AWS Security Hub vs Orca Security comparison

Read 21 Orca Security reviews

7,521 Views
5,415 Comparison Views

100% willing to recommend

AWS Security Hub

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jul 27, 2025

Orca Security and AWS Security Hub are two key players in cloud security. Orca Security stands out with its agentless scanning and intuitive usability while AWS Security Hub is preferred for its seamless integration with AWS services and lower cost.

Features: Orca Security's SideScanning technology offers comprehensive cloud visibility without agents. It effectively prioritizes vulnerabilities to manage risks efficiently and supports multi-cloud environments, including container security. AWS Security Hub is noted for its AWS services integration, comprehensive compliance checks, and centralized security management but lacks the detailed agentless scanning provided by Orca.

Room for Improvement: Orca Security can enhance its auto-remediation features, third-party integrations, and alert customization. AWS Security Hub could improve real-time scanning, cross-cloud adaptability, and customizable dashboards to better support hybrid environments.

Ease of Deployment and Customer Service: Orca Security is praised for quick deployment and proactive support, benefiting from a cloud-native design that simplifies updates. AWS Security Hub is easy to set up within AWS but faces challenges in multi-cloud deployments with adequate customer service needing enhancements for diverse environments.

Pricing and ROI: Orca Security, though priced higher, offers a quick ROI through comprehensive features and reduced staffing costs, proving valuable for enhanced security posture. AWS Security Hub is more affordable, providing flexibility in pricing models and excelling in cost-effective AWS ecosystem integration.

To learn more, read our detailed AWS Security Hub vs. Orca Security Report (Updated: September 2025).

AWS Security Hub vs. Orca Security

September 2025

Download the complete report

Helped 871,829 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Security Hub

Ranking in Cloud Security Posture Management (CSPM)

13th

Average Rating

7.6

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Security Orchestration Automation and Response (SOAR) (5th)

Orca Security

Ranking in Cloud Security Posture Management (CSPM)

11th

Average Rating

9.0

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

Vulnerability Management (15th), Container Security (18th), Cloud Workload Protection Platforms (CWPP) (10th), API Security (8th), Cloud-Native Application Protection Platforms (CNAPP) (7th), Data Security Posture Management (DSPM) (9th), Cloud Detection and Response (CDR) (3rd)

Mindshare comparison

As of October 2025, in the Cloud Security Posture Management (CSPM) category, the mindshare of AWS Security Hub is 4.1%, down from 5.0% compared to the previous year. The mindshare of Orca Security is 5.7%, down from 7.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM) Market Share Distribution
Product	Market Share (%)
Orca Security	5.7%
AWS Security Hub	4.1%
Other	90.2%

Cloud Security Posture Management (CSPM)

Featured Reviews

Karthik Ekambaram

Director at Scybers

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Read full review

CHINTAN MEHTA

Cloud Security Automation Engineer at a financial services firm with 10,001+ employees

Consolidating security tools with comprehensive cloud visibility

The documentation for Orca Security could be improved. The compliance framework also needs enhancements, especially concerning integrations with other tools like ServiceNow's vulnerability modules, which are not as mature as expected. It should also increase its capability to ingest data from other security tools like CloudSight for endpoint detection and provide real-time monitoring.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud."

"Easily integrates with third-party tools"

"The most beneficial aspect of Security Hub is its proactive capability, allowing us to identify potential security issues before they escalate."

"I rate Security Hub ten out of ten for stability."

"Cloudposse is a valuable feature as it guarantees my security."

"The advantage is that it is cloud-native, and we do not need to install agents or sensors to find findings."

"The solution shows us our compliance score."

More AWS Security Hub pros

"I recommend Orca Security to others looking for a cloud security solution due to its seamless integration and side-scanning technology that does not hamper cloud asset performance."

"The initial setup is very easy."

"The best features of Orca Security include its ability to perform a lot of security controls without requiring any installation of agents, making it very easy to set up."

"I find Orca Security's CIEM feature invaluable, as it focuses on entitlement and posture management, identifying assets with older OS versions, and asset misconfiguration."

"The best features of Orca Security include its ability to perform a lot of security controls without requiring any installation of agents, making it very easy to set up."

"Once our organization is configured, any cloud account under that organization is automatically detected in Orca Security, along with all the assets associated with it."

"The vulnerability management does not require network scanning or agent technology, so I don't need to modify any of my products in order to do vulnerability assessments."

"There are so many valuable features that I could list, but one that I appreciate is the PCI DSS compliance report."

More Orca Security pros

Cons

"It is not flexible for multi-cloud environments."

"The solution will only give you insight if you have configure rule enabled. It should work more like Prisma Cloud and Dome9 which have a better approach."

"Many findings are too generic or irrelevant to the environment, which can lead to false positives."

"There is room for improvement in implementing AI capabilities. It would be beneficial for Security Hub to implement preventative measures and to directly apply recommendations instead of just suggesting them."

"The user interface, graphs, and dashboards of the solution could improve in the future. They are not very sophisticated and could use an update."

"Shortening the response time for support tickets, particularly in production issues, could make the service more efficient."

"It's not user-friendly. Too much going on, too many unnecessary findings, not very visual. You can't do much compared to other similar tools that are cheaper and better."

"The solution lacks self-sufficiency."

More AWS Security Hub cons

"The main drawback in an agentless approach is that if the solution detects a virus or malware in the environment, we need to manually remove it. But from my experience with other production environments, it's not straightforward to install agents in the hope they will automatically remediate viruses, even from production environments... Ultimately, the ability to auto-remediate is something that I would like to see."

"We are PCI DSS compliant, so we need to scan our environment externally with tools vetted by the PCI DSS organization. Orca doesn't scan the environment externally. It only scans what's currently in the cloud."

"There were a couple of times when Orca was down when I was trying to access it. I work strange hours because all of my team is in the UK right now. It was 2 a.m. on a Saturday and I was trying to log in but it wasn't working. But relative to my other security tools, Orca is definitely the most stable that I've seen."

"Orca needs improvement in snoozing or dismissing specific alarms."

"Another improvement would be that, in addition to focusing on endpoint compliance, they would focus on general compliance."

"The documentation for Orca Security could be improved."

"The presentation of the data in the dashboard is a little bit chaotic."

"Orca Security can be improved as there should be some kind of central pane of glass. Similar to how cloud management works, Orca Security should have something comparable."

More Orca Security cons

Pricing and Cost Advice

"The price of AWS Security Hub is average compared to other solutions."

"AWS Security Hub's pricing is pretty reasonable."

"The pricing is fine. It is not an expensive tool."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"Security Hub is not an expensive solution."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"There are multiple subscription models, like yearly, monthly, and packaged."

"The price of the solution is not very competitive but it is reasonable."

"Overall, the pricing is reasonable and the discounts have been acceptable."

"We have a total of 25 licenses for this solution. The solution is on a pay-and-you-use model."

"Orca Security is cheaper compared to other solutions in the same space."

"While it's competitive with Palo Alto Prisma, I think Orca's list price is very high. I would advise Orca to lower it because, at that price, I might consider alternatives like Wiz, which also offers agentless services."

"Its license is a bit expensive."

"The most expensive solution is Palo Alto. They claim to be very robust. The next most expensive is Wiz, followed by Orca and all the rest."

"It is the cost of the visibility that you get. When you really sit down and think about what do you need to do to secure an environment with a low impact on the business, and you take a look out into the world, I think this tool is well justified around cost."

"Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."

More Orca Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

871,829 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at Bell

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

12%

Manufacturing Company

10%

Government

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

10%

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	5
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	7
Large Enterprise	5

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...

What do you like most about AWS Security Hub?

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.

What needs improvement with AWS Security Hub?

What do you like most about Orca Security?

It's for protection. It's an agentless tool. We don't need to install anything at a customer's premises. We can just scan the entire assets in the cloud.

What needs improvement with Orca Security?

I really love the way Orca Security worked. A potential improvement could be additional security features for the two-step authentication, such as fingerprint recognition similar to what Checkpoint...

What is your primary use case for Orca Security?

We used Orca Security ( /products/orca-security-reviews ) for about two to three months until I left the company. The product itself is really good. It helped us streamline the way we access our se...

Microsoft Sentinel vs AWS Security Hub

Comparisons

Compared 37% of the time

Wiz vs AWS Security Hub

Compared 11% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 7% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 5% of the time

Datadog vs AWS Security Hub

Compared 2% of the time

More AWS Security Hub Competitors

Wiz vs Orca Security

Compared 28% of the time

Microsoft Defender for Cloud vs Orca Security

Compared 8% of the time

Upwind vs Orca Security

Compared 5% of the time

Prisma Cloud by Palo Alto Networks vs Orca Security

Compared 5% of the time

CrowdStrike Falcon Cloud Security vs Orca Security

Compared 3% of the time

More Orca Security Competitors

Product Reports

Download AWS Security Hub product report

AWS Security Hub

October 2025

Download Orca Security product report

October 2025

Also Known As

SQRRL

No data available

Overview

AWS Security Hub is a comprehensive security service that provides a centralized view of security alerts and compliance status across an AWS environment. It collects data from various AWS services, partner solutions, and AWS Marketplace products to provide a holistic view of security posture. With Security Hub, users can quickly identify and prioritize security issues, automate compliance checks, and streamline remediation efforts.

The service offers a range of features including continuous monitoring, threat intelligence integration, and customizable dashboards. It also provides automated insights and recommendations to help users improve their security posture. Security Hub integrates with other AWS services like Amazon GuardDuty, AWS Config, and AWS Macie to provide a unified security experience. Additionally, it supports integration with third-party security tools through its API, allowing users to leverage their existing security investments.

With its user-friendly interface and powerful capabilities, AWS Security Hub is a valuable tool for organizations looking to enhance their security and compliance posture in the cloud.

Amazon Web Services (AWS)

Orca Security provides comprehensive security management with agentless visibility and SideScanning technology, ensuring efficient threat detection without performance impact.

Orca Security offers agentless visibility across multi-cloud environments, streamlining security management with features like SideScanning technology and centralized security tools. It focuses on automation, vulnerability management, and compliance checks, enhancing a company's security posture with real-time alerts and integrated threat detection. Its intuitive interface prioritizes critical issues, making it suitable for managing DevSecOps processes efficiently.

What are the key features of Orca Security?

Agentless Visibility: Gain comprehensive insights into cloud environments without deploying agents.
SideScanning Technology: Detect threats and vulnerabilities efficiently across platforms.
Comprehensive Security Management: Centralizes security across AWS, GCP, and Azure with minimal setup effort.
CIEM Feature: Enhances security posture with integrated identity and access management.
Real-Time Alerts: Provide immediate awareness of security threats and vulnerabilities.
Automation and Compliance: Streamline processes with automated vulnerability management and compliance checks.

What benefits and ROI should companies look for in Orca Security?

Centralized Management: Simplifies security operations by consolidating tools across cloud environments.
Improved Security Posture: Reduces alerts and manages threats effectively with detailed insights.
Efficient Threat Detection: Enhances response capabilities with integrated threat detection and real-time alerts.
Easy Deployment and Setup: Facilitates quick implementation without complex configurations.
Enhanced Integration: Supports seamless integration with existing security frameworks and processes.

Companies in industries such as finance, healthcare, and technology leverage Orca Security for cloud security posture management, ensuring compliance with standards and securing applications and databases. Its agentless approach provides comprehensive visibility across AWS, GCP, and Azure, enhancing risk assessment and vulnerability management without impacting asset performance.

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com

BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino