Orca Security Reviews

Name: Orca Security
Brand: Orca Security
Rating: 4.5 (19 reviews)

Vendor: Orca Security

4.5 out of 5

19 reviews
100% willing to recommend

168 followers

Post review

What is Orca Security?

Orca Security is the pioneer of agentless cloud security that is trusted by hundreds of enterprises globally. Orca makes cloud security possible for enterprises moving to and scaling in the cloud with its patented SideScanning™ technology and Unified Data Model. The Orca Cloud Security Platform delivers the world's most comprehensive coverage and visibility of risks across AWS, Azure, Google Cloud and Kubernetes.

At Orca Security, we’re on a mission to make it fast, easy, and cost effective for organizations to address critical cloud security issues so they can operate in the cloud with confidence.

Get the Orca Security Buyer's Guide and find out what your peers are saying about Orca Security, Wiz, Microsoft Defender for Cloud and more!

Orca Security is the #2 ranked solution in top Cloud Detection and Response (CDR) solutions, #6 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #6 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #6 ranked solution in top Data Security Posture Management (DSPM) solutions, #8 ranked solution in Cloud Workload Protection Platforms, #9 ranked solution in top Vulnerability Management solutions, and #9 ranked solution in Container Security Solutions. PeerSpot users give Orca Security an average rating of 9.0 out of 10. Orca Security is most commonly compared to Wiz: Orca Security vs Wiz. Orca Security is popular among the large enterprise segment, accounting for 63% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.

Helped 838,713 peers since 2012

Featured reviews

CHINTAN MEHTA

Cloud Security Automation Engineer at a financial services firm with 10,001+ employees

The documentation for Orca Security could be improved. The compliance framework also needs enhancements, especially concerning integrations with other tools like ServiceNow's vulnerability modules, which are not as mature as expected. It should also increase its capability to ingest data from other security tools like CloudSight for endpoint detection and provide real-time monitoring.

Read full review

Shahar Geiger Maor

CISO at a recruiting/HR firm with 11-50 employees

The main drawback in an agentless approach is that if the solution detects a virus or malware in the environment, we need to manually remove it. But from my experience with other production environments, it's not straightforward to install agents in the hope they will automatically remediate viruses, even from production environments. If you make mistakes, you can cause huge damage to your environment and, when it comes to production, there is zero tolerance for errors. And realistically, you can't use the most important feature of an agent, which is the remediation, because remediating on production is not something that is easy to do. Orca's agentless approach makes more sense. Even if you have an agent, it takes resources. In addition, you need to deploy, maintain, and update an agent, which amounts to a lot of unnecessary work. And lastly, while it's true that an agent sees more when compared with an agentless solution, the gap is very small. In the end, to make sure that we progress and that our security level is increasing, we need to take action. Orca is only a detection tool. It shows you the problems, but you need to make sure that the problems are fixed. It's a fair trade-off because production is a different environment. It's not like endpoint security where the cost of ruining an endpoint is worth the risk. You would rather kill an endpoint than risk being infected with malware. But this is not the same approach for data center or cloud security. Ultimately, the ability to auto-remediate is something that I would like to see.

Read full review

Cédric Thian-Meng

Presales Security Engineer / CSM at Cybersel Group

Orca Security has patented technologies. It's an agentless solution, so you don't need to install an agent. Instead, it contacts your account provider and fetches metadata, eliminating the need for snapshots or reserved space to copy client infrastructure. The multi-cloud capability displays essential information and potential vulnerabilities with granular detail. For instance, it identifies paths that attackers might exploit to gain root or admin access to machines. It is comprehensive, covering a wide range of software needs. They also integrate with CI/CD pipelines, enabling developers to ensure security from the early stages of code deployment. This integration provides a 100% guarantee on security, safeguarding images, configurations, and other crucial information throughout the development process.

Read full review

Orca Security mindshare

Product category:

As of February 2025, the mindshare of Orca Security in the Cloud Security Posture Management (CSPM) category stands at 6.9%, down from 9.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM)

PeerAnalyst reports

Type	Title	Date
Category	Cloud Security Posture Management (CSPM)	Feb 22, 2025	Download
Product	Reviews, tips, and advice from real users	Feb 22, 2025	Download
Comparison	Orca Security vs Wiz	Feb 22, 2025	Download
Comparison	Orca Security vs Cortex Cloud by Palo Alto Networks	Feb 22, 2025	Download
Comparison	Orca Security vs Microsoft Defender for Cloud	Feb 22, 2025	Download

Title	Rating	Mindshare	Recommending
Wiz	4.5	24.0%	100%	20 interviews Add to research
Microsoft Defender for Cloud	4.0	10.8%	94%	74 interviews Add to research

Valuable Features

Orca Security's critical features include agentless deployment, comprehensive visibility, and SideScanning technology, providing deep insights without system performance impact. Users appreciate vulnerability prioritization, streamlining tasks, and integration with CI/CD pipelines. Its dashboard and reporting capabilities offer user-friendly interfaces and automated remediation. Orca's strength in multi-cloud environments, container security, and compliance management enhances security posture significantly. The patent-pending technologies and seamless integration allow organizations to manage complexities efficiently while maintaining security best practices.

"I find Orca Security's CIEM feature invaluable, as it focuses on entitlement and posture management, identifying assets with older OS versions, and asset misconfiguration."
"I find Orca Security's CIEM feature invaluable, as it focuses on entitlement and posture management, identifying assets with older OS versions, and asset misconfiguration."
"I recommend Orca Security to others looking for a cloud security solution due to its seamless integration and side-scanning technology that does not hamper cloud asset performance."

Room for Improvement

Orca Security could enhance its real-time risk assessment and provide more comprehensive data center support. Users desire better automatic remediation, more frequent scanning, and improved user education. There are requests for dashboard clarity, expanded alert options, seamless integrations with ticketing systems, anti-malware features, and code-level security checks. Improvements in compliance frameworks, load speed, alert snoozing, and scan frequency are also sought, alongside enhanced support for private clouds and additional customization in reporting and security frameworks.

"A notable limitation with Orca Security is its scanning feature. The automatic scan only runs every 24 hours, and if an alert is remediated within an hour, it still remains until the next scheduled scan."
"The automatic scan only runs every 24 hours, and if an alert is remediated within an hour, it still remains until the next scheduled scan."
"Orca Security could improve its ticket creation process. Currently, it allows for creating tickets in only one bucket, which requires monitoring to redirect tickets to the appropriate team."

ROI

Orca Security generates considerable ROI through cost savings and efficiency enhancements. Users report reduced overhead and staffing costs by avoiding additional hires, streamlining operations, and facilitating swift cloud security management. The software replaces several existing tools, offers immediate time-to-value, and is updated without extra charges. Its agentless technology and comprehensive insights simplify security for teams, making it integral to cloud strategies. Users recognize its substantial financial and operational benefits despite its premium pricing.

Pricing

Orca Security's pricing model is generally competitive but often perceived as high, especially for smaller organizations. Pricing depends on cloud workloads, environments, and assets, with discounts for strategic partners. Users appreciate its all-inclusive pricing, avoiding extra costs for features. They note its alignment with market demands but suggest better pricing strategies for enterprises with millions of assets. Although not the cheapest, Orca's comprehensive features justify the cost for many users, supporting flexible subscription options.

"Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."
"Orca Security is cheaper compared to other solutions in the same space."
"The price is a bit expensive for smaller organizations."

Popular Use Cases

Users employ Orca Security for cloud visibility, vulnerability identification, and security posture management, often in AWS, Azure, and Google Cloud environments. They appreciate its ability to manage configurations, ensure compliance with various standards, and provide an agentless approach, reducing deployment complexity. Orca Security is commonly used for monitoring applications, databases, and network setups while offering insights into threats, vulnerabilities, and misconfigurations, making it essential for cloud-based infrastructures and DevSecOps collaborations.

Service and Support

Orca Security provides responsive and competent customer service, frequently praised for quick responses and effective support. Many rate their assistance highly, appreciating their willingness to incorporate client feedback. They utilize a Slack channel for real-time communication with key personnel. While some encounter occasional delays or expertise gaps, Orca Security's team is generally seen as helpful, consistently addressing issues efficiently and supporting configuration needs. Their support efforts contribute significantly to customers’ satisfaction and trust.

Deployment

Orca Security's initial setup is praised for its simplicity and speed. Users highlight the agentless deployment, which requires minimal effort, often completing in minutes. They appreciate the ease of integration with cloud accounts and the immediate visibility it provides. Many mention the straightforward process involving just a few steps, such as inputting admin credentials. The setup is described as intuitive, lightweight, reducing overhead, and efficient for both cloud and on-premises environments.

Scalability

Orca Security is considered highly scalable, easily deploying across extensive environments and supporting multiple cloud providers. Users report seamless integration and automatic scaling capabilities, handling significant workloads efficiently without performance issues. The tool requires minimal manual input, allowing rapid adjustments and monitoring of cloud environments. Scalability ratings are consistently high, reflecting its effectiveness in managing large numbers of assets and accounts, while avoiding complications seen with agent-based systems.

Stability

Many users report Orca Security's stability as strong, citing minimal issues. While some experienced downtime or early interface bugs, these were rare and often resolved quickly. Users praise it for its consistent performance and reliability, noting it operates smoothly without major interruptions. Most users express confidence in its ability to handle their needs efficiently, rating its stability highly, often nine or ten out of ten, with little downtime or complaints.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Orca Security Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

14%

Manufacturing Company

University

Government

Retailer

Healthcare Company

Insurance Company

Educational Organization

Construction Company

Comms Service Provider

Energy/Utilities Company

Media Company

Non Profit

Real Estate/Law Firm

Wholesaler/Distributor

Outsourcing Company

Performing Arts

Legal Firm

Hospitality Company

Transportation Company

Recreational Facilities/Services Company

Logistics Company

Consumer Goods Company

Pharma/Biotech Company

Compare Orca Security with alternative products

Learn more about Orca Security

Key Platform Features:

Agentless: Complete, centralized coverage of the entire cloud estate, without the need for installing and configuring agents or layering together multiple siloed tools. Full visibility of cloud misconfigurations, vulnerabilities, workload protection, malware scanning, image scanning, file integrity monitoring and more.
Asset Inventory: Get a complete inventory of all your public cloud assets, including detailed information on installed OSes, software, and applications, as well as data and network assets such as storage buckets, Virtual Private Clouds (VPCs), and Security Groups.

Attack Path Analysis: Visualize attack vectors to critical assets or crown jewels. See which assets are susceptible to lateral movement, assume roles, privilege escalation, and more.

Risk Prioritization: Prioritize the 1% of risks that matter the most, based on impact scores. Secure the vulnerabilities and misconfigured targets (critical assets) and eliminate the potential risks residing on the attack paths to those targets.
Cloud Threat Detection: Monitor for malicious activity within your entire cloud estate. Be aware of detected threats, user behavior anomalies and more.

Breach Forensics: Log every change and all activity into a central repository for investigation procedures to confirm or deny entry and compromises within the cloud estate.
Cloud To Dev (Shift Left): Orca’s built-in shift left capabilities enables DevOps to focus more security attention earlier in the CI/CD pipelines. Security teams are able to trace a production risk (misconfiguration or vulnerability) directly to the original source code repository from which it came, even down to the exact line of code that is at the root of the identified risk.
Compliance: Choose from over 60 preconfigured compliance frameworks, cloud security best practices, CIS Benchmarks, or design and build your own compliance framework for fast and continuous reporting.
Security Score: The Orca Security Score is found on Orca’s Risk Dashboard and is updated daily. The overall score is calculated based on performance in the following five categories - Suspicious Activity, IAM, Data at Risk, Vulnerable Assets, and Responsiveness. Since the scores are percentage based and not raw numbers, you can objectively make comparisons to other organizations within your industry or business units of different sizes. In addition to reporting to senior management, the Orca Security Score can help with internal self-monitoring, as a way of measuring risk mitigation efforts, to know where to focus efforts, and track progress.

Orca Security Benefits