities help prioritize safety responses.
• Top Outbound Source: The most common platform for transmitting data, helping security teams detect abnormal penetration patterns.
• Business flow risk score: Each monitored business process is marked as a specific activity based on severity (e.g., a specific activity of “move data before leaving the company” (e.g., “engineering team mobile data”).

This intuitive approach to data security allows security teams to quickly assess potential threats and act immediately if necessary.

Milner therefore describes the platform’s visibility features: “Imagine a dynamic map of all the sensitive data movements in your company (between people, devices, and applications) and make sure it doesn’t leave your organization.”

High investor confidence

Support from cybersecurity veterans further strengthens Orion’s approach. FXP partner Gil Zimmermann, formerly a partner at Cloudlock (acquired by Cisco), sees Orion’s technology as a long-term evolution in data protection:

“AI creates a watershed for data protection, and Orion Security is at the forefront of this transformation,” he wrote in a preparatory statement in a press release provided to VentureBeat. “Orion’s AI-driven approach addresses the core challenges we have faced over the years – a lack of business environment and overwhelming manual work.

In addition to discovery, Orion also provides flexibility in response mechanisms, allowing companies to customize their methods.

“Some companies want us to block data divestitures in real time, while others want to receive notifications or educate employees on their safety policies,” Milner said.

What’s next for Orion Security and its technology?

Orion Security has partnered with leading technology companies (due to business agreements, confidentiality) and plans to further refine its AI model to stay ahead of evolving insider threats.

The company’s onboarding process ensures that customers see direct value. “When we land a new customer, we take up three months of historical data, so our AI can deliver value from day one,” Milner explained.

Additionally, Orion emphasizes a privacy-first security architecture. “We don’t store any sensitive data, only companies prefer it, and they can even install our classifiers in their own environments,” Milner said.

With an AI-powered approach that reduces manual workload, false positives and security blind spots, Orion Security can well shape the next generation of context-aware data protection solutions.