Orca Security Reviews

Name: Orca Security
Brand: Orca Security
Rating: 4.6 (16 reviews)

4.6 out of 5

16 reviews
100% willing to recommend

163 followers

What is Orca Security?

Orca Security is the pioneer of agentless cloud security that is trusted by hundreds of enterprises globally. Orca makes cloud security possible for enterprises moving to and scaling in the cloud with its patented SideScanning™ technology and Unified Data Model. The Orca Cloud Security Platform delivers the world's most comprehensive coverage and visibility of risks across AWS, Azure, Google Cloud and Kubernetes.

At Orca Security, we’re on a mission to make it fast, easy, and cost effective for organizations to address critical cloud security issues so they can operate in the cloud with confidence.

Get the Orca Security Buyer's Guide and find out what your peers are saying about Orca Security, Wiz, Microsoft Defender for Cloud and more!

Orca Security is the #2 ranked solution in top Cloud Detection and Response (CDR) solutions, #6 ranked solution in top Data Security Posture Management (DSPM) solutions, #9 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #9 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #11 ranked solution in top Vulnerability Management solutions, #11 ranked solution in Cloud Workload Protection Platforms, and #14 ranked solution in Container Security Solutions. PeerSpot users give Orca Security an average rating of 9.2 out of 10. Based on the analysis of the 16 most recent Orca Security reviews, the overall sentiment is positive, with a sentiment score of 8.0. (Among the highest in the category). Orca Security is most commonly compared to Wiz: Orca Security vs Wiz. Orca Security is popular among the large enterprise segment, accounting for 64% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.

Helped 816,406 peers since 2012

Featured reviews

Cédric Thian-Meng

Presales Security Engineer / CSM at Cybersel Group

Orca Security has patented technologies. It's an agentless solution, so you don't need to install an agent. Instead, it contacts your account provider and fetches metadata, eliminating the need for snapshots or reserved space to copy client infrastructure. The multi-cloud capability displays essential information and potential vulnerabilities with granular detail. For instance, it identifies paths that attackers might exploit to gain root or admin access to machines. It is comprehensive, covering a wide range of software needs. They also integrate with CI/CD pipelines, enabling developers to ensure security from the early stages of code deployment. This integration provides a 100% guarantee on security, safeguarding images, configurations, and other crucial information throughout the development process.

Read full review

Shahar Geiger Maor

CISO at a recruiting/HR firm with 11-50 employees

The main drawback in an agentless approach is that if the solution detects a virus or malware in the environment, we need to manually remove it. But from my experience with other production environments, it's not straightforward to install agents in the hope they will automatically remediate viruses, even from production environments. If you make mistakes, you can cause huge damage to your environment and, when it comes to production, there is zero tolerance for errors. And realistically, you can't use the most important feature of an agent, which is the remediation, because remediating on production is not something that is easy to do. Orca's agentless approach makes more sense. Even if you have an agent, it takes resources. In addition, you need to deploy, maintain, and update an agent, which amounts to a lot of unnecessary work. And lastly, while it's true that an agent sees more when compared with an agentless solution, the gap is very small. In the end, to make sure that we progress and that our security level is increasing, we need to take action. Orca is only a detection tool. It shows you the problems, but you need to make sure that the problems are fixed. It's a fair trade-off because production is a different environment. It's not like endpoint security where the cost of ruining an endpoint is worth the risk. You would rather kill an endpoint than risk being infected with malware. But this is not the same approach for data center or cloud security. Ultimately, the ability to auto-remediate is something that I would like to see.

Read full review

Jonathan Jaffe

CISO at Lemonade Inc.

Orca could give me more alerts. It could give me a dashboard with all the specific types of alerts I want to see for the day. It should just be one click. This is one area where I feel Datadog is better. Datadog has something called Security Signals, where they give you a dashboard, and you can structure it by the day or specify a period. It just tells you the different security signals that have occurred with a very obvious risk designation by color. That makes it easier than Orca's current view. So I think Orca could improve its interface. Another shortcoming of Orca is that it doesn't integrate with our particular non-standard ticketing system. So we have to finish developing an appropriate webhook for it. Other than that, it's integrated well with our identity provider and with our cloud environments.

Read full review

Orca Security mindshare

Product category:

As of November 2024, the mindshare of Orca Security in the Cloud Security Posture Management (CSPM) category stands at 8.2%, down from 11.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM)

Key learnings from peers

Last updated Nov 19, 2024

Valuable Features

Orca Security offers exceptional cloud visibility without needing agents, ranking critical vulnerabilities effectively. Its SideScanning feature simplifies deployment, providing in-depth insights. Users appreciate its agentless operation, container security, compliance reporting, and dashboard for multi-cloud environments. Automated scanning and real-time data protection enhance efficiency. Orca Security supports prioritizing tasks, allowing teams to focus on key issues. Its integration with CI/CD pipelines ensures robust early security. User-friendly design aids navigation and filtering, addressing vulnerabilities, CVEs, and misconfigurations comprehensively.

"I would rate the quality of support as nine stars out of ten due to their quick and helpful responses."
"One of the valuable features of Orca Security is its design and options that allow flexible filtering and user-friendly visualization."
"Orca Security has patented technologies. It's an agentless solution, so you don't need to install an agent. Instead, it contacts your account provider and fetches metadata, eliminating the need for snapshots or reserved space to copy client infrastructure."

Room for Improvement

Orca Security needs better integration with third-party vendors and ticketing systems. Users desire enhanced dashboards, more intuitive interfaces, and improved alert management. Real-time risk assessment and anti-malware detection can be strengthened. Expansion into data centers and private clouds is necessary. Users suggest adding more automation and customization options. Effective user communication and education on features are requested. OC should offer more comprehensive compliance focus and integrations with security frameworks and report tools.

"Orca needs improvement in snoozing or dismissing specific alarms. Currently, snoozing dismisses all future vulnerabilities related to a CVE."
"Orca needs improvement in snoozing or dismissing specific alarms."
"It's not all clouds that they are currently onboarded with. For instance, they are not yet with public cloud and many other private clouds."

ROI

Orca Security significantly reduces expenses by replacing multiple tools and decreasing personnel overhead. Updates and new features come at no extra cost. Time to value is immediate, enhancing efficiency and simplicity. Cloud security engineers find it user-friendly, requiring minimal IT expertise. Orca saves hundreds of thousands annually in staffing, offering immense return on investment. Its lack of deployment hassles and swift time-to-value make it indispensable. Users affirm its worth and contribution to cloud operations.

Pricing

Orca Security's pricing structure is based on cloud workloads, offering a pay-as-you-use model with competitive rates compared to alternatives like Rapid7 and Prisma Cloud. Enterprises find its comprehensive package justifies the cost, though it may seem high initially. Discounts are available for strategic partnerships, and flexibility exists depending on assets and environments managed. Orca includes all necessary features in its base price, avoiding additional costs, and remains accommodating to various enterprise needs.

"Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."
"Orca Security is cheaper compared to other solutions in the same space."
"The price is a bit expensive for smaller organizations."

Popular Use Cases

Organizations primarily utilize Orca Security for cloud security posture management. It identifies threats, vulnerabilities, and misconfigurations without requiring software installation, providing agentless data collection via API integration with cloud platforms like AWS, Azure, and GCP. Users benefit from Orca's ability to maintain security standards compliance, such as PCI and CIS, enhance visibility into their cloud environments, ensure regular updates, and manage security across applications, databases, and infrastructure elements, ultimately improving overall cloud security confidence.

Service and Support

Orca Security has responsive and helpful customer service, often praised for quick issue resolution. Despite sometimes being less frequently used, when engaged, support is prompt, usually addressing queries within hours. Occasional feedback is swiftly incorporated into their offerings. They maintain a shared Slack channel for real-time support. Ratings are mostly high, indicating satisfaction, though some users experience slower response times. Staff are knowledgeable and responsive, with support regarded as a key feature.

Deployment

Users found Orca Security's initial setup quick and effortless. It requires minimal steps, often completed in minutes, due to its agentless design. Customers appreciated the simplicity of connecting accounts and the lack of maintenance needed. Orca Security's documentation and intuitive integration were highlighted as beneficial, saving time and reducing complexity. Users noted that setup involved just entering cloud provider credentials and the solution began scanning immediately, offering rapid deployment without the need for extensive configurations.

Scalability

Orca Security is highly scalable, deployed extensively across various environments. Many organizations integrate it from inception with no issues as they expand services and workloads. It can handle diverse setups, including AWS and Azure, managing extensive assets and cloud environments. Automation and agentless technology enable quick, effortless scaling across numerous accounts. Users appreciate its reliability and the ability to monitor large infrastructures efficiently, adapting to changes in cloud size and asset volume.

Stability

Orca Security is frequently regarded as stable, with many experiencing no issues. Some noted brief downtimes, often unnoticed due to low activity at those times. Initial minor problems were addressed with updates, and their support is responsive. Occasional frontend issues occur, mainly during updates. Despite varying opinions, most agree it outperforms other tools. Numerous users are confident in its ability to manage their workload without concern. Stability ratings range from nine to ten.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Orca Security Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

13%

Manufacturing Company

University

Government

Retailer

Healthcare Company

Insurance Company

Educational Organization

Construction Company

Energy/Utilities Company

Media Company

Real Estate/Law Firm

Comms Service Provider

Non Profit

Outsourcing Company

Performing Arts

Hospitality Company

Legal Firm

Wholesaler/Distributor

Transportation Company

Logistics Company

Recreational Facilities/Services Company

Consumer Goods Company

Agriculture

Pharma/Biotech Company

Compare Orca Security with alternative products

Learn more about Orca Security

Key Platform Features:

Agentless: Complete, centralized coverage of the entire cloud estate, without the need for installing and configuring agents or layering together multiple siloed tools. Full visibility of cloud misconfigurations, vulnerabilities, workload protection, malware scanning, image scanning, file integrity monitoring and more.
Asset Inventory: Get a complete inventory of all your public cloud assets, including detailed information on installed OSes, software, and applications, as well as data and network assets such as storage buckets, Virtual Private Clouds (VPCs), and Security Groups.

Attack Path Analysis: Visualize attack vectors to critical assets or crown jewels. See which assets are susceptible to lateral movement, assume roles, privilege escalation, and more.

Risk Prioritization: Prioritize the 1% of risks that matter the most, based on impact scores. Secure the vulnerabilities and misconfigured targets (critical assets) and eliminate the potential risks residing on the attack paths to those targets.
Cloud Threat Detection: Monitor for malicious activity within your entire cloud estate. Be aware of detected threats, user behavior anomalies and more.

Breach Forensics: Log every change and all activity into a central repository for investigation procedures to confirm or deny entry and compromises within the cloud estate.
Cloud To Dev (Shift Left): Orca’s built-in shift left capabilities enables DevOps to focus more security attention earlier in the CI/CD pipelines. Security teams are able to trace a production risk (misconfiguration or vulnerability) directly to the original source code repository from which it came, even down to the exact line of code that is at the root of the identified risk.
Compliance: Choose from over 60 preconfigured compliance frameworks, cloud security best practices, CIS Benchmarks, or design and build your own compliance framework for fast and continuous reporting.
Security Score: The Orca Security Score is found on Orca’s Risk Dashboard and is updated daily. The overall score is calculated based on performance in the following five categories - Suspicious Activity, IAM, Data at Risk, Vulnerable Assets, and Responsiveness. Since the scores are percentage based and not raw numbers, you can objectively make comparisons to other organizations within your industry or business units of different sizes. In addition to reporting to senior management, the Orca Security Score can help with internal self-monitoring, as a way of measuring risk mitigation efforts, to know where to focus efforts, and track progress.

Orca Security Benefits