Orca Security vs Prisma Cloud by Palo Alto Networks comparison

Orca Security and Palo Alto Networks are both solutions in the Cloud-Native Application Protection Platforms (CNAPP) category. Orca Security is ranked #7 with an average rating of 8.6, while Palo Alto Networks is ranked #2 with an average rating of 8.5. Orca Security holds a 7.2% mindshare in CNAP, compared to Palo Alto Networks’s 14.5% mindshare. Additionally, 100% of Orca Security users are willing to recommend the solution, compared to 98% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 26, 2025

Prisma Cloud by Palo Alto Networks and Orca Security compete in the cloud security category. Prisma Cloud appears to have the upper hand due to its comprehensive security features and support for multi-cloud environments, though Orca's simplicity and agentless architecture also present a strong case.

Features: Prisma Cloud offers robust compliance management, effective vulnerability scanning, and cloud security posture management across multi-cloud environments. Orca Security is notable for its agentless architecture that provides deep insights and seamless integration with cloud services like AWS and Azure.

Room for Improvement: Prisma Cloud could benefit from enhanced UI customization, more intuitive navigation, and improved automation capabilities. Users also desire smoother integration with third-party services. Orca Security can improve its reporting capabilities, offer more real-time monitoring options, and broaden its integration with external tools.

Ease of Deployment and Customer Service: Prisma Cloud supports various deployment environments from on-premises to hybrid and public clouds, though its customer service receives mixed reviews. Orca Security is focused on public cloud deployments with its easy, agentless setup praised for minimal requirements and effective support.

Pricing and ROI: Prisma Cloud users find the solution costly but valuable for its multi-cloud protection. The complex licensing model can be a downside. Orca Security is seen as expensive by some, but its straightforward cloud workload-based pricing is considered cost-effective. Both solutions offer financial advantages through their comprehensive coverage and breach prevention capabilities.

To learn more, read our detailed Orca Security vs. Prisma Cloud by Palo Alto Networks Report (Updated: September 2025).

Buyer's Guide

Orca Security vs. Prisma Cloud by Palo Alto Networks

September 2025

Download the complete report

Helped 872,098 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of October 2025, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of SentinelOne Singularity Cloud Security is 4.6%, up from 2.1% compared to the previous year. The mindshare of Orca Security is 7.2%, down from 8.8% compared to the previous year. The mindshare of Prisma Cloud by Palo Alto Networks is 14.5%, down from 20.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
Product	Market Share (%)
Prisma Cloud by Palo Alto Networks	14.5%
SentinelOne Singularity Cloud Security	4.6%
Orca Security	7.2%
Other	73.7%

Cloud-Native Application Protection Platforms (CNAPP)

Featured Reviews

Ritesh P.

Senior Manager at ICICI Lombard

It's more scalable and flexible than our previous solution because we don't need to install any agents

The reporting works well, but sometimes the severity classifications are inaccurate. Sometimes, it flags an issue as high-impact, but it should be a lower severity. For example, it might highlight an exposed AWS encryption key, a critical compliance issue, but it isn't tagged as a high-risk problem. That only happens about 10 percent of the time. It shows a true positive 80-90 percent of the time.

Read full review

CHINTAN MEHTA

Cloud Security Automation Engineer at a financial services firm with 10,001+ employees

Consolidating security tools with comprehensive cloud visibility

The documentation for Orca Security could be improved. The compliance framework also needs enhancements, especially concerning integrations with other tools like ServiceNow's vulnerability modules, which are not as mature as expected. It should also increase its capability to ingest data from other security tools like CloudSight for endpoint detection and provide real-time monitoring.

Read full review

Mohammad Qaw

Senior Security Consultant at helpag

It gives you one console to see all of your assets, review their configurations, and build your processes

Most customers use Prisma Cloud for visibility and compliance. Prisma has so many features, but many organizations do not use them. They primarily use the visibility part to connect all their cloud accounts and hosts for visibility to see if they are missing any security controls or if they have any misconfigurations. You can connect it to cloud environments such as Azure, AWS, Oracle Cloud, Alibaba, etc., or to an on-prem data center. Prisma Cloud gives you so many options to automate processes related to your daily operations. When it comes to cybersecurity, you can automate things with their existing APIs. They also have out-of-the-box integrations with many solutions. I have not seen any limitations. Everything is customizable. You can do whatever you want, defining the reporting and custom use cases. They recently updated the UI, so it's much better than before.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cloud Native Security's most valuable features include cloud misconfiguration detection and remediation, compliance monitoring, a robust authentication security engine, and cloud threat detection and response capabilities."

"It is scalable, stable, and can detect any threat on a machine. It uses artificial intelligence and can lock down any virus."

"Visibility is the most important aspect."

"SentinelOne Singularity Cloud Security offers comprehensive security posture management."

"The UI is very good."

"I would definitely recommend this product to other members, vendors, or users, as it covers security posture management, auditing, documentation, and compliance management."

"Cloud Native Security helps us discover vulnerabilities in a cloud environment like open ports that allow people to attack our environment. If someone unintentionally opens a port, we are exposed. Cloud Native Security alerts us so we can remediate the problem. We can also automate it so that Cloud Native Security will fix it."

"The GUI is one of the best features. Audit reports and documentation for alerts are also valuable."

More SentinelOne Singularity Cloud Security pros

"One of the valuable features of Orca Security is its design and options that allow flexible filtering and user-friendly visualization."

"The best features of Orca Security include its ability to perform a lot of security controls without requiring any installation of agents, making it very easy to set up."

"Once our organization is configured, any cloud account under that organization is automatically detected in Orca Security, along with all the assets associated with it."

"I find Orca Security's CIEM feature invaluable, as it focuses on entitlement and posture management, identifying assets with older OS versions, and asset misconfiguration."

"The GUI features are very good. Threat intelligence is also very good."

"Orca Security has helped reduce the time it takes to address cloud security alerts."

"With its Cloud Security Posture Management capability, we have the ability to read across all of our cloud-based environments, which includes AWS and Azure. We have visibility into those environments. Seeing all vulnerabilities and configurations is really powerful for us, but ultimately, the ability to use the API to query across the fleet to understand what is the current state, what is the patch level, which ones are potentially exposed for a new CVE that just came out is even more valuable. It allows us to gather really specific intelligence through simple queries."

"The most valuable feature of Orca Security is the automated scanning tool, user-friendliness, and ease of use."

More Orca Security pros

"The UI is very good. We get all the things within a single UI."

"It is user-friendly. It has a good look and feel and reporting structure. It provides a single pane of glass. These are the things that I like."

"The policies that come prepackaged in the tool have been very valuable to us. They're accurate and they provide good guidance as to why the policy was created, as well as how to remediate anything that violates the policy."

"Prisma Cloud also provides the visibility and control you need, regardless of how complex or distributed your cloud environments become. It helps to simplify that complexity. Now we know what the best practices are, and if something is missing we know."

"Palo Alto enables us to know what security threats are happening in the background."

"The dynamic workload identity creation, attestation, and assignment is the best feature. In addition, the application dependency map across heterogeneous environments for compliance is a striking feature."

"CSPM is the most valuable feature for any organization that runs its workloads in the cloud."

"The most valuable feature is the continuous cloud compliance monitoring and alerting."

More Prisma Cloud by Palo Alto Networks pros

Cons

"The area of improvement is the cost, which is high compared to other traditional endpoint protections."

"SentinelOne Singularity Cloud Security can be improved by developing a comprehensive set of features that allow for automated workflows."

"While SentinelOne Singularity Cloud Security offers real-time response, there is room for improvement in alert accuracy."

"Currently, we would have to export our vulnerability report to an .xlsx file, and review it in an Excel spreadsheet, and then we sort of compile a list from there. It would be cool if there was a way to actually toggle multiple applications for review and then see those file paths on multiple users rather than only one user at a time or only one application at a time."

"To enhance the notification system's efficiency, resolved issues should be promptly removed from the portal."

"The application module focuses on the different codes and libraries that can be run on the machines. It is very important for Singularity EDR to detect what type of codes and what type of libraries can run in the machine. If they can implement a white list or a black list of codes or libraries that can be used in the machine, it would be very helpful. They can focus more on the application module."

"The Kubernetes scanning on the Oracle Cloud needs to be improved. It's on the roadmap. AWS has this capability, but it's unavailable for Oracle Cloud."

"In version 2, a lot of rules have been deployed for Kubernetes security and CDR, which makes a lot of issues of critical severity, whereas they are not critical or of high severity. There is a mismatch of severities."

More SentinelOne Singularity Cloud Security cons

"Orca needs improvement in snoozing or dismissing specific alarms. Currently, snoozing dismisses all future vulnerabilities related to a CVE."

"It's not all clouds that they are currently onboarded with. For instance, they are not yet with public cloud and many other private clouds."

"I would be happy if they offered more automatic remediation options. They're working on that, but the more the better. For example, if they want you to harden a server, they would offer a hardening script that would be more aware of what's going on."

"Orca Security could improve its ticket creation process. Currently, it allows for creating tickets in only one bucket, which requires monitoring to redirect tickets to the appropriate team."

"In the future, I'd like to see Orca work better with third-party vendors. Specifically, being able to provide sanitized results from third parties."

"As with all software, the user interface can always be made simpler to use. It would be helpful for people with very little knowledge, like somebody sitting behind the SOC, to allow them to be able to drill down into things a little bit easier than it is currently."

"The timeout settings could be made more customizable, as sometimes if I leave the office early, it's still running unless manually turned off."

"Orca Security could improve its ticket creation process."

More Orca Security cons

"The UX part of Prisma's user interface could be simplified and the metrics tool should be highlighted more."

"We have discovered that Prisma is not functioning properly with GCP."

"Having auto Defender upgrades so that we do not have to upgrade Defender manually would be helpful."

"The cost of Prisma Cloud by Palo Alto Networks is too high. I would also appreciate the addition of NLP to reduce the learning curve and make configuring queries more user-friendly."

"The user interface should be improved and made easier."

"There are hundreds of built-in policies for AWS and Azure, but GCP and Oracle are not covered as much as AWS. There is a lot of work to do on that part. There is, obviously, a tiny bit of favoritism towards AWS because it has the most market share."

"The UI is the worst."

"They need to improve the API gateway."

More Prisma Cloud by Palo Alto Networks cons

Pricing and Cost Advice

"PingSafe is cost-effective for the amount of infrastructure we have. It's reasonable for what they offer compared to our previous solution. It's at least 25 percent to 30 percent less."

"I wasn't sure what to expect from the pricing, but I was pleasantly surprised to find that it was a little less than I thought."

"While I'm slightly out of touch with pricing, I know SentinelOne is much cheaper than other products."

"PingSafe's pricing is good because it provides us with a solution."

"We have an enterprise license. It is affordable. I'm not sure, but I think we pay 150,000 rupees per month."

"It's not cheap, but it is worth the price."

"The price depends on the extension of the solution that you want to buy. If you want to buy just EDR, the price is less. XDR is a little bit more expensive. There are going to be different add-ons for Singularity."

"As a partner, we receive a discount on the licenses."

More SentinelOne Singularity Cloud Security pricing and cost advice

"The pricing depends on how many assets you have running in your cloud and how many environments you have. If you have a dev environment, test environment, and a production environment then it's really important that you have coverage for all of them."

"It is the cost of the visibility that you get. When you really sit down and think about what do you need to do to secure an environment with a low impact on the business, and you take a look out into the world, I think this tool is well justified around cost."

"Orca Security is cheaper compared to other solutions in the same space."

"We have a total of 25 licenses for this solution. The solution is on a pay-and-you-use model."

"The most expensive solution is Palo Alto. They claim to be very robust. The next most expensive is Wiz, followed by Orca and all the rest."

"I think their pricing model is aligned with market demand. Of course, Orca could probably better align their pricing model with the needs of smaller businesses as well as some larger-scale enterprises with millions of assets. But in all fairness, I think the Orca sales team has been accommodating and ensured that we're happy with the pricing."

"The price is a bit expensive for smaller organizations."

"Its license is a bit expensive."

More Orca Security pricing and cost advice

"Our licensing fees are $18,000 USD per year."

"Its licensing cost depends on the type of license such as the business license or the enterprise license. The enterprise license is costlier than the business license, but we get more visibility and more modules. If you have a multi-cloud environment and subscribe to each cloud's native CSPM tool, it is costly. If you are using a single tool like Prisma Cloud, with a single license, you can monitor all environments, such as Google Cloud, Azure, AWS, and Oracle Cloud. The cost of Prisma Cloud is less than the cost of subscribing to the CSPM tool of each cloud provider. This is where Prisma Cloud can save costs."

"Prisma Cloud is more expensive than some other solutions, but when we consider all of its use cases, the cost averages out."

"One thing we're very pleased about is how the licensing model for Prisma is based on work resources. You buy a certain amount of work resources and then, as they enable new capabilities within Prisma, it just takes those work resource units and applies them to new features. This enables us to test and use the new features without having to go back and ask for and procure a whole new product, which could require going through weeks, and maybe months, of a procurement process."

"It is fairly priced. However, its price can be better so that small banks or small organizations can afford it and adopt it to secure their environment and data."

"The pricing is good. They gave us some good discounts right at the end of the year based on the value that it brings, visibility, and the ability to build in cloud, compliance, and security within one dashboard."

"The pricing is reasonable."

"Prisma Cloud's licensing system functions as expected with a solid licensing infrastructure."

More Prisma Cloud by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

872,098 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

16%

Financial Services Firm

14%

Manufacturing Company

10%

Government

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

10%

University

Computer Software Company

15%

Financial Services Firm

14%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	46
Midsize Enterprise	20
Large Enterprise	53

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	7
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	37
Midsize Enterprise	20
Large Enterprise	55

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

See all answers

What is your experience regarding pricing and costs for PingSafe?

I think the pricing of SentinelOne Singularity Cloud Security is a bit high.

See all answers

What needs improvement with PingSafe?

One area that could be improved in SentinelOne Singularity Cloud Security is their policies; the way they have config...

See all answers

What do you like most about Orca Security?

It's for protection. It's an agentless tool. We don't need to install anything at a customer's premises. We can just ...

See all answers

What needs improvement with Orca Security?

I really love the way Orca Security worked. A potential improvement could be additional security features for the two...

See all answers

What is your primary use case for Orca Security?

We used Orca Security ( /products/orca-security-reviews ) for about two to three months until I left the company. The...

See all answers

What is your primary use case for Prisma Cloud by Palo Alto Networks?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

See all answers

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...

See all answers

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

See all answers

Comparisons

Wiz vs SentinelOne Singularity Cloud Security

Compared 11% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 5% of the time

Check Point CloudGuard CNAPP vs SentinelOne Singularity Cloud Security

Compared 4% of the time

Aqua Cloud Security Platform vs SentinelOne Singularity Cloud Security

Compared 4% of the time

More SentinelOne Singularity Cloud Security Competitors

Wiz vs Orca Security

Compared 28% of the time

Microsoft Defender for Cloud vs Orca Security

Compared 8% of the time

Upwind vs Orca Security

Compared 5% of the time

AWS Security Hub vs Orca Security

Compared 3% of the time

CrowdStrike Falcon Cloud Security vs Orca Security

Compared 3% of the time

More Orca Security Competitors

Wiz vs Prisma Cloud by Palo Alto Networks

Compared 14% of the time

Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks

Compared 10% of the time

Cyera vs Prisma Cloud by Palo Alto Networks

Compared 7% of the time

CrowdStrike Falcon Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 5% of the time

Lacework FortiCNAPP vs Prisma Cloud by Palo Alto Networks

Compared 2% of the time

More Prisma Cloud by Palo Alto Networks Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Cloud Security

October 2025

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Buyer's Guide

Orca Security

October 2025

Download Orca Security product report

Buyer's Guide

Prisma Cloud by Palo Alto Networks

October 2025

Prisma Cloud by Palo Alto Networks report

Download Prisma Cloud by Palo Alto Networks product report

Also Known As

PingSafe

No data available

Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

Overview

SentinelOne Singularity Cloud Security offers a streamlined approach to cloud security with intuitive operation and strong integration capabilities for heightened threat detection and remediation efficiency.

Singularity Cloud Security stands out for its real-time detection and response, effectively minimizing detection and remediation timelines. Its automated remediation integrates smoothly with third-party tools enhancing operational efficiency. The comprehensive console ensures visibility and support for forensic investigations. Seamless platform integration and robust support for innovation are notable advantages. Areas for development include improved search functionality, affordability, better firewall capabilities for remote users, stable agents, comprehensive reporting, and efficient third-party integrations. Clarity in the interface, responsive support, and real-time alerting need enhancement, with a call for more automation and customization. Better scalability and cost-effective integration without compromising capabilities are desired.

What are SentinelOne Singularity Cloud Security's standout features?

Ease of Use: Intuitive operation simplifies navigation across platforms.
Real-Time Detection: Quick identification and response to threats.
Automated Remediation: Streamlines recovery processes with integration capabilities.
Forensic Visibility: Aids in thorough threat analysis and prevention strategies.
Comprehensive Console: Offers full visibility and historical data tracking.
Platform Integration: Supports seamless operation across cloud and hybrid environments.

What benefits should users expect from SentinelOne Singularity Cloud Security?

Enhanced Efficiency: Automation and third-party integration improve threat response.
Improved Detection: Reduces mean time to detect and respond to threats.
Operational Support: Comprehensive visibility and forensic tools aid operational decisions.
Cost Efficiency: Affordable integration with scaling capabilities without high overhead.

SentinelOne Singularity Cloud Security is deployed in industries needing robust cloud security posture management, endpoint protection, and threat hunting. Utilized frequently across AWS and Azure, it assists in monitoring, threat detection, and maintaining compliance in diverse environments while providing real-time alerts and recommendations for proactive threat management.

SentinelOne

Orca Security provides comprehensive security management with agentless visibility and SideScanning technology, ensuring efficient threat detection without performance impact.

Orca Security offers agentless visibility across multi-cloud environments, streamlining security management with features like SideScanning technology and centralized security tools. It focuses on automation, vulnerability management, and compliance checks, enhancing a company's security posture with real-time alerts and integrated threat detection. Its intuitive interface prioritizes critical issues, making it suitable for managing DevSecOps processes efficiently.

What are the key features of Orca Security?

Agentless Visibility: Gain comprehensive insights into cloud environments without deploying agents.
SideScanning Technology: Detect threats and vulnerabilities efficiently across platforms.
Comprehensive Security Management: Centralizes security across AWS, GCP, and Azure with minimal setup effort.
CIEM Feature: Enhances security posture with integrated identity and access management.
Real-Time Alerts: Provide immediate awareness of security threats and vulnerabilities.
Automation and Compliance: Streamline processes with automated vulnerability management and compliance checks.

What benefits and ROI should companies look for in Orca Security?

Centralized Management: Simplifies security operations by consolidating tools across cloud environments.
Improved Security Posture: Reduces alerts and manages threats effectively with detailed insights.
Efficient Threat Detection: Enhances response capabilities with integrated threat detection and real-time alerts.
Easy Deployment and Setup: Facilitates quick implementation without complex configurations.
Enhanced Integration: Supports seamless integration with existing security frameworks and processes.

Companies in industries such as finance, healthcare, and technology leverage Orca Security for cloud security posture management, ensuring compliance with standards and securing applications and databases. Its agentless approach provides comprehensive visibility across AWS, GCP, and Azure, enhancing risk assessment and vulnerability management without impacting asset performance.

Orca Security

Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.

Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.

What are the important features of Prisma Cloud?

Dynamic Workload Identity: Enables unique workload identities for security purposes.
Automated Forensics: Offers detailed insights into threats and incidents automatically.
Runtime Protection: Provides ongoing detection and blocking of suspicious activities.
Multi-Cloud Security: Protects environments on AWS, Azure, and GCP simultaneously.
Compliance Management: Assists in meeting regulatory standards across cloud platforms.

What benefits or ROI should users consider in reviews?

Enhanced Security Posture: Strengthens cloud defense lines with proactive monitoring.
Centralized Dashboard: Offers unified oversight of multiple cloud environments.
Efficient Misconfiguration Handling: Quickly identifies and addresses security lapses.
Seamless CI/CD Integration: Integrates security within development workflows.
Improved Visibility: Provides transparent insights into security operations and alerts.

Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.

Palo Alto Networks

Sample Customers

Information Not Available

BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

Buyer's Guide

Orca Security vs. Prisma Cloud by Palo Alto Networks

September 2025

Free Report: Orca Security vs. Prisma Cloud by Palo Alto Networks

Find out what your peers are saying about Orca Security vs. Prisma Cloud by Palo Alto Networks and other solutions. Updated: September 2025.

DOWNLOAD NOW

872,098 professionals have used our research since 2012.

See our Orca Security vs. Prisma Cloud by Palo Alto Networks report.

See our list of best Cloud-Native Application Protection Platforms (CNAPP) vendors, best Container Security vendors, and best Cloud Security Posture Management (CSPM) vendors.

We monitor all Cloud-Native Application Protection Platforms (CNAPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.