Orca Security Reviews & Product Details

The biggest advantage for us is the agentless setup. We didn’t have to install anything on our workloads, which saved a lot of time and helped us avoid disruption. The side-scanning provides full visibility into vulnerabilities, misconfigurations, and exposed secrets across all of our cloud accounts. I also like that everything is presented in one place, which makes it easier to understand our overall risk posture and see where we need to focus. Review collected by and hosted on G2.com.

The platform is very feature-rich, so it takes a bit of time to get fully comfortable with all the different views and capabilities. A few dashboards could be simplified to make navigation quicker and more intuitive, especially for new users who are still learning their way around. Review collected by and hosted on G2.com.

Agentless scanning is ideal because getting hundreds of independent research departments to install a security agent in their cloud environments is basically impossible. Orca side-scanning also helps us identify unpatched operating systems and exposed databases. Review collected by and hosted on G2.com.

The alert noise caused by forgotten projects is a constant struggle. Faculty members often leave the lab server running for years after a grant expires, and the platform ends up flagging very outdated libraries as critical vulnerabilities. Review collected by and hosted on G2.com.

The agentless visibility across workloads is a major advantage. It performs well across our mix of containers, VMs, and serverless environments. Alerts are contextual and include clear remediation guidance, which makes them far more actionable than a typical CVE list. Review collected by and hosted on G2.com.

There’s a bit of a learning curve when you first start navigating the platform. Also, some of the remediation suggestions could be better tailored to specific environments. Review collected by and hosted on G2.com.

We adopted Orca Security to unify security across AWS, Azure, and GCP. The side-scanning approach is very seamless and doesn’t impact performance, which was important for our production environment. We now have continuous visibility into vulnerabilities, misconfigurations, and data exposure across multiple cloud platforms, all in one place. Review collected by and hosted on G2.com.

The initial setup required the right permissions and configuration for each cloud provider, so the deployment took planning and close coordination between teams. Review collected by and hosted on G2.com.

This gives visibility into a cloud environment without installing agents. During cloud migration projects, we often need to assess a client’s environment quickly to identify risks and exposed storage. Instead of deploying multiple tools, we can connect to the cloud account in a short time and get the information we need. Review collected by and hosted on G2.com.

The dashboard shows a lot of information, which is good, but it doesn’t feel very beginner-friendly. Review collected by and hosted on G2.com.

The agentless model makes Orc easier to integrate into our cloud because we didn’t have to deploy agents on every workload or server. It also gives us visibility across all workloads, including storage, virtual machines, and cloud configurations. Review collected by and hosted on G2.com.

At the beginning, we received many alerts until we adjusted our policies and the alert threshold to better match our environment and our actual risk level. Review collected by and hosted on G2.com.

Orca has vulnerability scanning, compliance checks, and risk assessment in a single platform, which has made a big difference for our team. Previously, we were using multiple tools and then trying to combine the reports manually. Review collected by and hosted on G2.com.

There were so many alerts because the platform shows everything it finds. We need to tune it for better performance. Review collected by and hosted on G2.com.

We rely on Orca for workload scanning and for identifying exposed credentials. Its side-scanning approach provides solid coverage without adding agents or impacting performance. Review collected by and hosted on G2.com.

The initial scan produced a very large number of findings, and it took time to go through them and decide which ones were relevant. Review collected by and hosted on G2.com.

Orca Security simplifies cloud security management at scale. The agentless scanning provides complete coverage, from workloads to configurations and secrets, without deploying agents across hundreds of instances. The contextual risk scoring and prioritized alerts have now reduced Review collected by and hosted on G2.com.

At the beginning, there were a lot of alerts, but that issue has been resolved now. Review collected by and hosted on G2.com.

I like the inclusion of GenAI to walk us through remediation steps Review collected by and hosted on G2.com.

Sometimes navigating the Orca graph is difficult. Review collected by and hosted on G2.com.