Application Security , Artificial Intelligence & Machine Learning , Next-Generation Technologies & Secure Development

Context-Driven Security Fixes Root Causes, Not Alerts

Orca Security's Gil Geron on AI-Powered Remediation in Cloud Environments
Gil Geron, co-founder and CEO, Orca Security

Security teams struggle to proactively address risks in cloud-native environments that are increasingly complex, distributed and ephemeral, said Gil Geron, co-founder and CEO of Orca Security.

See Also: Agentic AI and the Future of Automated Threats

Traditional agent-based approaches fail when machines appear and disappear within minutes. Without accurate data and operational context, security teams risk issuing ineffective alerts that erode trust with engineering teams and fail to address underlying vulnerabilities.

Geron recommends shifting remediation to the source through infrastructure as code. "The opportunity to move remediation as much as possible to the left, to the code, to the code development, is tremendous." By fixing vulnerabilities at the root cause in code rather than chasing individual instances in production, organizations can transform millions of alerts into a handful of actionable fixes executed in minutes.

In this video interview with Information Security Media Group at AWS re:Invent 2025, Geron also discussed:

  • The benefits of integrating AI capabilities into existing cloud and network infrastructure;
  • Why simplicity is increasingly becoming a competitive advantage in cybersecurity;
  • How security teams can transform long remediation cycles into rapid execution loops.

Geron has more than 20 years of experience leading and delivering cybersecurity products. Before co-founding Orca Security, Geron spent nearly 11 years at Check Point Software, culminating in a 19-month stint overseeing the company's cybersecurity gateway and cloud products.


About the Author

Michael Novinson

Michael Novinson

Executive Editor, Business, ISMG

Novinson is responsible for covering the vendor and technology landscape. Prior to joining ISMG, he spent four and a half years covering all the major cybersecurity vendors at CRN, with a focus on their programs and offerings for IT service providers. He was recognized for his breaking news coverage of the August 2019 coordinated ransomware attack against local governments in Texas as well as for his continued reporting around the SolarWinds hack in late 2020 and early 2021.




Around the Network

Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing bankinfosecurity.com, you agree to our use of cookies.