Natural language security queries at Orca Security using Amazon Bedrock

Orca Security has unveiled its latest innovation, Discovery AI, a natural language query agent built on Amazon Bedrock. This new tool allows users to ask security-related questions in plain English, which are then converted into Sonar queries. The development is a significant leap in making security assessments more accessible and efficient, particularly for organizations that may lack deep technical expertise in cybersecurity. By simplifying the query process, Orca Security aims to empower users to gain insights into their security posture without needing to understand complex query languages or the underlying data structures.

The architecture of Discovery AI is multi-faceted, designed to optimize both performance and cost. According to Orca Security, the implementation of this natural language processing (NLP) solution has resulted in a staggering 90% reduction in query costs, a 93% decrease in the number of input tokens required, and a 75% reduction in latency compared to the previous baseline. These metrics not only highlight the efficiency of the new system but also underscore the potential for significant cost savings for organizations that rely on security queries to manage their cloud environments.

Key facts

The players involved in this development include Orca Security, a prominent player in the cloud security space, and Amazon Web Services (AWS), which provides the foundational technology through its Bedrock platform. Orca Security has been recognized for its innovative approaches to cloud security, particularly in providing comprehensive visibility across cloud environments. Amazon Bedrock, on the other hand, is AWS's suite of tools designed to facilitate the development and deployment of machine learning applications, making it an ideal platform for Orca's new capabilities.

In the broader context of cloud security, the introduction of Discovery AI represents a shift towards more user-friendly interfaces that leverage advanced machine learning technologies. Traditionally, security queries required a deep understanding of both the data and the query language, which could be a barrier for many organizations. With the advent of natural language processing, tools like Discovery AI are democratizing access to security insights, allowing a wider range of users to engage with their security data effectively.

Historically, the use of natural language processing in cybersecurity has been limited, primarily due to the complexity of security data and the specificity required in queries. However, advancements in machine learning and NLP have made it possible to bridge this gap. Orca Security's Discovery AI builds on these advancements, utilizing Amazon Bedrock's capabilities to interpret and convert user queries into actionable security assessments. This not only enhances user experience but also aligns with the growing trend of integrating AI into various aspects of IT management.

Who's involved

• Orca Security: A leader in cloud security solutions, known for its innovative approaches to visibility and risk management in cloud environments.
• Amazon Web Services (AWS): The provider of the Bedrock platform, which serves as the foundation for Orca's Discovery AI.

The implications of this development extend beyond just Orca Security and AWS. As organizations increasingly migrate to cloud environments, the need for effective security solutions becomes paramount. Discovery AI's ability to simplify the querying process can help organizations better understand their security posture, respond to threats more effectively, and ultimately reduce their risk exposure.

How to read the numbers

The impressive metrics associated with Discovery AI highlight its potential impact on operational efficiency. The 90% reduction in query costs is particularly noteworthy, as it suggests that organizations can achieve the same level of insight at a fraction of the previous expense. Similarly, the drastic reduction in input tokens indicates that users can formulate their queries more succinctly, which not only streamlines the process but also enhances the overall user experience. The 75% reduction in latency means that users can expect faster responses to their queries, allowing for more timely decision-making in security management.

What you can do with it

• Leverage Discovery AI: Start using the tool to convert natural language queries into actionable security insights.
• Train Teams: Educate security teams on how to formulate effective queries in plain English to maximize the tool's capabilities.
• Monitor Costs: Keep track of query costs and performance metrics to evaluate the financial benefits of using Discovery AI.
• Integrate with Existing Systems: Explore ways to integrate Discovery AI with existing security management systems for enhanced visibility.

What we're watching

As organizations begin to adopt Discovery AI, it will be crucial to monitor user feedback and performance metrics to understand its real-world impact. Additionally, the competitive landscape may shift as other security vendors look to develop similar capabilities, potentially leading to a new wave of innovations in natural language processing for cybersecurity.

Looking ahead, the success of Discovery AI could pave the way for further advancements in natural language processing within the cybersecurity domain. As more organizations recognize the value of simplifying complex queries, we may see an increase in demand for similar tools that leverage AI to enhance user experience and operational efficiency. The ongoing evolution of machine learning technologies will likely continue to drive innovation in this space, making it an exciting area to watch in the coming years.