---
title: Orca Security Reviews
meta_title: 'Orca Security Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 316 reviews by the users' company size, role or industry
  to find out how Orca Security works for a business like yours.
aggregate_rating:
  rating_value: 4.7
  review_count: 316
  scale: '5'
date_modified: '2026-08-04'
parent_category:
  name: Cloud Security
  url: https://www.g2.com/categories/cloud-security
---

# Orca Security Reviews
**Vendor:** Orca Security  
**Category:** [Cloud-Native Application Protection Platform (CNAPP)](https://www.g2.com/categories/cloud-native-application-protection-platform-cnapp)  
**Average Rating:** 4.7/5.0  
**Total Reviews:** 316
## About Orca Security
The Orca Cloud Security Platform identifies, prioritizes, and remediates risks and compliance issues in workloads, configurations, and identities across your cloud estate spanning AWS, Azure, Google Cloud, Kubernetes, Alibaba Cloud, and Oracle Cloud. Orca offers the industry’s most comprehensive cloud security solution in a single platform — eliminating the need to deploy and maintain multiple point solutions. Orca is agentless-first, and connects to your environment in minutes using Orca’s patented SideScanning™ technology that provides deep and wide visibility into your cloud environment, without requiring agents. In addition, Orca can integrate with third-party agents for runtime visibility and protection for critical workloads. Orca is at the forefront of leveraging Generative AI for simplified investigations and accelerated remediation – reducing required skill levels and saving cloud security, DevOps, and development teams time and effort, while significantly improving security outcomes. As a Cloud Native Application Protection Platform (CNAPP), Orca consolidates many point solutions in one platform, including: CSPM, CWPP, CIEM, Vulnerability Management, Container and Kubernetes Security, DSPM, API Security, CDR, Multi-cloud Compliance, Shift Left Security, and AI-SPM.



## Orca Security Pros & Cons
**What users like:**

- Users praise the **ease of use** of Orca Security, appreciating its intuitive interface and quick setup process. (13 reviews)
- Users value the **visibility and prioritization** of vulnerabilities provided by Orca Security, enhancing their cloud security posture. (13 reviews)
- Users praise Orca Security for its **agentless features** , intuitive interface, and effective compliance and security modules. (11 reviews)
- Users value the **exceptional visibility** provided by Orca Security, enhancing insight into their cloud environment effortlessly. (11 reviews)
- Users value the **comprehensive security** features of Orca Security, enhancing visibility and ease of implementation across cloud environments. (9 reviews)
- Users appreciate the **user-friendly interface** of Orca Security, finding it easy to navigate and understand. (9 reviews)
- Contextual Environment (8 reviews)
- Users commend Orca Security for its **comprehensive cloud security capabilities** , providing valuable insights and a seamless experience. (8 reviews)
- Team Expertise (7 reviews)
- Alert Management (6 reviews)

**What users dislike:**

- Users note that Orca Security has **security vulnerabilities** , particularly regarding API security and vulnerable package detection. (6 reviews)
- Users experience **dashboard issues** like cluttered information and slow performance, leading to navigation challenges and bugs. (5 reviews)
- Users experience **delayed detection** with Orca Security due to slow scans and accumulated issues affecting troubleshooting efficiency. (5 reviews)
- Users report frequent **false positives** in Orca Security, causing confusion over actual vulnerabilities in their systems. (5 reviews)
- Users note that **improvement is needed** in reporting, automation, and granularity for a better Orca Security experience. (5 reviews)
- Users note significant **improvements needed** in UX, reporting, and API integrations for a more streamlined experience. (5 reviews)
- Vulnerability Management (5 reviews)
- Alert Overload (4 reviews)
- Users find **feature limitations** in Orca Security, highlighting issues with vulnerability reporting and asset scan capabilities. (4 reviews)
- Users experience **limited features** in Orca Security, hindering functionality and complicating tasks like report generation. (4 reviews)

## Orca Security Reviews
  ### 1. User-Friendly Interface, But Needs More Accurate and Up-to-Date Security Research

**Rating:** 3.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 11, 2026

**What do you like best about Orca Security?**

The interface is relatively user-friendly and easy to navigate

**What do you dislike about Orca Security?**

The information provided is often inaccurate and the research they invest in security and new vulnerabilities is not professional enough and doesn't keep up with cutting-edge technology

**What problems is Orca Security solving and how is that benefiting you?**

Orca Security helps with cloud security monitoring and vulnerability detection, but the benefits are limited due to the inaccurate information and lack of cutting-edge research

  ### 2. Direct and Easy to Use, Gets Straight to the Point with Vulnerabilities

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Health, Wellness and Fitness | Enterprise (> 1000 emp.)

**Reviewed Date:** October 27, 2025

**What do you like best about Orca Security?**

It goes straight to the point, without beating around the bush, allowing you to quickly identify what is vulnerable and what should be added first. Additionally, it stands out for its ease of use.

**What do you dislike about Orca Security?**

The available credits can easily run out when integrating new clouds.

**What problems is Orca Security solving and how is that benefiting you?**

Vulnerability review, exposure of secrets, and attack paths.

  ### 3. An incredible visibility and compliance tool for the cloud

**Rating:** 5.0/5.0 stars

**Reviewed by:** Carlos C. | IT Security Manager, Enterprise (> 1000 emp.)

**Reviewed Date:** February 26, 2025

**What do you like best about Orca Security?**

Plug and play, in minutes you connect to your cloud accounts and are ready to use. Very easy to implement.

Sonar allows you to search any cloud object to find out inventory details, alerts, etc.

It has several frameworks, including Brazil LGPD.

The ORCA support teams is great, they reply very soon to resolve any issue.

There're some integrations with 3rd party tools.

The side-scanning technology is great, you gain a entire visibility of your environment, without agent installation needed.

**What do you dislike about Orca Security?**

The vulnerability feature should be better.

**What problems is Orca Security solving and how is that benefiting you?**

We have a big cloud environment, using AWS, Azure, OCI and GCP. ORCA group all the alerts, insights and inventory, in a only place, facilitating to resolve daily issues.

  ### 4. Easy to setup, Quick and Useful Insights

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Insurance | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 09, 2023

**What do you like best about Orca Security?**

They adopted GenAI really fast in 2023, and new features are constantly answering user enquiries like docker scanning support.

**What do you dislike about Orca Security?**

Things are more well documented now, and they have an AI agent to assist you in case you need anything.

**What problems is Orca Security solving and how is that benefiting you?**

It saves our DevSecOps team a lot of time, for example in inventory of all our cloud resources together with security issues associated.

  ### 5. Orca Security has led us to a greatly improved cloud security posture within days of use.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jay B. | SecOps Administrator, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 19, 2024

**What do you like best about Orca Security?**

The interface is very intuitive and there was not a learning curve at all. Being able to create reports on pretty much any dashboard has been very helpful. Vulnerabilities and misconfigurations found by Orca give us more than enough information to be handed to our development team for remediation without having to do any additional research. Overall, this is a very well thought out platform.

**What do you dislike about Orca Security?**

I honestly have not found anything I dislike yet.

**What problems is Orca Security solving and how is that benefiting you?**

It was a very painful process to search for misconfigurations with IAM and networking in our environment. Orca has given us a way to have all of the data we need without having to spend hours searching and it most cases gives the instructions needed to remediate. It has also helped us add more shift left into our development process.

  ### 6. Fantastic, powerful tool for cloud security

**Rating:** 5.0/5.0 stars

**Reviewed by:** Steven B. | Security Architect, Enterprise (> 1000 emp.)

**Reviewed Date:** November 13, 2024

**What do you like best about Orca Security?**

Orca provides top-tier dashboards and easy dashboard customization which quickly surfaces critical risks.
Orca support replies rapidly and consistently works to resolve issues.
Orca installation in 2/3 of our main cloud environments was a smooth process, and the last environment took just an extra hour of work. Overall, a very smooth onboarding process, and great training resources were provided.
Orca provides incredibly rich, useful data about the risks it detects, with very low/none false positives.

**What do you dislike about Orca Security?**

The compliance modules currently load extremely slowly, lack CIS critical controls v8.1, and waiting for the promised module rewrite next year sucks.
Orca knowledgebase documentation is tied to your Orca login. To faciliate non-technical staff (or folks who don't need console access) working with the tool, it would be great if they were decoupled.
Exporting risk data to CSV from Orca often requires selecting which of 119-250+ columns I want, at least once, unless you like getting a 1 GB CSV file (wow!)
Exporting to CSV frequently hangs (probably due to the default enormous CSV size), requiring the usage of scheduled reports, which is less convenient.

**What problems is Orca Security solving and how is that benefiting you?**

Orca is an incredibly powerful tool. We're using it to detect vulnerabilities in virtual machines, misconfigured serverless functions, excessive IAM policies, unhardened virtual machines, VMs missing critical protective software, VMs under attack, and so much more, and that's just the tip of what Orca can do.

  ### 7. A powerfule security tool for all cloud environments

**Rating:** 4.5/5.0 stars

**Reviewed by:** michael m. | Lead Security Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** February 26, 2025

**What do you like best about Orca Security?**

Orca enabled us to have full visibility into our cloud environment. It is a powerful tool that provides the necessary details to properly secure your infrastructure. It gives you consistent up-to-date information. It is an incredibly easy to use platform. We were able to implement and start getting results within 24 hours. Orca is also extremely scalable.

**What do you dislike about Orca Security?**

Orca provides a lot of information and can result in alert fatigue. There are some areas with vulnerability management that they can do better on. For instance, having the ability to not alert on vulnerabilities that are superseded.

**What problems is Orca Security solving and how is that benefiting you?**

Orca is giving us a single pane of glass into our cloud environment. It gives us very detailed information on security alerts and our vulnerability posture.

  ### 8. Had exceptional experience

**Rating:** 4.5/5.0 stars

**Reviewed by:** Maksym M. | Security engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 23, 2023

**What do you like best about Orca Security?**

Agentless Approach and Deep Visibility.  It doesn't require the installation of any agents or additional software, that’s why we need just minutes to onboard new accounts to Orca. After onboarding, Orca provides really comprehensive asset discovery, vulnerability scanning, and risk assessment. Also, I am impressed by Orca Security's continuous product development and its dedication to introducing new features.

**What do you dislike about Orca Security?**

Usually, Orca performs scans every 24 hours, that's why alerts are not real-time. Also, it would be great if Orca expand its integration capabilities especially with Cloudflare

**What problems is Orca Security solving and how is that benefiting you?**

Orca Security provides contextualized alerts and actionable insights to security teams. By correlating security incidents with context, it helps prioritize and address security issues effectively. Additionally, its agentless approach reduces the complexity of deployment and ongoing management, making it easier for us to integrate Orca Security into our existing security operations.

  ### 9. Orca pulls data from multiple soruces into a single pane of glass

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Consumer Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** July 02, 2025

**What do you like best about Orca Security?**

The alerts are accurate and come through in a timely fashion.

**What do you dislike about Orca Security?**

False positives are a bit high. I assume they are trying to generate more findings. Sometimes alerts repeat for previously closed incidents.

**What problems is Orca Security solving and how is that benefiting you?**

It provides visibility on software and configuration vulnerabilites as well as potenitally malicious actions.

  ### 10. Let Orca secure the cloud assets

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Insurance | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 18, 2023

**What do you like best about Orca Security?**

Its runtime protection supports ecs and eks fargate now

**What do you dislike about Orca Security?**

Anomaly Detection has so many false positives

**What problems is Orca Security solving and how is that benefiting you?**

It enables continuous monitoring of all our cloud environments

  ### 11. I have about 1 year working Orca security.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Douglas S. | Cloud security Architect, Enterprise (> 1000 emp.)

**Reviewed Date:** February 26, 2025

**What do you like best about Orca Security?**

For me Orça is a completed CNAP solucionar, The Best one of The Market. The agentless feature is the best one I like.

I like too the compliance module, the attack path and data security.

**What do you dislike about Orca Security?**

I think that API sec could be improved and focus on more features on that.

**What problems is Orca Security solving and how is that benefiting you?**

Orça is helping our companys focus on solving security issues based on priorities  and risk score.

  ### 12. Agent-less Solutions, easy onboard, powerful CNAPP

**Rating:** 4.0/5.0 stars

**Reviewed by:** Sunny A. | Sales Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 16, 2024

**What do you like best about Orca Security?**

Easy Onboarding, I don't need consider the agent implementation plan, or any rollback plan if any bad thing happens.

**What do you dislike about Orca Security?**

lack of sandbox, or real-time protection

**What problems is Orca Security solving and how is that benefiting you?**

Orca Security enhances cloud security by leveraging CNAPP benefits, offering comprehensive visibility and protection across environments. This approach enables organizations to identify vulnerabilities, prioritize risks, and ensure compliance, all while streamlining security operations and improving response times. Most important things are 1) no agent, I don't need to take care the installation and compatibility issues, 2) it helps me to prioritize the alerts and risks that I need deal with them immediately.

  ### 13. Comprehensive cloud security platform with powerful integrations

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** November 05, 2024

**What do you like best about Orca Security?**

I really appreciate that Orca brings together multiple aspects of cloud security in a single console. It covers everything we need, from vulnerability management to misconfigurations, compliance, entitlement management, IaC, and code security, all in one place. The integration options are also strong - especially the bi-directional integration with ServiceNow, which has been a huge help for us. Slack integration is another plus, making it easy for our team to discuss alerts across departments and coordinate remediation efforts without missing a beat.

One feature we’ve found especially valuable is Orca’s compliance management. The AWS CIS Benchmark tool has been a game changer for us. With Orca’s guidance and insights, we were able to identify compliance gaps we hadn’t even noticed and systematically address them. This took our compliance score from 58% all the way up to 100%. Now we’re not just meeting industry standards but have much more confidence in the security and compliance of our AWS setup.

**What do you dislike about Orca Security?**

I wish Orca offered an endpoint agent for managing vulnerabilities on non-cloud devices. If this capability were added, we’d likely consider consolidating our vulnerability management into Orca, which would be more convenient than juggling multiple platforms. Currently, we’re running two overlapping solutions to cover vulnerabilities on our endpoints, which adds complexity.

Also, we found it necessary to adjust the default permissions assigned to the role used by Orca, as the out-of-the-box required permissions were too broad and didn’t align with our organization’s principle of least privilege. By tailoring the permissions more specifically to our needs, we were able to enhance security by limiting access only to what was essential for Orca’s operations in our environment.

**What problems is Orca Security solving and how is that benefiting you?**

Orca Security is helping us tackle several key challenges in cloud security, especially around maintaining a strong, unified security posture across multiple cloud accounts. By providing deep visibility into misconfigurations, vulnerabilities, and compliance gaps, Orca enables us to proactively identify and mitigate risks before they become critical issues. This all-in-one approach has streamlined our security workflows and allows our team to focus on strategic improvements rather than being bogged down by manual checks or constant tool-switching. It’s a huge boost in terms of efficiency and confidence, knowing we have a clearer picture of our cloud environment’s security health.

  ### 14. The best multi-purpose Cloud Security Posture Management out there.

**Rating:** 4.5/5.0 stars

**Reviewed by:** 💡 Aristide B. | Head of Product Security & Sr Staff Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 03, 2023

**What do you like best about Orca Security?**

Very easy to configure and get start with.
Excellent support for the 3 main Cloud providers.
They invested a lot in their product and it is incredibly more extensive than it was a couple years ago.
The pricing is relatively reasonable for smaller organizations.
Excellent Customer Success and Executive Teams.
The flexibility of its API, Sonar Queries and automations.
The full revamp of the Discovery feature has been impressive.
So many new perks have been keep coming up as part of the Premium plan: Shifleft, DSPM, API security, ThreatOptix.
The support is incredibly quick even during weekend. I've in all honesty never experienced a vendor as prompt as Orca to support their customers.

**What do you dislike about Orca Security?**

I'm still waiting for a dark mode since the UI change.
Automations don't use Sonar querying language yet.
Could be interesting to have a Terraform module to manage configurations.
The new pricing model is a bit confusing.

**What problems is Orca Security solving and how is that benefiting you?**

Before Orca we didn't have visibility on the vulnerabilities and configuration issues of our Cloud environment. Orca addressed one of our big compliance gap in a couple days and could easily be customized to our needs in a few weeks.

  ### 15. Excellent quality findings; Easy remediation; Easy to use

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.)

**Reviewed Date:** August 08, 2020

**What do you like best about Orca Security?**

It still has the best technology in the cloud security space. I've compared it to Wiz, side-by-side just recently, and still find Orca to have the
- Highest quality findings
- Most accurate prioritization
- Best integration with related systems
- Easiest—much, much easier—UI and best UX
- Implemenation ease, and
- Best customer support.

I and my team use Orca daily, multiple times a day. It's a foundational security product for us. After testing out Wiz for a month, side by side, I appreciate Orca even more.

**What do you dislike about Orca Security?**

I would love to see Orca expand into the area of more automated remediation.

**Recommendations to others considering Orca Security:**

This product is clearly the next generation in TVM. Only Prisma comes close, but Orca is easier and gives more useful information to get to resolution.

**What problems is Orca Security solving and how is that benefiting you?**

Accurate identification of risks and threats with easy-to-investigate tools. We have gained back one FTE’s time, and replaced two products for a net-zero cost.

  ### 16. Ups and Downs we faced with Orca Security

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Security and Investigations | Enterprise (> 1000 emp.)

**Reviewed Date:** November 08, 2024

**What do you like best about Orca Security?**

I love how Orca brings everything together in one place, making it an excellent tool for someone specializing in vulnerability management. Its ease of use and ease of implementation streamline our work, and the number of features it offers is impressive. Orca has significantly helped us reduce vulnerabilities and address each item effectively. Although Orca sometimes flags any visible item as vulnerable, it’s still one of the best tools I've enountered so far. 

The customer support is exceptional; I can get a support representative on a call within five minutes, which only enhances my desire to use it. Their support team has also been incredibly helpful with integrations, which has made the tool even easier to integrate and use frequently. This outstanding support and ease of integration contribute to our high frequency of use, making Orca an invaluable asset in our security toolkit.

**What do you dislike about Orca Security?**

There are several minor issues in Orca that have accumulated into larger challenges. For example, the same vulnerability path is sometimes duplicated across multiple Orca alert IDs, which leads to confusion. Additionally, when a scan is performed on a server, it doesn't display the exact time the scan was completed, nor does it provide backend visibility into scan failures, making it difficult to troubleshoot assets effectively.

We've submitted multiple feature requests, including support for asset scanning on devices like Fortinet and Ivanti, which our organization heavily relies on but aren’t currently detected by Orca. Furthermore, we occasionally encounter issues with hardening scan reports for specific assets, and pulling an inventory report is challenging due to the vast number of assets—over 3 to 4 million. While it's understandable given the scale, it’s still a limitation. Another significant issue is the inability to fetch more than 10,000 alerts through the API when retrieving data for a particular CVE.

Despite these drawbacks, I appreciate Orca’s efforts to adapt to our needs and continuously improve the tool.

**What problems is Orca Security solving and how is that benefiting you?**

Orca Security has really helped us tackle some big challenges in managing vulnerabilities and securing our assets. One of the best things is that it gives us full visibility across our cloud environment without needing agents, which saves us a lot of hassle and time. We can deploy it across all our systems quickly, and it scans everything that’s visible in our environment, so we don’t miss any potential issues.

Having all our vulnerability data in one place has been a game-changer. With Orca’s centralized dashboard, it’s much easier to see what’s critical and what needs our attention first, helping us to reduce risks more effectively. It’s streamlined our process, making it a lot easier to track and fix vulnerabilities.

Their customer support has also been fantastic. I can reach someone in minutes if there’s an issue, which is so helpful when you’re trying to keep things running smoothly. Plus, their support team has been great with helping us integrate Orca with our other tools, which has improved our workflow and made us more efficient.

Overall, Orca has made a real difference by giving us a stronger grip on cloud security, helping us manage vulnerabilities more easily, and scaling well to fit our organization’s needs. It feels like they’re really working to meet our specific needs, and that’s been invaluable.

  ### 17. A near-complete DevSecOps and CSPM solution that is on track to go above and beyond

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Mechanical or Industrial Engineering | Enterprise (> 1000 emp.)

**Reviewed Date:** November 22, 2024

**What do you like best about Orca Security?**

The tool provides a pragmatic view of you security posture. We all know CVEs err on the side of more severe criticality. Orca is aware of this too and tries to reserve the Critical status for things that should be looked at now.

Attack paths provide a seed for internal investigations.

Webhook oriented scans for your repositories are easy to implement.

Customer support is very good. Just a click and you get a chat bot that is quickly picked up by a human.

**What do you dislike about Orca Security?**

Attack paths aren't always accurate. For example, a ddos vulnerability won't lead to a pivot to an internal access. Not by itself anyway.

Out of the box scans are fairly infrequent in an environment where changes happen often.

**What problems is Orca Security solving and how is that benefiting you?**

Outside of the obvious security benefits, Orca provides a view of neglected resources which has led to significant resource clean up.

  ### 18. Cloud Security Architect

**Rating:** 4.0/5.0 stars

**Reviewed by:** Ivu Yadav . | Cloud and server Security Architect, Enterprise (> 1000 emp.)

**Reviewed Date:** February 26, 2025

**What do you like best about Orca Security?**

Alerts and Vulnerability
Malware files and the way presenting the attack paths.

**What do you dislike about Orca Security?**

Vulnerable package are not showing whether it's in use or not. Sometimes orca is detecting that stored files are vulnerable even though those flat files.

**What problems is Orca Security solving and how is that benefiting you?**

As of now we are handling the alerts in good way and sometimes hard to handle the vulnerabilities.

  ### 19. Great solution for a cloud heavy environment

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Food & Beverages | Enterprise (> 1000 emp.)

**Reviewed Date:** November 01, 2024

**What do you like best about Orca Security?**

Orca's implementation was very fast and straight forward.  All my contacts with Orca stay in touch with me to see if everything is working as intended.  The product is very straight forward and very simple ones you login and you can immedatly see everything from a single pane of glass.  

The integrations and features that are provided are world class.  We are constantly using the product in order to acheive our goals in stregthening our security posture here.  A solution like Orca is really a next gen product that every organization should have.  

I stand by my decision by choosing Orca and we are seeing our ROI with the tool.

**What do you dislike about Orca Security?**

Documentation could be updated and be a bit more straight forward when trying to solve issues on our own or seeing what other capabilities are there, but the support team has been wonderful in helping us solve our issues.

**What problems is Orca Security solving and how is that benefiting you?**

Orca helps me know what is going on in my cloud environment to help secure our organization.  It is also helping our infrastructure teams know what all is out there in our environment.  It helps me build out a vulnerabilityh mangement platform with ease.

  ### 20. Orca Security is one of the original Cloud Security disrupptors and innovators.

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Biotechnology | Enterprise (> 1000 emp.)

**Reviewed Date:** November 01, 2024

**What do you like best about Orca Security?**

Context-driven security was considered the future of Cloud Security, and Orca led the charge.  The level of depth provided around resources and assets in your cloud is one of the best out there.

We love the ability to clone and customize "baked-in" alerts to meet our environmental needs, specifically around asset tagging/labeling. Their Code Security capabilities are starting to rival those of Synk and others in the space. The potential there is promising, and the product teams are constantly keeping us in the loop.

The Custmoziable Alerts dashboard, which meets my leadership needs, is easy to use. My team can also create and share customized views without much effort.

Searching and "Discovery" have greatly improved in the latest iteration of the product, and the speed at which we find assets and configurations has improved.

Orca provides very in-depth "attack path" visualizations that are easy to follow, clearly visualize risks, and tell an attack story. Although this would be considered intimidating to view, their visual representation is strong.

Side-scanning continues to provide tremendous value to us.  It still amazes me how quickly they scan our entire environment and report back changes, threats, risks associated with "data" or storage.

There is a lot more to mention, but lastly, our customer support and sales team has been top-notch.  One of the best we have worked with.

**What do you dislike about Orca Security?**

Reporting on containerization vulnerabilities has improved, but it needs to be better.  (Orca has been investing a lot in this space and the future is promising).

Infrastructure as Code custom policy creation is effective but challenging and needs to be more closely linked to the UI.  (There might be technical challenges here but overall, we need more visualizations in the UI around this)

Identity-based reporting around "inactive" non-human accounts is an area that needs more attention. (GCP Support is a little behind.)

**What problems is Orca Security solving and how is that benefiting you?**

Agentless cloud storage and data monitoring is benefiting us.  We can confidently deploy compute as needed and still scan and detect at the file level.

Comprehensive coverage of all of our major cloud providers.

Context-aware risk prioritization is proving to have its benefits for minizing the overall organizational risk.

  ### 21. Great cloud security platform

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.)

**Reviewed Date:** November 13, 2024

**What do you like best about Orca Security?**

Orca provides greate visibility to our cloud environment, it helps us prioritise alerts and checks our environment with the latest vulnerabilities.
I really like the attack path feature it helps us closing gaps in our environments, also it provides as with a lot of the needed information about the resource or the alert that was triggered.

**What do you dislike about Orca Security?**

Orca's searching capabilities could be better, sometimes it takes me more time than needed to be able to use their search engine.
Also I think the UI can be improved a little bit, with some alerts it can be overwhelming with the amount of details presented in the screen.

**What problems is Orca Security solving and how is that benefiting you?**

I have been using Orca Security for managing my cloud infrastructure, and overall, it helped me resolve a lot of issues for both cloud configuration and cloud vulnerabilities.

  ### 22. An emerging cloud security technology with strong foundation

**Rating:** 4.0/5.0 stars

**Reviewed by:** Chintan M. | Cloud Security Architect, Enterprise (> 1000 emp.)

**Reviewed Date:** May 17, 2024

**What do you like best about Orca Security?**

The biggest challenge in cloud security is the known unknowns. And Orca solves that problem by discovering a wide variety of assets and modeling their interrelationships. This helps organisations solve for the root cause of problems and saves huge amount of time spent merging excel sheets. The platform's capability to search for datasets and relations using queries is immensely powerful.

**What do you dislike about Orca Security?**

Adoption of the platform is difficult for big organisations habitated their own toolsets.

**What problems is Orca Security solving and how is that benefiting you?**

Orca solves for the tool consolidation goal of our organisation. With the use of risk scoring, our organisation is now able to better align resources solving for the true problem. The ease of using the platform has helped us roll out Orca in our organisation as a self serving security tool enabling businesses to drive security goals independently and faster.

  ### 23. I have been supporting and learning the  Orca product to deploy the VM alerting.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Education Management | Enterprise (> 1000 emp.)

**Reviewed Date:** November 19, 2024

**What do you like best about Orca Security?**

The Orca Alerts Dashboard is very useful in the sense that it contains a ton of features, ease of integration and use as far as creating new customized dashboards.
Orca has already pre-selected the best practice alerts for your company to focus on, by pulling them in from all of the most pertienent compliance frameworks enabling you meet understand and meet your compliance needs.

**What do you dislike about Orca Security?**

I will say that my organization has been involved with assisting in beta groups to test and validate data and feature functionality.  Orca has many new releases planned for 2025 and I'm hoping the new Compliance service will be released ASAP.

**What problems is Orca Security solving and how is that benefiting you?**

Orca Security is enabling my Cloud Security team a hollistic view into our overall cloud posture management across all three of our cloud service providers from one tool.

  ### 24. Turnkey Cloud Posture Enhancement

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Consumer Goods | Enterprise (> 1000 emp.)

**Reviewed Date:** November 07, 2024

**What do you like best about Orca Security?**

A straightforward setup enabled risk-based asset and alert capabilities, facilitating prioritization within an hour. Immediate identification of public exposure and misconfigured identity resources alerted threat detection and engineering teams to imminent compromise risks, which were remediated within three days. Context and asset enrichment, coupled with recommended actions, guided the creation of an action plan focused on business capability risk and technical feasibility.
Technical and process implementation support from account team was exceptional and guided rapid adoption and integration to security program.

**What do you dislike about Orca Security?**

Although the third-party integration partnership ecosystem is expanding, its adoption was initially constrained. The capabilities available in Azure have been rapidly enhanced, yet there appears to be a preference for releasing updates and features in AWS.

**What problems is Orca Security solving and how is that benefiting you?**

Single source of truth for cloud based risk to business capabilities. Scaling of cloud posture and compliance management through decentralized ownership.

  ### 25. Orca Security: Continuous Innovation Keeps Us Ahead of Threats

**Rating:** 4.0/5.0 stars

**Reviewed by:** Juan M. | Security Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 17, 2024

**What do you like best about Orca Security?**

Orca Security has truly been a game-changer for our organization's cloud security. The platform consistently exceeds our expectations, thanks to its continuous development and improvement. Orca's ability to proactively identify and remediate vulnerabilities and threats has significantly strengthened our security posture.

**What do you dislike about Orca Security?**

While Orca is incredibly powerful, there is a bit of a learning curve to fully utilize all of its features. The interface can be overwhelming at first, and it takes some time to master the platform's full capabilities.

**What problems is Orca Security solving and how is that benefiting you?**

Orca Security has truly been a game-changer for our organization's cloud security. The platform consistently exceeds our expectations, thanks to its continuous development and improvement. Orca's ability to proactively identify and remediate vulnerabilities and threats has significantly strengthened our security posture.

  ### 26. In-Depth Cloud Security Monitoring and Vulnerability Detection

**Rating:** 4.0/5.0 stars

**Reviewed by:** Nilay A. | DevOps Lead, Mid-Market (51-1000 emp.)

**Reviewed Date:** November 14, 2024

**What do you like best about Orca Security?**

The platform offers clear visibility into vulnerabilities and compliance risks, helping us prioritize and resolve issues effectively.

**What do you dislike about Orca Security?**

The dashboard can sometimes feel cluttered with information, making it a bit overwhelming for newer users to navigate efficiently.

**What problems is Orca Security solving and how is that benefiting you?**

Orca Security has greatly improved our cloud visibility by giving us agentless monitoring across all assets, which traditional tools often miss. It simplifies our security operations by consolidating vulnerability management, compliance, and threat detection into one platform. The risk prioritization feature is a huge benefit, allowing us to focus on the most critical issues first, saving time and resources.

  ### 27. Easy to use, powerful tool to gain insight into your cloud environments

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** November 05, 2024

**What do you like best about Orca Security?**

I find that Orca's access into all of the machines within the cloud environment without having to log into each individual machine is one of the most powerful features.  The integration with Jira allows us to generate tickets for others without needing to grant console access, and the automatic closure of tickets based on subsequent scans reduces the workload on the security and execution teams.

**What do you dislike about Orca Security?**

Orca has generally been very fast to implement new features, however some of the reporting functionality can be challenging until you've learned the query language syntax.  This has been improving and is no longer a product downside.

**What problems is Orca Security solving and how is that benefiting you?**

Orca Security gives me complete visibility into the cloud environment and identifies misconfiguration risks, assets that haven't been patched and are generally neglected, and allows me to forward remediation quickly to the appropriate teams.

  ### 28. Great visibility into organizational vulnerabilities.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Chris R. | Cloud Architect / Cloud Ops lead, Small-Business (50 or fewer emp.)

**Reviewed Date:** November 01, 2024

**What do you like best about Orca Security?**

Orca allows us to very quickly diagnose critical vulnerabilities, keep up to date with CVEs, track and patch our environments, and generate reports about progress.  It has helped us maintain SOC compliance, and is very user friendly.  It was very quick to set up with our AWS environment.

**What do you dislike about Orca Security?**

Sometimes when a false positive is dismissed or marked resolved it comes back the next day as a new item.

**What problems is Orca Security solving and how is that benefiting you?**

Orca keeps us aware of any open vulnerabilities, and centralizes reporting and management.  It also integrates with JIRA so that we can document when security vulnerabilities are identified and fixed.

  ### 29. Orca CNAPP

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Automotive | Mid-Market (51-1000 emp.)

**Reviewed Date:** November 14, 2024

**What do you like best about Orca Security?**

What I like best is its agentless architecture; there's no need to install agents on each workload, which significantly reduces friction and speeds up deployment across our cloud estate. 

Orca's compliance reporting and automated inventory give us excellent insights across our assets, which is invaluable for audit preparation.

The contextual alerting and prioritization features in Orca are also standout advantages. It cuts through the noise by correlating security issues to highlight the most critical risks in the environment, saving time and reducing alert fatigue.

Excellent customer support from our account team.

**What do you dislike about Orca Security?**

Limited reporting capabilities, we had to create custom reporting platforms to track alert statistics over time.

**What problems is Orca Security solving and how is that benefiting you?**

Orca solves the issue of being able to scan lambda and kubernetes workloads in our production environmenets and in our pipelines.

  ### 30. Orca is a game changer with Observability

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jackson B. | Cloud Architect, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 21, 2024

**What do you like best about Orca Security?**

Orca has really been a game changer helping accelerate our observably and security journey. The AI assisted search has increased our ability to quickly find and identify resources within our cloud subscriptions and identify vulnerabilities.

**What do you dislike about Orca Security?**

The only missing offering is a cached dashboard to be used on team area kiosk dashboards within the team areas and displaying only that business unit's information.

**What problems is Orca Security solving and how is that benefiting you?**

Security and observability in our multiple cloud subscriptions and environments.

  ### 31. Orca Security implementation in our ecosystem

**Rating:** 5.0/5.0 stars

**Reviewed by:** Virginie D. | Architecte Sécurité Infrastructure de confiance (Legacy/Cloud), Enterprise (> 1000 emp.)

**Reviewed Date:** January 17, 2025

**What do you like best about Orca Security?**

Regular addition of new features
Everything is accessible by API
very intituive
Plug and play, user friendly and ergonomic
Partnership and relationship
Product evolution according to our needs

**What do you dislike about Orca Security?**

RBAC model not enough granular 
Not possible to have a deep hierarchical organization
Not possible to cusotmize the export feature
Limited automation of processes for compliance

**What problems is Orca Security solving and how is that benefiting you?**

Cloud visibility

  ### 32. Fresh and intuitive agent-less scanning is the best I have used in a while

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** August 10, 2020

**What do you like best about Orca Security?**

Of course the agentless scanning is great, but the clean dashboard provides me with exactly the right amount of detail and knowledge around my current env. I also enjoy that Orca is one of the only scanning solution that has Jira ticketing built in to the platform.

**What do you dislike about Orca Security?**

the only thing that would make Orca better is if it was an all encompassing solution that could scan on prem assets as well.

**What problems is Orca Security solving and how is that benefiting you?**

Container scanning!!!

  ### 33. Good product, but there is still place for improvement

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.)

**Reviewed Date:** December 09, 2024

**What do you like best about Orca Security?**

Easy to filter the alerts and create automatic tickets.
AI generated remediation steps making fixing the issues easier.
Support is quite responsive

**What do you dislike about Orca Security?**

The screen is sometimes still cluttered a bit (there was improvement in this since we started to use the product, but still sometimes there is way too much information visible, and need a lot of clicks to get to the needed details.)
API calls are sometimes very limited, workarounds are needed for custom integrations.

**What problems is Orca Security solving and how is that benefiting you?**

We get better overview of our security posture from multi cloud environment. we can compare the "secureness" of our clouds to eachother, as we have a common tool to track the status.

  ### 34. Product is outstanding but the support is even better.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.)

**Reviewed Date:** February 27, 2025

**What do you like best about Orca Security?**

I believe the most essential part of any solution is to have support go beyond what is expected. With Orca we have that. I have found that when we have a request for anything, they are able to put it in the pipeline and work on it. It is nice when a customer’s concerns and request are taken and acted upon immediately. I 100% recommend this solution to anyone.

**What do you dislike about Orca Security?**

I have found nothing that I dislike about this application.

**What problems is Orca Security solving and how is that benefiting you?**

Currently, they are solving an issue with PII scanning in Storage locations. This is greatly beneficial since all data location is essential to any data management program.

  ### 35. The security weapon

**Rating:** 5.0/5.0 stars

**Reviewed by:** Sachin  G. | Senior Application Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** June 03, 2025

**What do you like best about Orca Security?**

The platform and the options over the platform

**What do you dislike about Orca Security?**

Nothing to dislike for the orca as a security tool

**What problems is Orca Security solving and how is that benefiting you?**

Vulnerability depth scanning

  ### 36. Comprehensive tool at a very affordable price-point

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 07, 2025

**What do you like best about Orca Security?**

Orca security has basically anything we could think of interms of CNAPP and CSPM capabilities. It gives us valuable insight and is truly an all in one cloud security package.

**What do you dislike about Orca Security?**

We have not found many downsides of using Orca security, the only I could think of is the needd for competely different portals for our govcloud environments.

**What problems is Orca Security solving and how is that benefiting you?**

Visibility, visibility, visibility. It is very hard to have accurate inventory without a specialized tool like orca. We are now able to see our infrastructure and how it is configured in a single pane of glass.

  ### 37. Orca As an MSP

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** February 26, 2025

**What do you like best about Orca Security?**

The platform is intuitive and clear with representing cloud findings. Providing valuable context to our customers and allowing improvement in cloud security posture. Easy and quick to implement with strong customer support team.

**What do you dislike about Orca Security?**

Issues with the significant amount of data brought back from the platform can be slightly daunting but valuable in the long run.

**What problems is Orca Security solving and how is that benefiting you?**

Identifying vulnerabilities and cloud issues within cloud environments.

  ### 38. Platform that provide umbrella solution that we needed

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** November 05, 2024

**What do you like best about Orca Security?**

Orca provides an umbrella solution for security that we need in one dashboard. The integration with other platforms is complete and easy to use, orca also provides a useful bot in customer support and a private slack channel that is very helpful for us to ask if there are any questions, all features are easy to use and contain the reports that are easy to generate, this platform makes our job easier.

**What do you dislike about Orca Security?**

in the past: the Orca platform is multi-tenant and able impact the performance of the platform
No quick/fast scan to verify immediately the fix

**What problems is Orca Security solving and how is that benefiting you?**

Orca platform provide umbrella solution for security things that we need in one dashboard, so it make our job easier.

  ### 39. Orca Security

**Rating:** 5.0/5.0 stars

**Reviewed by:** Robinson G. | Staff Security Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** January 27, 2023

**What do you like best about Orca Security?**

Having an Agentless solution is the way to go.  I also like the new features that are constantly introduced.

**What do you dislike about Orca Security?**

I'd like Orca to provide a faster scanning approach. I think the 24 hours wait creates a security notification gap, eventhough scans on demand are possible.

**What problems is Orca Security solving and how is that benefiting you?**

I like that we don't need a management console to deploy Orca endpoint agents, and the fact that we can identify any cloud resource in our environment provides excellent  and accurate asses visibility.

  ### 40. Orca exceeds expectations as a cloud security solution and back the product up with great support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.)

**Reviewed Date:** November 06, 2024

**What do you like best about Orca Security?**

SaaS Configuration is incredibly easy, but they also have the capability to support private deployment models as well

Support and turnaround times for requested product functionality are quick

Discovery search feature is great and makes it easy to quickly pull together custom reports

API Security feature does a great job highlighting external exposure risks for cloud application services where other competitors fell short 

Coverage of CSP services Inventoried within Orca include even the darker corners of the 1000's of cloud services available

**What do you dislike about Orca Security?**

Ui can be a little buggy with the newer features sometimes, but it's never impacted what I needed to get done and it is still by far the best Ui experience amongst it's direct competitors

**What problems is Orca Security solving and how is that benefiting you?**

I've been able to leverage Orca's Agentless scan results to quickly accelerate our identification and remediation process for vulnerabilities across cloud environments. Whether you're just starting to understand the state of your cloud environments or are looking to speed up your response time to zero day Vulns, Orca helps takes the guess work out of what should be prioritized first with an excellent approach to risk contextualization.     

Additionally, their API Security feature does an exceptional job shining light on an underappreciated aspect of cloud security. The Cloud is not a traditional network perimeter and failure to monitor or understand how these cloud provider application services can impact cloud network boundaries can be a costly mistake. This functionality should be on your 'must have' list when evaluating competitors  

The way core AWS, Azure and GCP services are named and how they function are all fundamentally unique to each provider, but Orca does a great job highlighting risks specific to each provider while also normalizing some of the terminology across providers so that you don't have to be an expert in the nuances of comparable service's

  ### 41. Deep insights at an affordable price

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.)

**Reviewed Date:** August 19, 2024

**What do you like best about Orca Security?**

The visibility into cloud workloads is unparalleled. You can get complete visibility into everything in your public cloud provider in 15 minutes, except for Kubernetes workloads, which require another 30 minutes to set up. Orca finds vulnerabilities and misconfigurations.

**What do you dislike about Orca Security?**

Orca has indicated that it has no intention of expanding into on-prem workloads. If you have offices with network gear or servers, you must split your risk identification and prioritization process - one for each environment. 

Additionally, Orca does not proactively communicate upcoming changes to its internal data model. If you're using advanced searches or automation that depend on the Orca data model, these can break or return unexpected results when the underlying data model changes.

**What problems is Orca Security solving and how is that benefiting you?**

Orca identifies and prioritizes risk in cloud environments. It detects risks on VMs, in containers, and in how you configure your public cloud provider. These are prioritized based on a number of factors, such as reachability, blast radius, the classification of data on the resource, what cloud privileges the resource has, etc.

  ### 42. One of the Most Effective Security Tools I Have Ever Used

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.)

**Reviewed Date:** November 12, 2024

**What do you like best about Orca Security?**

Orca is great about helping security teams priortize vulnerabilities based on factors other than just CVSS scores so that we make the most efficient use of our time.

**What do you dislike about Orca Security?**

I think there is room for improvement in some parts of the UX. Orca is great about gathering a ton of data about our resources, misconfigurations, and vulnerabilities, but I think there is still room for improvement in terms of summarizing large quantities of vulnerabilities and pivoting to them from the dashboards.

**What problems is Orca Security solving and how is that benefiting you?**

Inventorying cloud resources, vulnerability scanning, and vulnerability prioritization. Priortizing the right vulnerabilties allows our team to be more effective with our time.

  ### 43. Fast, Reliable and Smart

**Rating:** 5.0/5.0 stars

**Reviewed by:** Gilder L. | Infrastructure Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** February 21, 2024

**What do you like best about Orca Security?**

Orca is big smart platform that has helped our organization to meet our compliance standards. The tool is not only very complete but also smart, easy to integrate and with excellent customer support. Extra features such as AI integration makes the platform easy to use, understand and easy to follow steps.

**What do you dislike about Orca Security?**

Orca discontinued a whole page where it showed alert details and now is called "legacy page". This was very useful as we were able to see alerts in a better, big UI, now the remediation tab is smaller.

**What problems is Orca Security solving and how is that benefiting you?**

- Keep the Infrastructure Compliant 
- Security and Alerting 
- Policies Enforcement

  ### 44. I used Orca for my cloud management.

**Rating:** 3.5/5.0 stars

**Reviewed by:** Mohd S. | Assistant Manager Information Security  , Information Technology and Services, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 23, 2024

**What do you like best about Orca Security?**

Agentless approch to handle the cloud security. It is eassy to onbaoard and can integarte with AWS IAM.
Also, It is supported by various cloud (almost every) partner.

**What do you dislike about Orca Security?**

There is not a big issue in terms of use however, the reporting stsrute reports can be  improved. Some of the KPI featues and final dashboard is not showcase the result in the best form.

**What problems is Orca Security solving and how is that benefiting you?**

We are having 3 cloud envionmenmt which include (AWS, GCP and Azure ) and managing security for these is challege for us. Orca give us unified interface to manage scueity posture in sigle tool.

Orca integartes with our rnvionment and helping us to manging vulnerability for our cloud infrasturcture.

  ### 45. One of the best cloud security tools that deepen your knowledge and keeps you secure in the cloud

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.)

**Reviewed Date:** November 08, 2024

**What do you like best about Orca Security?**

The product managers know well the cloud security business and are open to improve the product based on the client suggestions.
Navigation flow is nice as well as the findings that go more in depth.

**What do you dislike about Orca Security?**

Right now the RBAC. There are issues when multiple teams share the same cloud account and you want to measure their security.
Also would have been nice to have an onboarding in 3 steps: Control Plane, Data Plane and Scanning of the Managed Databases.

**What problems is Orca Security solving and how is that benefiting you?**

Bringing visibility into the cloud environments and helping to fix vulnerabilities and security issues;

  ### 46. Orca Cloud Security Solution CNAPP

**Rating:** 5.0/5.0 stars

**Reviewed by:** maneesh g. | Configuration Management Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** November 07, 2024

**What do you like best about Orca Security?**

In Orca Security console, dashboards, Security Score, Lateral movement all features are great and ease to use. I like the agentless approach and provide finding even in stopped instances is marvelous.

**What do you dislike about Orca Security?**

not supported on-prem solution in orca security.

**What problems is Orca Security solving and how is that benefiting you?**

Overall cloud security for our workload on aws, azure gcp related to VA, misconfiguration, lateral movement risk, Data at risk etc..

  ### 47. Useful Tool with Learning Curve

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** August 22, 2024

**What do you like best about Orca Security?**

The alerts are very helpful, especially with the trending vulnerabilities that are more urgent to patch. When there are alerts needing immediate attention, an Orca engineer will sometimes personally reach out to ensure they are being addressed and not dismissed as noise. The support provided during the regular cadence calls are helpful, and it was easy to integrate with other tools.

**What do you dislike about Orca Security?**

There is a learning curve to learn how to query the platform for assets and alerts. The way findings can be vulnerabilities or alerts (likely both) can be confusing. A login is required to access documentation so it is hard to share with others.

**What problems is Orca Security solving and how is that benefiting you?**

Orca is used mainly for cloud asset scanning and alerting. It correlates the different parts of our Cloud infrastructure and allows the mapping of attack paths.

  ### 48. Would recommend do to the effectiveness and easy of on-boarding.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 19, 2022

**What do you like best about Orca Security?**

Easy to use and the support from our onboarding team was great.  Scott and Joshua are very proactive in what are business case is and how Orca can help.

**What do you dislike about Orca Security?**

Minor visual effects within the UI.  Data discovery to ensure Data Loss Prevention can be affective.  Reporting could also use a bit of dazzling for the Executives.

**Recommendations to others considering Orca Security:**

This is a quick setup and quick win with visibility of your Cloud Infrastructure.

**What problems is Orca Security solving and how is that benefiting you?**

Complete Cloud Posture and Discovery of everything within AWS.  It helps ensure we have security controls in place within our Cloud environment

  ### 49. Orca's Insightful Remediation Steps

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Oil & Energy | Mid-Market (51-1000 emp.)

**Reviewed Date:** November 06, 2024

**What do you like best about Orca Security?**

Orca has given us the ability to have valuable insight into our cloud environments We are also able to easily have insights into alerts and the remediation steps that are provided are super helpful to assist with fixing an alert It has also been super nice to have the integration into slack to give us a better timeliness with our response times.

**What do you dislike about Orca Security?**

I honestly do not have anything bad right now

**What problems is Orca Security solving and how is that benefiting you?**

Orca has helped with their detailed remediation descriptions that helps speed up the process of investigating alerts.

  ### 50. Great & smooth experience

**Rating:** 4.0/5.0 stars

**Reviewed by:** Sripriya V. | Senior Analyst, Enterprise (> 1000 emp.)

**Reviewed Date:** November 15, 2024

**What do you like best about Orca Security?**

the flexibity & it being the agentless platform. supporting multi cloud

**What do you dislike about Orca Security?**

dislike the fact that many CVEs will be categorized under service vuln & vuln software

**What problems is Orca Security solving and how is that benefiting you?**

it makes sure all the assets on different cloud platform are at 1 place & gives the complete details of those


## Orca Security Discussions
  - [Where is Orca security based?](https://www.g2.com/discussions/where-is-orca-security-based) - 2 comments
  - [How much does Orca security cost?](https://www.g2.com/discussions/how-much-does-orca-security-cost) - 1 comment
  - [What is ORCA platform?](https://www.g2.com/discussions/what-is-orca-platform) - 1 comment
  - [What does Orca Security do?](https://www.g2.com/discussions/what-does-orca-security-do) - 1 comment

- [View Orca Security pricing details and edition comparison](https://www.g2.com/products/orca-security/reviews?page=3&qs=pros-and-cons&section=pricing&secure%5Bexpires_at%5D=2026-08-05+07%3A43%3A29+-0500&secure%5Bsession_id%5D=ab4d67da-ab65-4180-a575-ea7b3fe56661&secure%5Btoken%5D=208319f7cee3f5dd3a823a48cc403ea90456b6e2773c201e183f6abbe4a2d56e&format=llm_user)
## Orca Security Integrations
  - [Akamai Edge DNS](https://www.g2.com/products/akamai-edge-dns/reviews)
  - [Amazon CloudWatch](https://www.g2.com/products/amazon-cloudwatch/reviews)
  - [Amazon GuardDuty](https://www.g2.com/products/amazon-guardduty/reviews)
  - [Amazon SageMaker](https://www.g2.com/products/amazon-sagemaker/reviews)
  - [Amazon Simple Notification Service (SNS)](https://www.g2.com/products/amazon-simple-notification-service-sns/reviews)
  - [Amazon Simple Queue Service (SQS)](https://www.g2.com/products/amazon-simple-queue-service-sqs/reviews)
  - [Amazon Simple Storage Service (S3)](https://www.g2.com/products/amazon-simple-storage-service-s3/reviews)
  - [Anecdotes](https://www.g2.com/products/anecdotes/reviews)
  - [AppVeyor](https://www.g2.com/products/appveyor/reviews)
  - [Aqua Security](https://www.g2.com/products/aqua-security/reviews)
  - [Auth0](https://www.g2.com/products/auth0/reviews)
  - [AWS Bedrock](https://www.g2.com/products/aws-bedrock/reviews)
  - [AWS CloudTrail](https://www.g2.com/products/aws-cloudtrail/reviews)
  - [AWS CodeBuild](https://www.g2.com/products/aws-codebuild/reviews)
  - [AWS Security Hub](https://www.g2.com/products/aws-security-hub/reviews)
  - [Axonius](https://www.g2.com/products/axonius/reviews)
  - [Azure Blob Storage](https://www.g2.com/products/azure-blob-storage/reviews)
  - [Azure Pipelines](https://www.g2.com/products/azure-pipelines/reviews)
  - [Bamboo](https://www.g2.com/products/bamboo-bamboo/reviews)
  - [Bitbucket](https://www.g2.com/products/bitbucket/reviews)
  - [Brinqa](https://www.g2.com/products/brinqa/reviews)
  - [Buddy](https://www.g2.com/products/buddy/reviews)
  - [Buildkite](https://www.g2.com/products/buildkite/reviews)
  - [Chainguard](https://www.g2.com/products/chainguard/reviews)
  - [CircleCI](https://www.g2.com/products/circleci/reviews)
  - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews)
  - [Coralogix](https://www.g2.com/products/coralogix/reviews)
  - [Cribl Stream](https://www.g2.com/products/cribl-stream/reviews)
  - [CrowdStrike Falcon Cloud Security](https://www.g2.com/products/crowdstrike-falcon-cloud-security/reviews)
  - [Datadog](https://www.g2.com/products/datadog/reviews)
  - [Drata](https://www.g2.com/products/drata/reviews)
  - [Echo](https://www.g2.com/products/onehive-echo/reviews)
  - [Elastic](https://www.g2.com/products/elastic/reviews)
  - [Freshservice](https://www.g2.com/products/freshservice/reviews)
  - [GitHub](https://www.g2.com/products/github/reviews)
  - [GitLab](https://www.g2.com/products/gitlab/reviews)
  - [GoCD](https://www.g2.com/products/gocd/reviews)
  - [Google Cloud Build](https://www.g2.com/products/google-cloud-build/reviews)
  - [Google Cloud Storage](https://www.g2.com/products/google-cloud-storage/reviews)
  - [Google Security Operations](https://www.g2.com/products/google-security-operations/reviews)
  - [Google Vertex AI SDK](https://www.g2.com/products/google-vertex-ai-sdk/reviews)
  - [Google Workspace](https://www.g2.com/products/google-workspace/reviews)
  - [IBM QRadar EDR](https://www.g2.com/products/ibm-qradar-edr/reviews)
  - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews)
  - [IBM QRadar SOAR](https://www.g2.com/products/ibm-qradar-soar/reviews)
  - [Jenkins](https://www.g2.com/products/jenkins/reviews)
  - [Jira](https://www.g2.com/products/jira/reviews)
  - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews)
  - [JupiterOne](https://www.g2.com/products/jupiterone/reviews)
  - [Linear](https://www.g2.com/products/linear/reviews)
  - [Maze](https://www.g2.com/products/maze-2025-09-01/reviews)
  - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews)
  - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews)
  - [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews)
  - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews)
  - [monday AI Work Platform](https://www.g2.com/products/monday-com/reviews)
  - [Okta](https://www.g2.com/products/okta/reviews)
  - [OneLogin](https://www.g2.com/products/onelogin/reviews)
  - [Openai](https://www.g2.com/products/openai/reviews)
  - [Opsgenie](https://www.g2.com/products/opsgenie/reviews)
  - [PagerDuty](https://www.g2.com/products/pagerduty/reviews)
  - [Panther](https://www.g2.com/products/panther/reviews)
  - [Ping Identity](https://www.g2.com/products/ping-identity/reviews)
  - [seemplicity](https://www.g2.com/products/seemplicity/reviews)
  - [Slack](https://www.g2.com/products/slack/reviews)
  - [Snowflake](https://www.g2.com/products/snowflake/reviews)
  - [Snyk](https://www.g2.com/products/snyk/reviews)
  - [Splunk](https://www.g2.com/products/splunk-2025-01-30/reviews)
  - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews)
  - [Swimlane](https://www.g2.com/products/swimlane/reviews)
  - [Tamnoon](https://www.g2.com/products/tamnoon/reviews)
  - [TeamCity](https://www.g2.com/products/teamcity/reviews)
  - [Tines](https://www.g2.com/products/tines/reviews)
  - [Torq](https://www.g2.com/products/torq-ai-torq/reviews)
  - [Travis CI](https://www.g2.com/products/travis-ci/reviews)
  - [Vulcan](https://www.g2.com/products/vulcan/reviews)

## Orca Security Features
**Management**
- Dashboards and Reports
- Workflow Management
- Administration Console

**Administration**
- Risk Scoring
- Secrets Management
- Security Auditing
- Configuration Management

**Security**
- Compliance Monitoring
- Anomoly Detection
- Data Loss Prevention
- Cloud Gap Analytics

**Performance**
- Issue Tracking
- Detection Rate
- False Positives
- Automated Scans

**API Management **
- API Discovery
- API Monitoring
- Reporting
- Change Management

**Configuration**
- DLP Configuration
- Configuration Monitoring
- Unified Policy Management
- Adaptive Access Control
- API / Integrations

**Access control - Cloud Infrastructure Entitlement Management (CIEM)**
- Policy Management
- Fine-Grained Access Control
- Role-Based Access Control (RBAC)
- AI-driven access control

**Security - Cloud-Native Application Protection Platform (CNAPP)**
- Workload and container security
- Threat detection and response
- DevSecOps Integrations
- Unified Visibility

**Model Protection - AI Security Solutions**
- Input Hardening
- Input/Output Inspection
- Integrity Monitoring
- Model Access Control

**Functionality - AI Security Posture Management (AI-SPM) Tools**
- Security Ecosystem Integration
- AI Asset Discovery
- Adaptive Policy Updates
- Access and Permissions Monitoring
- Policy Enforcement

**Cloud Visibility**
- Data Discovery
- Cloud Registry
- Cloud Gap Analytics

**Operations**
- Governance
- Logging and Reporting
- API / Integrations

**Monitoring**
- Continuous Image Assurance
- Behavior Monitoring
- Observability

**Compliance**
- Governance
- Data Governance
- Sensitive Data Compliance

**Network**
- Compliance Testing
- Perimeter Scanning
- Configuration Monitoring

**Security Testing**
- Compliance Monitoring
- API Verification
- API Testing

**Visibility**
- Multicloud Visibility
- Asset Discovery

**Monitoring - Cloud Infrastructure Entitlement Management (CIEM)**
- Monitoring
- AI-based detection

**Artificial Intelligence - Cloud-Native Application Protection Platform (CNAPP)**
- Intelligent remediations and suggestions
- Risk prioritization
- Anomaly detection using machine learning

**Runtime Monitoring - AI Security Solutions**
- AI Behavior Anomaly Detection
- Audit Trail

**Risk Assessment - AI Security Posture Management (AI-SPM) Tools**
- AI Risk Assessment
- AI Asset Posture Scoring

**Security**
- Data Security
- Data loss Prevention
- Security Auditing

**Security Controls **
- Anomaly Detection
- Data Loss Prevention
- Security Auditing
- Cloud Gap Analytics

**Protection**
- Dynamic Image Scanning
- Runtime Protection
- Workload Protection
- Network Segmentation

**Administration**
- Policy Enforcement
- Auditing
- Workflow Management

**Application**
- Manual Application Testing
- Static Code Analysis
- Black Box Testing

**Security Management**
- Security and Policy Enforcement
- Anomoly Detection
- Bot Detection

**Vulnerability Management**
- Threat Hunting
- Vulnerability Scanning
- Vulnerability Intelligence
- Risk-Prioritization

**Auditing - Cloud Infrastructure Entitlement Management (CIEM)**
- Visibility
- Compliance Reporting

**Cloud Configuration Management - Cloud-Native Application Protection Platform (CNAPP)**
- Multi-cloud visibility
- Cloud Security Posture Management (CSPM)

**Policy Enforcement and Compliance - AI Security Solutions**
- Scalable Governance
- Integrations
- Shadow AI
- Policy‑as‑Code for AI Assets

**Governance & Compliance - AI Security Posture Management (AI-SPM) Tools**
- AI‑Generated Content Controls
- Audit Trails

**Identity**
- SSO
- Governance
- User Analytics

**Agentic AI - Vulnerability Scanner**
- Autonomous Task Execution
- Proactive Assistance

**Agentic AI - Cloud-Native Application Protection Platform (CNAPP)**
- Autonomous Task Execution
- Adaptive Learning

**Agentic AI - Cloud Detection and Response (CDR)**
- Autonomous Task Execution
- Proactive Assistance
- Decision Making

**Services - Cloud Detection and Response (CDR) **
- Managed Services

## Top Orca Security Alternatives
  - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - 4.7/5.0 (836 reviews)
  - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) - 4.4/5.0 (396 reviews)
  - [FortiCNAPP](https://www.g2.com/products/forticnapp/reviews) - 4.4/5.0 (383 reviews)

