Orca Security Reviews

Name: Orca Security
Brand: Orca Security
Rating: 4.6 (17 reviews)

4.6 out of 5

17 reviews
100% willing to recommend

163 followers

What is Orca Security?

Orca Security is the pioneer of agentless cloud security that is trusted by hundreds of enterprises globally. Orca makes cloud security possible for enterprises moving to and scaling in the cloud with its patented SideScanning™ technology and Unified Data Model. The Orca Cloud Security Platform delivers the world's most comprehensive coverage and visibility of risks across AWS, Azure, Google Cloud and Kubernetes.

At Orca Security, we’re on a mission to make it fast, easy, and cost effective for organizations to address critical cloud security issues so they can operate in the cloud with confidence.

Get the Orca Security Buyer's Guide and find out what your peers are saying about Orca Security, Wiz, Prisma Cloud by Palo Alto Networks and more!

Orca Security is the #2 ranked solution in top Cloud Detection and Response (CDR) solutions, #6 ranked solution in top Data Security Posture Management (DSPM) solutions, #9 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #9 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #11 ranked solution in top Vulnerability Management solutions, #11 ranked solution in Cloud Workload Protection Platforms, and #14 ranked solution in Container Security Solutions. PeerSpot users give Orca Security an average rating of 9.2 out of 10. Based on the analysis of the 17 most recent Orca Security reviews, the overall sentiment is positive, with a sentiment score of 7.7. Orca Security is most commonly compared to Wiz: Orca Security vs Wiz. Orca Security is popular among the large enterprise segment, accounting for 63% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.

Helped 816,660 peers since 2012

Featured reviews

Cédric Thian-Meng

Presales Security Engineer / CSM at Cybersel Group

Orca Security has patented technologies. It's an agentless solution, so you don't need to install an agent. Instead, it contacts your account provider and fetches metadata, eliminating the need for snapshots or reserved space to copy client infrastructure. The multi-cloud capability displays essential information and potential vulnerabilities with granular detail. For instance, it identifies paths that attackers might exploit to gain root or admin access to machines. It is comprehensive, covering a wide range of software needs. They also integrate with CI/CD pipelines, enabling developers to ensure security from the early stages of code deployment. This integration provides a 100% guarantee on security, safeguarding images, configurations, and other crucial information throughout the development process.

Read full review

CHINTAN MEHTA

Cloud Security Automation Engineer at a financial services firm with 10,001+ employees

We used Orca Security for cloud security, particularly for CSPM and vulnerability assessment. Its agentless setup simplified deployment, replacing many tools and improving visibility to 100%. However, the documentation and compliance framework could benefit from enhancements.

Read full review

Shahar Geiger Maor

CISO at a recruiting/HR firm with 11-50 employees

The main drawback in an agentless approach is that if the solution detects a virus or malware in the environment, we need to manually remove it. But from my experience with other production environments, it's not straightforward to install agents in the hope they will automatically remediate viruses, even from production environments. If you make mistakes, you can cause huge damage to your environment and, when it comes to production, there is zero tolerance for errors. And realistically, you can't use the most important feature of an agent, which is the remediation, because remediating on production is not something that is easy to do. Orca's agentless approach makes more sense. Even if you have an agent, it takes resources. In addition, you need to deploy, maintain, and update an agent, which amounts to a lot of unnecessary work. And lastly, while it's true that an agent sees more when compared with an agentless solution, the gap is very small. In the end, to make sure that we progress and that our security level is increasing, we need to take action. Orca is only a detection tool. It shows you the problems, but you need to make sure that the problems are fixed. It's a fair trade-off because production is a different environment. It's not like endpoint security where the cost of ruining an endpoint is worth the risk. You would rather kill an endpoint than risk being infected with malware. But this is not the same approach for data center or cloud security. Ultimately, the ability to auto-remediate is something that I would like to see.

Read full review

Orca Security mindshare

Product category:

As of November 2024, the mindshare of Orca Security in the Cloud Security Posture Management (CSPM) category stands at 8.2%, down from 11.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM)

Key learnings from peers

Last updated Nov 23, 2024

Valuable Features

Orca Security's standout features include agentless deployment for enhanced visibility, SideScanning technology for risk insight, comprehensive vulnerability management, and user-friendly interface. It offers prioritized task ranking, strong container support, minimal administrative overhead, and seamless multi-cloud monitoring. Its ability to consolidate tools, automate alerts, ensure compliance, and integrate with CI/CD pipelines provides a holistic security approach. Users appreciate its efficiency in highlighting critical issues and providing detailed security insights across cloud environments.

"The best features of Orca Security include its ability to perform a lot of security controls without requiring any installation of agents, making it very easy to set up."
"The best features of Orca Security include its ability to perform a lot of security controls without requiring any installation of agents, making it very easy to set up."
"I would rate the quality of support as nine stars out of ten due to their quick and helpful responses."

Room for Improvement

Orca Security requires enhancements in real-time risk assessment, data center usability, and user education. Users desire more automatic remediation, better dashboard interfaces, and improved anti-malware detection. Cloud integration needs expansion, and dashboards should be more descriptive and load efficiently. Improved alert management, compliance frameworks, and documentations are requested. Users seek better customization options and third-party integrations. Expanding private cloud support and streamlining communication about updates are also suggested improvements.

"The documentation for Orca Security could be improved."
"The documentation for Orca Security could be improved."
"Orca needs improvement in snoozing or dismissing specific alarms. Currently, snoozing dismisses all future vulnerabilities related to a CVE."

ROI

Orca Security provided significant cost savings by replacing existing tools and reducing the need for additional hires and human resources expenses. Users reported immediate time-to-value with streamlined implementation, enhancing their cloud security visibility and practices. The tool's simplicity allows even those with limited IT expertise to utilize its features effectively, reducing training costs. Orca Security's impact extends beyond savings, being essential for cloud operations and facilitating substantial improvements in security posture without extensive setup or maintenance.

Pricing

Orca Security pricing is flexible and competitive against solutions like Prisma and Rapid7. The cost structure is based on cloud workloads and licensing is per-VM. Users find the list price high but value the comprehensive features provided without additional costs. Discounts are available, especially for strategic partners, and the option to start with selective environment coverage helps manage expenses. Enterprises appreciate the reasonable pricing and responsive sales team.

"Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."
"Orca Security is cheaper compared to other solutions in the same space."
"The price is a bit expensive for smaller organizations."

Popular Use Cases

Organizations primarily use Orca Security for Cloud Security Posture Management, vulnerability assessment, and threat detection in cloud environments such as AWS and Azure. It offers agentless scanning for full asset visibility and compliance with security standards like PCI and CIS. Orca is deployed to manage security posture, identify misconfigurations, and monitor compliance progress, providing insights into resting risks without affecting performance by leveraging API connections instead of traditional agents.

Service and Support

Orca Security's support is praised for being responsive and effective, though some experience variability depending on the personnel. Many users acknowledge rapid responses and effective resolutions, often within hours. The real-time Slack channel enhances communication. Some customers find the expertise level needing improvement, while others appreciate the quick integration of feedback. Ratings generally range from six to ten out of ten, citing both exceptional responsiveness and minor areas for enhancement.

Deployment

Orca Security's initial setup is remarkably quick and simple, requiring minimal effort. Users find it easy to deploy due to its agentless nature, enabling rapid integration with cloud accounts without the need for extensive testing. It provides immediate insights and data with just a few steps, taking mere minutes to complete. With comprehensive documentation and responsive customer support, the deployment is efficient, handling various cloud platforms efficiently. Users appreciate the time-saving and effortless integration process.

Scalability

Orca Security is regarded as highly adaptable, efficiently expanding with organizations as they grow in cloud environments and accounts. It is integral to cloud security teams, accommodating extensive usage across AWS and Azure. Challenges are minimal even with thousands of assets. It employs a scanning technology that negates traditional scaling limitations. Users highlight its capability to manage varying asset scales, supporting rapid adaptation without performance issues, though scaling Kubernetes workloads requires extra steps.

Stability

Orca Security has shown strong stability with consistent uptime reported by users. While some users experienced brief downtimes and minor frontend issues, others found it highly reliable and stable. Initial interface problems were resolved through updates, enhancing its dependability. Users praised its robust performance, noting few crashes and reliable execution, even during heavy loads. Though a few users noted early challenges, many agree that Orca Security maintains a solid track record of stability.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Orca Security Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

13%

Manufacturing Company

University

Government

Retailer

Healthcare Company

Insurance Company

Educational Organization

Construction Company

Energy/Utilities Company

Media Company

Real Estate/Law Firm

Non Profit

Comms Service Provider

Outsourcing Company

Performing Arts

Legal Firm

Hospitality Company

Wholesaler/Distributor

Transportation Company

Recreational Facilities/Services Company

Logistics Company

Consumer Goods Company

Agriculture

Pharma/Biotech Company

Compare Orca Security with alternative products

Learn more about Orca Security

Key Platform Features:

Agentless: Complete, centralized coverage of the entire cloud estate, without the need for installing and configuring agents or layering together multiple siloed tools. Full visibility of cloud misconfigurations, vulnerabilities, workload protection, malware scanning, image scanning, file integrity monitoring and more.
Asset Inventory: Get a complete inventory of all your public cloud assets, including detailed information on installed OSes, software, and applications, as well as data and network assets such as storage buckets, Virtual Private Clouds (VPCs), and Security Groups.

Attack Path Analysis: Visualize attack vectors to critical assets or crown jewels. See which assets are susceptible to lateral movement, assume roles, privilege escalation, and more.

Risk Prioritization: Prioritize the 1% of risks that matter the most, based on impact scores. Secure the vulnerabilities and misconfigured targets (critical assets) and eliminate the potential risks residing on the attack paths to those targets.
Cloud Threat Detection: Monitor for malicious activity within your entire cloud estate. Be aware of detected threats, user behavior anomalies and more.

Breach Forensics: Log every change and all activity into a central repository for investigation procedures to confirm or deny entry and compromises within the cloud estate.
Cloud To Dev (Shift Left): Orca’s built-in shift left capabilities enables DevOps to focus more security attention earlier in the CI/CD pipelines. Security teams are able to trace a production risk (misconfiguration or vulnerability) directly to the original source code repository from which it came, even down to the exact line of code that is at the root of the identified risk.
Compliance: Choose from over 60 preconfigured compliance frameworks, cloud security best practices, CIS Benchmarks, or design and build your own compliance framework for fast and continuous reporting.
Security Score: The Orca Security Score is found on Orca’s Risk Dashboard and is updated daily. The overall score is calculated based on performance in the following five categories - Suspicious Activity, IAM, Data at Risk, Vulnerable Assets, and Responsiveness. Since the scores are percentage based and not raw numbers, you can objectively make comparisons to other organizations within your industry or business units of different sizes. In addition to reporting to senior management, the Orca Security Score can help with internal self-monitoring, as a way of measuring risk mitigation efforts, to know where to focus efforts, and track progress.

Orca Security Benefits