Orca Security provides a comprehensive cloud security posture management (CSPM) solution that continuously detects misconfigurations, policy violations and compliance risks in cloud environments, including cloud-native services. The Balbix integration with Orca ingests cloud IT infrastructure assets and associated vulnerabilities discovered by Orca Security.
Balbix leverages AI to aggregate, normalize, and deduplicate ingested data, along with information integrated from your existing IT and cybersecurity tools. This creates a unified view of your entire asset inventory, including vulnerabilities and their business and operational context. Balbix’s AI models then analyze this data to provide insights such as deployment gap analysis, risk-based vulnerability prioritization (with detailed ranking and scoring), and risk quantification. This process delivers a comprehensive assessment of risk, whether for a single asset, groups of assets, or your entire enterprise, enabling more informed and effective security decisions.
Integration Summary
This table provides a summary of the Balbix integration for the Orca Security connector.
Integration Type | Fetch: An inbound API integration used to fetch cloud assets and vulnerabilities. |
Types of Assets Fetched | Host devices including servers and virtual machines. |
Types of Data Fetched | Asset name, hardware information, interface information (MAC address, IP address), OS information, system information, software information, CVE information, process information. |
Prerequisites
To configure the Balbix connector, you must first create Orca Security API credentials with the appropriate permissions. These credentials are required for completing the configuration process.
Create an API Token
To generate an API token from Orca Security:
Log in to your Orca Security Instance.
Go to Settings > Users & Permissions > API.
Click Create API Token.
Enter the required information and choose Viewer from the Role drop-down menu.
Click Create Token.
Copy the token information and securely save it for later use when setting up the Orca Security connector in Balbix.
Caution: Be sure to copy and save the token information—it will no longer be visible after you leave the page.
Create and Configure the Connector
After you have completed the prerequisites, follow these steps to create and configure your Balbix connector for Orca Security.
Field Mapping
Imported Field | Balbix Field |
asset_name | host_name |
asset_unique_id | asset_id |
asset_type | asset_type |
compute, private_ips | interfaces_ip |
compute, num_cpus | count_cpu_cores |
compute, cpu_type | cpu_model_name |
compute, total_disks_bytes | total_physical_mem_bytes |
compute, distribution_name | os_name |
compute, distribution_version | os_version |
compute, kernel_version | os_kernel |
tags_list | tags |
packages, name | sw_product_name |
packages, version | sw_product_version |
packages, vendor | sw_product_vendor |
cves, cve_id | cve_id |
cves, details | cve_details |
cves, severity | cve_severity |
processes, name | process_name |
processes, process_type | process_type |
processes, Id | process_id |
processes, ImageName | process_image |
processes, ImageVersion | process_image_version |
processes, DistributionName | process_distribution_name |
processes, DistributionVersion | process_distribution_version |
API Reference Documentation
To learn more about the Orca Security API, see the references listed below: