I appreciate the visibility the platform provides across our cloud resources. The interface is modern and easy to work with. Risk prioritization also helps us focus on the right tasks, and it has simplified our security workflow. Review collected by and hosted on G2.com.

Some of the advanced settings take time to understand, and additional onboarding resources would be useful. That said, these are relatively minor drawbacks. Review collected by and hosted on G2.com.

The new agentless code reachability feature has helped us reduce the number of false positives our SOC receives, quite dramatically. We've been very impressed with this features ability to reduce false positives which was a concern of ours. Review collected by and hosted on G2.com.

We need to create custom, exported reports for internal monthly business reviews. This takes considerable time and effort compared to other vendor tools we use. Orca should improve this: dashboards are great for SecOps teams, but reporting is still a key requirement especially for larger enterprises like ours. Review collected by and hosted on G2.com.

We manage multiple client cloud environments, and Orca Security’s side-scanning technology is a major advantage for our deployment teams because it is completely agentless. We don’t have to spend weeks negotiating with the client’s internal developers to install security agents on the workloads. Instead, we simply connect Orca to the AWS or Azure accounts via the IAM role. Review collected by and hosted on G2.com.

Managing multi-tenant environments is a little hard in this. We can have separate client environments, but the overall dashboard approach doesn’t provide a clear multi-tenant view. Review collected by and hosted on G2.com.

The agentless visibility across workloads is a major advantage. It performs well across our mix of containers, VMs, and serverless environments. Alerts are contextual and include clear remediation guidance, which makes them far more actionable than a typical CVE list. Review collected by and hosted on G2.com.

There’s a bit of a learning curve when you first start navigating the platform. Also, some of the remediation suggestions could be better tailored to specific environments. Review collected by and hosted on G2.com.

Managing the fleet of Azure servers for our high-frequency trading and logistics platform requires absolute visibility without any performance degradation. Orca SideScanning has been a real asset. Because it operates entirely agentless, we can deploy comprehensive security monitoring across our entire Azure infrastructure without ever having to schedule maintenance windows. Review collected by and hosted on G2.com.

Navigating between different regional cloud environments within the main dashboard can be slightly disorienting when I’m trying to compare the risk posture of our European trading servers against our Asian logistics nodes. Review collected by and hosted on G2.com.

The shift-left capabilities are truly phenomenal. We can build custom applications to track quality and temperature metrics. Orca also integrates directly into our CI/CD pipelines: before a new version of our logistics app is deployed to the live AWS environment, Orca scans our infrastructure-as-code templates. Review collected by and hosted on G2.com.

The main issue I’ve run into is the API rate limits when integrating Orca with the IT dashboard. Review collected by and hosted on G2.com.

As a digital agency managing cloud transformation for various corporate clients, Orca Security sidecaning has been the best option for us. It’s completely agentless, so we don’t have to spend weeks negotiating with our clients’ internal developers to install security agents on active workloads. Review collected by and hosted on G2.com.

The built-in reporting engine feels heavily geared toward technical engineers, but I need to present our monthly security posture to non-technical client stakeholders or the board of directors. Review collected by and hosted on G2.com.

We adopted Orca Security to unify security across AWS, Azure, and GCP. The side-scanning approach is very seamless and doesn’t impact performance, which was important for our production environment. We now have continuous visibility into vulnerabilities, misconfigurations, and data exposure across multiple cloud platforms, all in one place. Review collected by and hosted on G2.com.

The initial setup required the right permissions and configuration for each cloud provider, so the deployment took planning and close coordination between teams. Review collected by and hosted on G2.com.

This gives visibility into a cloud environment without installing agents. During cloud migration projects, we often need to assess a client’s environment quickly to identify risks and exposed storage. Instead of deploying multiple tools, we can connect to the cloud account in a short time and get the information we need. Review collected by and hosted on G2.com.

The dashboard shows a lot of information, which is good, but it doesn’t feel very beginner-friendly. Review collected by and hosted on G2.com.

The agentless model makes Orc easier to integrate into our cloud because we didn’t have to deploy agents on every workload or server. It also gives us visibility across all workloads, including storage, virtual machines, and cloud configurations. Review collected by and hosted on G2.com.

At the beginning, we received many alerts until we adjusted our policies and the alert threshold to better match our environment and our actual risk level. Review collected by and hosted on G2.com.