Orca Security Reviews & Product Details

The biggest advantage for us is the agentless setup. We didn’t have to install anything on our workloads, which saved a lot of time and helped us avoid disruption. The side-scanning provides full visibility into vulnerabilities, misconfigurations, and exposed secrets across all of our cloud accounts. I also like that everything is presented in one place, which makes it easier to understand our overall risk posture and see where we need to focus. Review collected by and hosted on G2.com.

The platform is very feature-rich, so it takes a bit of time to get fully comfortable with all the different views and capabilities. A few dashboards could be simplified to make navigation quicker and more intuitive, especially for new users who are still learning their way around. Review collected by and hosted on G2.com.

The agentless visibility across workloads is a major advantage. It performs well across our mix of containers, VMs, and serverless environments. Alerts are contextual and include clear remediation guidance, which makes them far more actionable than a typical CVE list. Review collected by and hosted on G2.com.

There’s a bit of a learning curve when you first start navigating the platform. Also, some of the remediation suggestions could be better tailored to specific environments. Review collected by and hosted on G2.com.

We adopted Orca Security to unify security across AWS, Azure, and GCP. The side-scanning approach is very seamless and doesn’t impact performance, which was important for our production environment. We now have continuous visibility into vulnerabilities, misconfigurations, and data exposure across multiple cloud platforms, all in one place. Review collected by and hosted on G2.com.

The initial setup required the right permissions and configuration for each cloud provider, so the deployment took planning and close coordination between teams. Review collected by and hosted on G2.com.

This gives visibility into a cloud environment without installing agents. During cloud migration projects, we often need to assess a client’s environment quickly to identify risks and exposed storage. Instead of deploying multiple tools, we can connect to the cloud account in a short time and get the information we need. Review collected by and hosted on G2.com.

The dashboard shows a lot of information, which is good, but it doesn’t feel very beginner-friendly. Review collected by and hosted on G2.com.

The agentless model makes Orc easier to integrate into our cloud because we didn’t have to deploy agents on every workload or server. It also gives us visibility across all workloads, including storage, virtual machines, and cloud configurations. Review collected by and hosted on G2.com.

At the beginning, we received many alerts until we adjusted our policies and the alert threshold to better match our environment and our actual risk level. Review collected by and hosted on G2.com.

Orca has vulnerability scanning, compliance checks, and risk assessment in a single platform, which has made a big difference for our team. Previously, we were using multiple tools and then trying to combine the reports manually. Review collected by and hosted on G2.com.

There were so many alerts because the platform shows everything it finds. We need to tune it for better performance. Review collected by and hosted on G2.com.

I like the inclusion of GenAI to walk us through remediation steps Review collected by and hosted on G2.com.

Sometimes navigating the Orca graph is difficult. Review collected by and hosted on G2.com.

Better AI security and Integrated Dashboard Review collected by and hosted on G2.com.

Lots of false positives and DSPM quality is poor Review collected by and hosted on G2.com.

Scan Optimization for Stopped VMs and VM Images

Orca Stops Creating Non-Essential Informational Alerts Review collected by and hosted on G2.com.

Integration with Google Workspace & Google Admin Review collected by and hosted on G2.com.

Prioritised alerts, eliminating false positives and alert fatigue.

Remediation guidance is excellent. Review collected by and hosted on G2.com.

Reporting capabilities could be improved. Review collected by and hosted on G2.com.