We evaluated platforms that clearly retrofitted or acquired their AI security story. With Orca, AI security is built natively into the same unified data model that has powered the platform from day one—from code to cloud to runtime—rather than relying on stitched-together tools. AI shows up across our codebase, our data pipeline, and the product our customers use, and Orca treats that entire footprint as a first-class part of the attack surface instead of an afterthought. Review collected by and hosted on G2.com.

The platform is deep enough that, even after months of using it, we’re still discovering new capabilities. A guided “you haven’t used this yet” nudge would be really helpful for surfacing features we might otherwise miss. Review collected by and hosted on G2.com.

At Marketing Bugle, we build and host high-traffic promotional websites, sweepstakes platforms, and digital advertising campaigns for enterprise brands. During a major product launch or Super Bowl campaign, our cloud servers experience massive traffic spikes. Orca Security’s agentless side-scanning is critical for us, because we can’t risk installing traditional security agents on our client-facing web servers. Orca connects directly through the API and gives us total vulnerability visibility without touching or slowing down our marketing environments. Review collected by and hosted on G2.com.

Marketing agencies are notorious for spinning up infrastructure and then forgetting about it. When we first deployed ORca, the initial scan triggered an overwhelming avalanche of alerts, because it uncovered dozens of orphaned staging servers and long-forgotten microsites from campaigns we ran three years ago. Review collected by and hosted on G2.com.

We’re a hybrid digital agency managing web hosting, custom app development, and design systems for dozens of clients at the same time. Our support desk used to be overwhelmed by security alerts coming from fragmented tools across different client AWS and GCP accounts. Orca Security’s agentless platform has been the best fit for us because we don’t have to beg clients for permission to install security agents on production servers; we just connect Orca to the cloud account via API. Review collected by and hosted on G2.com.

When we take over hosting for a new client and connect their legacy cloud environment to Orca, the initial scan generates a huge number of alerts that get sent to our support email. Review collected by and hosted on G2.com.

Achieving total multi-cloud visibility across AWS, Azure, and GCP under a single, cohesive management dashboard is a spectacular victory for an enterprise supply chain network. Our shipping routing databases run on one cloud, our customer-facing tracking apps run on another, and our back-office partner management systems run on a third. Review collected by and hosted on G2.com.

The cloud asset consumption pricing architecture can introduce minor forecasting friction during long-term operational budgeting cycles, because our logistics platform aggressively auto-scales our cloud server cluster and container fleets to handle massive surges in transaction volume during the peak global holiday shipping seasons. Review collected by and hosted on G2.com.

Orca provides a centralized view of vulnerabilities, misconfigurations, and cloud risks across our environments. The agentless setup made onboarding much easier than I expected, and we were able to gain visibility very quickly. I also find the risk prioritization helpful, since it lets the team focus on the issues that truly need attention instead of spending time reviewing every single alert. Review collected by and hosted on G2.com.

The platform offers a lot of features, so certain sections can feel overwhelming at first. I think a bit more customization for dashboards and reports would make the overall experience smoother and more user-friendly. Review collected by and hosted on G2.com.

The platform provides centralized visibility into vulnerabilities, misconfigurations, and exposed assets without requiring agents on our workloads. Setup was smooth, and the dashboards make it easier to see where the biggest risks are. I also find the contextual prioritization valuable because it cuts down on noise and helps the team stay focused on the most important findings. Review collected by and hosted on G2.com.

Some of the more advanced features take time to fully learn, especially for new users. I also think the reporting customization could be improved in a few areas to make it easier to tailor reports to specific needs. Review collected by and hosted on G2.com.

We operate high-traffic booking engines and manage complex travel itineraries across South America. During peak tourist seasons, our AWS servers handle massive spikes in reservation traffic. Orca side-scanning is the reason we adopted this approach, because traditional security agents caused unacceptable CPU drag on our booking servers, leading to slower page loads. Orca connects directly via cloud API. Review collected by and hosted on G2.com.

The initial deployment uncovered so much technical debt that it was completely overwhelming. Because it scans every corner of our cloud, including long-forgotten staging servers from old marketing campaigns, our dashboard was flooded with thousands of informational alerts. Review collected by and hosted on G2.com.

We manage high-volume pharmaceutical manufacturing data, patient distribution pipelines, and corporate cloud hosting. Because we process millions of critical healthcare transactions, zero-latency cloud performance is non-negotiable. Orca security’s agentless scanning is brilliant. Installing traditional security agents on heavily utilized medical databases creates unacceptable CPU overhead. Orca connects directly to the Azure environments via API, reading the runtime block storage out of band. Review collected by and hosted on G2.com.

When we connected Ora to the newly acquired regional pharmacy legacy cloud infrastructure during onboarding, the scan generated an absolute avalanche of alerts. Because Ora scans everything, including orphaned staging servers and forgotten backup environments, the dashboard instantly filled up. Review collected by and hosted on G2.com.

Agents were being created in different clouds and business units , and nobody had a single list for what was running where, Orca effectively gives us an Ai agent restrict a unified view showing which agents exist, which accounts they live in ,what system, they touch wand who owns them. That registry like visibility means the CISO no longer has how many agents dow we even have. Review collected by and hosted on G2.com.

We chose to tag agents with owners and business units inside Orca and the small amount of work has paid off in every risk review since. Review collected by and hosted on G2.com.

Our agents can call tools, hit APIs, and read from data sources, but until Orca we didn’t have a clear map of exactly which combinations were possible. Orca shows, for each agent, which tools it can invoke, which services it can reach, and what data stores sit behind those paths. That makes it obvious when an agent’s tool stack is broader than its job. Review collected by and hosted on G2.com.

We aligned the Orca tool and data labels with our internal naming conventions, which made it easier for builders to immediately recognize their own stacks. Review collected by and hosted on G2.com.