Orca Security Reviews

Name: Orca Security
Brand: Orca Security
Rating: 4.6 (18 reviews)

Vendor: Orca Security

4.6 out of 5

18 reviews
100% willing to recommend

164 followers

Post review

What is Orca Security?

Orca Security is the pioneer of agentless cloud security that is trusted by hundreds of enterprises globally. Orca makes cloud security possible for enterprises moving to and scaling in the cloud with its patented SideScanning™ technology and Unified Data Model. The Orca Cloud Security Platform delivers the world's most comprehensive coverage and visibility of risks across AWS, Azure, Google Cloud and Kubernetes.

At Orca Security, we’re on a mission to make it fast, easy, and cost effective for organizations to address critical cloud security issues so they can operate in the cloud with confidence.

Get the Orca Security Buyer's Guide and find out what your peers are saying about Orca Security, Wiz, Prisma Cloud by Palo Alto Networks and more!

Orca Security is the #1 ranked solution in top Cloud Detection and Response (CDR) solutions, #5 ranked solution in top Data Security Posture Management (DSPM) solutions, #6 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #7 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #9 ranked solution in top Vulnerability Management solutions, #9 ranked solution in Cloud Workload Protection Platforms, and #10 ranked solution in Container Security Solutions. PeerSpot users give Orca Security an average rating of 9.2 out of 10. Based on the analysis of the 18 most recent Orca Security reviews, the overall sentiment is positive, with a sentiment score of 7.8. Orca Security is most commonly compared to Wiz: Orca Security vs Wiz. Orca Security is popular among the large enterprise segment, accounting for 63% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.

Helped 823,875 peers since 2012

Featured reviews

Cédric Thian-Meng

Presales Security Engineer / CSM at Cybersel Group

Orca Security has patented technologies. It's an agentless solution, so you don't need to install an agent. Instead, it contacts your account provider and fetches metadata, eliminating the need for snapshots or reserved space to copy client infrastructure. The multi-cloud capability displays essential information and potential vulnerabilities with granular detail. For instance, it identifies paths that attackers might exploit to gain root or admin access to machines. It is comprehensive, covering a wide range of software needs. They also integrate with CI/CD pipelines, enabling developers to ensure security from the early stages of code deployment. This integration provides a 100% guarantee on security, safeguarding images, configurations, and other crucial information throughout the development process.

Read full review

CHINTAN MEHTA

Cloud Security Automation Engineer at a financial services firm with 10,001+ employees

The documentation for Orca Security could be improved. The compliance framework also needs enhancements, especially concerning integrations with other tools like ServiceNow's vulnerability modules, which are not as mature as expected. It should also increase its capability to ingest data from other security tools like CloudSight for endpoint detection and provide real-time monitoring.

Read full review

Shahar Geiger Maor

CISO at a recruiting/HR firm with 11-50 employees

The main drawback in an agentless approach is that if the solution detects a virus or malware in the environment, we need to manually remove it. But from my experience with other production environments, it's not straightforward to install agents in the hope they will automatically remediate viruses, even from production environments. If you make mistakes, you can cause huge damage to your environment and, when it comes to production, there is zero tolerance for errors. And realistically, you can't use the most important feature of an agent, which is the remediation, because remediating on production is not something that is easy to do. Orca's agentless approach makes more sense. Even if you have an agent, it takes resources. In addition, you need to deploy, maintain, and update an agent, which amounts to a lot of unnecessary work. And lastly, while it's true that an agent sees more when compared with an agentless solution, the gap is very small. In the end, to make sure that we progress and that our security level is increasing, we need to take action. Orca is only a detection tool. It shows you the problems, but you need to make sure that the problems are fixed. It's a fair trade-off because production is a different environment. It's not like endpoint security where the cost of ruining an endpoint is worth the risk. You would rather kill an endpoint than risk being infected with malware. But this is not the same approach for data center or cloud security. Ultimately, the ability to auto-remediate is something that I would like to see.

Read full review

Orca Security mindshare

Product category:

As of December 2024, the mindshare of Orca Security in the Cloud Security Posture Management (CSPM) category stands at 8.0%, down from 10.8% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM)

PeerAnalyst reports

Type	Title	Date
Category	Cloud Security Posture Management (CSPM)	Dec 18, 2024	Download
Product	Reviews, tips, and advice from real users	Dec 18, 2024	Download
Comparison	Orca Security vs Prisma Cloud by Palo Alto Networks	Dec 18, 2024	Download
Comparison	Orca Security vs Wiz	Dec 18, 2024	Download
Comparison	Orca Security vs Microsoft Defender for Cloud	Dec 18, 2024	Download

Title	Rating	Mindshare	Recommending
Wiz	4.5	25.3%	100%	20 interviews Add to research
Prisma Cloud by Palo Alto Networks	4.2	19.5%	98%	108 interviews Add to research

Valuable Features

Orca Security's most valued features are extensive visibility into environments without agents, SideScanning technology simplifying insights, effective prioritization of vulnerabilities, and its comprehensive dashboard. Users appreciate its agentless deployment, real-time monitoring, compliance checking, and user-friendly interface. It enables organizations to focus on critical issues efficiently by eliminating the need for multiple tools, integrates with CI/CD pipelines, and provides robust reporting and alert capabilities, enhancing security posture greatly.

"I recommend Orca Security to others looking for a cloud security solution due to its seamless integration and side-scanning technology that does not hamper cloud asset performance."
"Once our organization is configured, any cloud account under that organization is automatically detected in Orca Security, along with all the assets associated with it."
"The best features of Orca Security include its ability to perform a lot of security controls without requiring any installation of agents, making it very easy to set up."

Room for Improvement

Orca Security could enhance its dashboard interface for improved ease of use and customization. More automatic remediation options and expanded cloud coverage are desired. Integrations with non-standard systems and third-party vendors need development. There is potential for growth in malware detection libraries and security checks at the code level. User education and communication about new features should be prioritized. Improvement in handling alerts, compliance frameworks, and documentation would be advantageous.

"Orca Security could improve its ticket creation process. Currently, it allows for creating tickets in only one bucket, which requires monitoring to redirect tickets to the appropriate team."
"Orca Security could improve its ticket creation process."
"The documentation for Orca Security could be improved."

ROI

Orca Security offers high ROI by reducing costs and saving time. It replaces multiple tools, providing comprehensive cloud security, and decreases human resource expenses. Its agentless setup and instant time-to-value simplify cloud management, even for less experienced staff. Users find it indispensable for cloud operations and appreciate the comprehensive visibility it provides. They achieve cost efficiencies by avoiding additional hires and seek competitive pricing to potentially switch, although Orca's benefits are substantial.

Pricing

Orca Security offers flexible pricing aligned with cloud usage, making it competitive with solutions like Prisma Cloud. Pricing varies based on the number of assets and environments. Users find the licensing straightforward, without hidden costs, and appreciate the comprehensive features included in the base price. Strategic partnerships may yield discounts, and the model is beneficial for enterprises managing cloud infrastructures. However, some view it as expensive for smaller businesses.

"Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."
"Orca Security is cheaper compared to other solutions in the same space."
"The price is a bit expensive for smaller organizations."

Popular Use Cases

Users deploy Orca Security to manage cloud security by identifying threats, vulnerabilities, and misconfigurations. It provides insights into the cloud risk state without directly managing assets and ensures compliance with security frameworks like CIS and NIST. By utilizing an agentless approach, Orca Security scans assets, supports cloud security posture management, facilitates configuration checks, and helps maintain updated environments across platforms such as AWS, Azure, and Google Cloud, enhancing overall cloud infrastructure security.

Service and Support

Orca Security support is highly responsive and helpful, addressing queries quickly and efficiently. Customers report positive experiences, highlighting responsiveness and competence. Some noted quick feedback implementation, frequent interactions, and real-time communication via Slack channels. While the technical team could improve in expertise, overall satisfaction rates are high, with many praising fast response and resolution times. Customers appreciate their willingness to assist with issues, understand new updates, and provide insightful guidance.

Deployment

Initial setup for Orca Security is quick and simple, taking only minutes. Users appreciate the agentless nature, requiring no complex installations. It only requires basic access permissions, making it efficient for cloud integration. Once permissions are set, Orca scans environments immediately. Users find the setup process intuitive, benefiting from clear instructions and quick deployment. The setup simplicity is a key advantage, with many expressing surprise at its ease and speed.

Scalability

Orca Security excels in scalability, adapting seamlessly across diverse organizational needs and cloud environments. Organizations experience smooth growth, with Orca handling extensive assets and accounts. Its deployment is effective across AWS, Azure, and others, without scalability issues. The lack of need for agents facilitates quick expansion, allowing enterprises to manage sizable workloads effortlessly. With various cloud accounts, it consistently maintains performance and integrates automatically, enhancing cloud security operations through agile scaling capabilities.

Stability

Many found Orca Security stable, with limited downtime experiences. Some encountered frontend issues and downtimes but noted improvements and resolutions over time. Orca Security operates reliably, efficiently managing workloads and providing expected functionalities, leading users to rate its stability highly. While initial implementation phases presented challenges, subsequent updates improved the platform significantly. Users appreciate its reliability, comparing it favorably to other tools, even though some brief downtimes were reported, often outside active usage periods.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Orca Security Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

13%

Manufacturing Company

University

Government

Retailer

Healthcare Company

Insurance Company

Educational Organization

Construction Company

Energy/Utilities Company

Media Company

Comms Service Provider

Real Estate/Law Firm

Non Profit

Performing Arts

Hospitality Company

Legal Firm

Outsourcing Company

Wholesaler/Distributor

Transportation Company

Recreational Facilities/Services Company

Logistics Company

Consumer Goods Company

Agriculture

Pharma/Biotech Company

Compare Orca Security with alternative products

Learn more about Orca Security

Key Platform Features:

Agentless: Complete, centralized coverage of the entire cloud estate, without the need for installing and configuring agents or layering together multiple siloed tools. Full visibility of cloud misconfigurations, vulnerabilities, workload protection, malware scanning, image scanning, file integrity monitoring and more.
Asset Inventory: Get a complete inventory of all your public cloud assets, including detailed information on installed OSes, software, and applications, as well as data and network assets such as storage buckets, Virtual Private Clouds (VPCs), and Security Groups.

Attack Path Analysis: Visualize attack vectors to critical assets or crown jewels. See which assets are susceptible to lateral movement, assume roles, privilege escalation, and more.

Risk Prioritization: Prioritize the 1% of risks that matter the most, based on impact scores. Secure the vulnerabilities and misconfigured targets (critical assets) and eliminate the potential risks residing on the attack paths to those targets.
Cloud Threat Detection: Monitor for malicious activity within your entire cloud estate. Be aware of detected threats, user behavior anomalies and more.

Breach Forensics: Log every change and all activity into a central repository for investigation procedures to confirm or deny entry and compromises within the cloud estate.
Cloud To Dev (Shift Left): Orca’s built-in shift left capabilities enables DevOps to focus more security attention earlier in the CI/CD pipelines. Security teams are able to trace a production risk (misconfiguration or vulnerability) directly to the original source code repository from which it came, even down to the exact line of code that is at the root of the identified risk.
Compliance: Choose from over 60 preconfigured compliance frameworks, cloud security best practices, CIS Benchmarks, or design and build your own compliance framework for fast and continuous reporting.
Security Score: The Orca Security Score is found on Orca’s Risk Dashboard and is updated daily. The overall score is calculated based on performance in the following five categories - Suspicious Activity, IAM, Data at Risk, Vulnerable Assets, and Responsiveness. Since the scores are percentage based and not raw numbers, you can objectively make comparisons to other organizations within your industry or business units of different sizes. In addition to reporting to senior management, the Orca Security Score can help with internal self-monitoring, as a way of measuring risk mitigation efforts, to know where to focus efforts, and track progress.

Orca Security Benefits