Try our new research platform with insights from 80,000+ expert users
Orca Security Logo

Orca Security pros and cons

4.6 out of 5
163 followers
Post review

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Orca Security provides exceptional visibility into cloud environments, highlighting risks and vulnerabilities effectively.
Orca Security's SideScanning technology simplifies the assessment process by requiring only permissions, avoiding complex setups.
Orca Security ranks and contextualizes security gaps across environments, aiding in targeted and effective risk management.
Orca Security's cross-environment visibility through its Cloud Security Posture Management capability significantly enhances security oversight.
Orca Security supports compliance with standards such as PCI DSS, aiding organizations in meeting regulatory requirements without requiring network scanning or agents.

CONS

Orca could expand its automatic remediation options, including providing scripts for server hardening.
Orca could improve general compliance checks instead of only endpoint compliance.
Orca should enhance its alert system and provide a more customizable dashboard.
Orca needs to improve third-party vendor compatibility, enabling sanitized results sharing.
Orca requires improvements in anti-malware detection and the ability to auto-remediate threats.
 

Orca Security Pros review quotes

reviewer1696863 - PeerSpot reviewer
Nov 11, 2021
Orca's SideScanning is the biggest feature. It's the 'wow' factor... With Orca's SideScanning, they just need permissions for your account and that makes it so simple.
reviewer1697910 - PeerSpot reviewer
Oct 21, 2021
Orca provides X-ray vision into everything within the cloud properties, whereas normally, this would require multiple tools.
reviewer1694079 - PeerSpot reviewer
Oct 15, 2021
The visibility Orca provides into my environment is at the highest level... When I dropped them into the environment, from the very get-go I had more insight into the risks in my environment than I had had during the entire two and a half years I had been here.
Learn what your peers think about Orca Security. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,406 professionals have used our research since 2012.
Shahar Geiger Maor - PeerSpot reviewer
Jan 25, 2022
Orca gives you great visibility into your assets. It shows you the issues and the things that you need to attend to first, by prioritizing things. You can see a lot of information that is not always visible, even to DevOps, to help you know about the machines and their status. It's very easy to see everything in a single dashboard. That makes it a very useful tool.
reviewer1729920 - PeerSpot reviewer
Nov 29, 2021
Orca's platform provides an agentless data collection facility that collects information directly from the cloud using APIs, with zero impact on performance.
TS
Oct 26, 2021
With its Cloud Security Posture Management capability, we have the ability to read across all of our cloud-based environments, which includes AWS and Azure. We have visibility into those environments. Seeing all vulnerabilities and configurations is really powerful for us, but ultimately, the ability to use the API to query across the fleet to understand what is the current state, what is the patch level, which ones are potentially exposed for a new CVE that just came out is even more valuable. It allows us to gather really specific intelligence through simple queries.
reviewer1731741 - PeerSpot reviewer
Nov 30, 2021
There are so many valuable features that I could list, but one that I appreciate is the PCI DSS compliance report.
JJ
Oct 24, 2021
Orca's dashboard is excellent. My team needs to be able to focus on specific areas for improvement in our cloud environment. And most recently, we've started to get good use out of sonar, the search capabilities, and the alert creation.
MH
Dec 8, 2021
The vulnerability management does not require network scanning or agent technology, so I don't need to modify any of my products in order to do vulnerability assessments.
MK
Jun 12, 2023
Orca Security has updated its interface, making it more user-friendly. I find it particularly useful as it allows me to easily navigate the dashboard and prioritize actions based on severity and criticality.
 

Orca Security Cons review quotes

reviewer1696863 - PeerSpot reviewer
Nov 11, 2021
I would be happy if they offered more automatic remediation options. They're working on that, but the more the better. For example, if they want you to harden a server, they would offer a hardening script that would be more aware of what's going on.
reviewer1697910 - PeerSpot reviewer
Oct 21, 2021
As with all software, the user interface can always be made simpler to use. It would be helpful for people with very little knowledge, like somebody sitting behind the SOC, to allow them to be able to drill down into things a little bit easier than it is currently.
reviewer1694079 - PeerSpot reviewer
Oct 15, 2021
There were a couple of times when Orca was down when I was trying to access it. I work strange hours because all of my team is in the UK right now. It was 2 a.m. on a Saturday and I was trying to log in but it wasn't working. But relative to my other security tools, Orca is definitely the most stable that I've seen.
Learn what your peers think about Orca Security. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,406 professionals have used our research since 2012.
Shahar Geiger Maor - PeerSpot reviewer
Jan 25, 2022
The main drawback in an agentless approach is that if the solution detects a virus or malware in the environment, we need to manually remove it. But from my experience with other production environments, it's not straightforward to install agents in the hope they will automatically remediate viruses, even from production environments... Ultimately, the ability to auto-remediate is something that I would like to see.
reviewer1729920 - PeerSpot reviewer
Nov 29, 2021
I would like to see an option to do security checks on a code level. This is possible because they have access to all of the code running in the cloud provider, and combining their site-scanning solution with that would be a nice add-on.
TS
Oct 26, 2021
They can expand a little bit in anti-malware detection. While we have pretty good confidence that it's going to detect some of the static malware, some of the detections are heuristics. There could be a growth in the library from where they're pulling their information, but we don't get a lot of those alerts based on the design of our products. In general, that might be an area that needs to be filled since they offer it as a service within it.
reviewer1731741 - PeerSpot reviewer
Nov 30, 2021
We are PCI DSS compliant, so we need to scan our environment externally with tools vetted by the PCI DSS organization. Orca doesn't scan the environment externally. It only scans what's currently in the cloud.
JJ
Oct 24, 2021
I think Orca could give me more alerts. It could give me a dashboard with all the specific types of alerts I want to see for the day. It should just be one click.
MH
Dec 8, 2021
In the future, I'd like to see Orca work better with third-party vendors. Specifically, being able to provide sanitized results from third parties.
MK
Jun 12, 2023
The interface can be a bit cranky and sometimes takes a lot of time to load.