--- title: Orca Security Reviews meta\_title: 'Orca Security Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 316 reviews by the users' company size, role or industry to find out how Orca Security works for a business like yours. aggregate\_rating: rating\_value: 4.7 review\_count: 316 scale: '5' date\_modified: '2026-08-09' parent\_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- # Orca Security Reviews & Product Details Visit Website The Orca Cloud Security Platform identifies, prioritizes, and remediates risks and compliance issues in workloads, configurations, and identities across your cloud estate spanning AWS, Azure, Google Cloud, Kubernetes, Alibaba Cloud, and Oracle Cloud. Orca offers the industry’s most comprehensive cloud security solution in a single platform — eliminating the need to deploy and maintain multiple point solutions. Orca is agentless-first, and connects to your environment in minutes using Orca’s patented SideScanning™ technology that provides deep and wide visibility into your cloud environment, without requiring agents. In addition, Orca can integrate with third-party agents for runtime visibility and protection for critical workloads. Orca is at the forefront of leveraging Generative AI for simplified investigations and accelerated remediation – reducing required skill levels and saving cloud security, DevOps, and development teams time and effort, while significantly improving security outcomes. As a Cloud Native Application Protection Platform (CNAPP), Orca consolidates many point solutions in one platform, including: CSPM, CWPP, CIEM, Vulnerability Management, Container and Kubernetes Security, DSPM, API Security, CDR, Multi-cloud Compliance, Shift Left Security, and AI-SPM. * * * Product Website Orca Security Seller [Orca Security](https://www.g2.com/sellers/orca-security) Discussions [Orca Security Community](https://www.g2.com/products/orca-security/discuss) Languages Supported English Solution Type All-in-One Overview by Caleb Furrier Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 1 month [ View More Pricing Information ](https://www.g2.com/products/orca-security/pricing) ## Orca Security Integrations (76) What do users say about integrations? Verified by Orca Security [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Akamai Edge DNS ](https://www.g2.com/products/akamai-edge-dns/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Amazon CloudWatch ](https://www.g2.com/products/amazon-cloudwatch/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Amazon GuardDuty ](https://www.g2.com/products/amazon-guardduty/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Amazon SageMaker ](https://www.g2.com/products/amazon-sagemaker/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Amazon Simple Notification Service (SNS) ](https://www.g2.com/products/amazon-simple-notification-service-sns/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Amazon Simple Queue Service (SQS) ](https://www.g2.com/products/amazon-simple-queue-service-sqs/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Amazon Simple Storage Service (S3) ](https://www.g2.com/products/amazon-simple-storage-service-s3/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Anecdotes ](https://www.g2.com/products/anecdotes/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") AppVeyor ](https://www.g2.com/products/appveyor/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Aqua Security ](https://www.g2.com/products/aqua-security/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Auth0 ](https://www.g2.com/products/auth0/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") AWS Bedrock ](https://www.g2.com/products/aws-bedrock/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") AWS CloudTrail ](https://www.g2.com/products/aws-cloudtrail/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") AWS CodeBuild ](https://www.g2.com/products/aws-codebuild/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") AWS Security Hub ](https://www.g2.com/products/aws-security-hub/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Axonius ](https://www.g2.com/products/axonius/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Azure Blob Storage ](https://www.g2.com/products/azure-blob-storage/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Azure Pipelines ](https://www.g2.com/products/azure-pipelines/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Bamboo ](https://www.g2.com/products/bamboo-bamboo/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Bitbucket ](https://www.g2.com/products/bitbucket/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Brinqa ](https://www.g2.com/products/brinqa/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Buddy ](https://www.g2.com/products/buddy/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Buildkite ](https://www.g2.com/products/buildkite/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Chainguard ](https://www.g2.com/products/chainguard/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") CircleCI ](https://www.g2.com/products/circleci/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Cloudflare Application Security and Performance ](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Coralogix ](https://www.g2.com/products/coralogix/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Cribl Stream ](https://www.g2.com/products/cribl-stream/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") CrowdStrike Falcon Cloud Security ](https://www.g2.com/products/crowdstrike-falcon-cloud-security/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Datadog ](https://www.g2.com/products/datadog/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Drata ](https://www.g2.com/products/drata/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Echo ](https://www.g2.com/products/onehive-echo/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Elastic ](https://www.g2.com/products/elastic/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Freshservice ](https://www.g2.com/products/freshservice/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") GitHub ](https://www.g2.com/products/github/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") GitLab ](https://www.g2.com/products/gitlab/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") GoCD ](https://www.g2.com/products/gocd/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Cloud Build ](https://www.g2.com/products/google-cloud-build/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Cloud Storage ](https://www.g2.com/products/google-cloud-storage/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Security Operations ](https://www.g2.com/products/google-security-operations/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Vertex AI SDK ](https://www.g2.com/products/google-vertex-ai-sdk/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Workspace ](https://www.g2.com/products/google-workspace/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") IBM QRadar EDR ](https://www.g2.com/products/ibm-qradar-edr/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") IBM QRadar SIEM ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") IBM QRadar SOAR ](https://www.g2.com/products/ibm-qradar-soar/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Jenkins ](https://www.g2.com/products/jenkins/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Jira ](https://www.g2.com/products/jira/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") JumpCloud ](https://www.g2.com/products/jumpcloud/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") JupiterOne ](https://www.g2.com/products/jupiterone/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Linear ](https://www.g2.com/products/linear/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Maze ](https://www.g2.com/products/maze-2025-09-01/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Defender for Cloud ](https://www.g2.com/products/microsoft-defender-for-cloud/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Entra ID ](https://www.g2.com/products/microsoft-entra-id/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Sentinel ](https://www.g2.com/products/microsoft-sentinel/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Teams ](https://www.g2.com/products/microsoft-teams/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") monday AI Work Platform ](https://www.g2.com/products/monday-com/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Okta ](https://www.g2.com/products/okta/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") OneLogin ](https://www.g2.com/products/onelogin/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Openai ](https://www.g2.com/products/openai/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Opsgenie ](https://www.g2.com/products/opsgenie/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") PagerDuty ](https://www.g2.com/products/pagerduty/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Panther ](https://www.g2.com/products/panther/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Ping Identity ](https://www.g2.com/products/ping-identity/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") seemplicity ](https://www.g2.com/products/seemplicity/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Slack ](https://www.g2.com/products/slack/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Snowflake ](https://www.g2.com/products/snowflake/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Snyk ](https://www.g2.com/products/snyk/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Splunk ](https://www.g2.com/products/splunk-2025-01-30/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sumo Logic ](https://www.g2.com/products/sumo-logic/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Swimlane ](https://www.g2.com/products/swimlane/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Tamnoon ](https://www.g2.com/products/tamnoon/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") TeamCity ](https://www.g2.com/products/teamcity/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Tines ](https://www.g2.com/products/tines/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Torq ](https://www.g2.com/products/torq-ai-torq/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Travis CI ](https://www.g2.com/products/travis-ci/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Vulcan ](https://www.g2.com/products/vulcan/reviews) Show More YM Yagmi M. Enterprise (\> 1000 emp.) 8/3/2026 "Orca Makes Shadow Data Risks Obvious with Clear Sensitive Data Discovery" 5/5 What do you like best about Orca Security? There was a recurring problem with shadow data: production data getting copied into staging and dev accounts that were nowhere near as locked down, plus data stores nobody even remembered creating. Orca discovers sensitive data across managed, unmanaged, and shadow stores, including files on VMs, containers, and buckets, and then classifies it against categories like PII and payment data. Seeing a forgotten production snapshot sitting in a loosely controlled dev account, and having that tied to how exposed the account was, makes it obvious which copies are genuinely risky versus intentional. Review collected by and hosted on G2.com. What do you dislike about Orca Security? A bit of tuning was needed to distinguish sanctioned data copies from the risky ones, since some of the lower-environment data was there on purpose. That said, the configuration was quick to align with our internal workflows. Review collected by and hosted on G2.com. What problems is Orca Security solving and how is that benefiting you? It provides real visibility into sensitive data sprawl, including shadow data and misplaced data, so the gap between well-secured production and looser accounts stops being an invisible exposure. It also highlights where AI agents could run into sensitive data they should never be able to touch, turning those risky paths into concrete cleanup work. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic NA Nelson A. Enterprise (\> 1000 emp.) 8/2/2026 "Orca Adds Exposure Context That Makes Host Vulnerability Prioritization Easy" 5/5 What do you like best about Orca Security? A lot of attention goes to containers these days, but there are still plenty of VMs and long-lived hosts, and those were exactly where our old scanning was the patchiest. Orca covers them in the same model as everything else, showing which host vulnerabilities sit on internet-facing machines, which are tied to privileged identities, and which are genuinely reachable versus buried behind existing controls. That added context lets us prioritize host patching based on real exposure instead of relying on raw CVSS scores. Review collected by and hosted on G2.com. What do you dislike about Orca Security? A couple of the older hosts had the usual configurations that warranted a closer look, but the underlying findings were sound, and the added context made them straightforward to interpret. Review collected by and hosted on G2.com. What problems is Orca Security solving and how is that benefiting you? It closed the gap between our modern container coverage and our older VM estate. As a result, host risk is no longer prioritized on severity scores alone, but on how exposed it actually is. It also helps us understand when host and VM risk could affect the infrastructure supporting AI agents, or the systems those agents depend on. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic SK Saran K. Enterprise (\> 1000 emp.) 8/2/2026 "Orcca Delivered Rapid Visibility Into AI Agent Risks" 5/5 What do you like best about Orca Security? Our business moves fast. Developers, analysts, and PMs are constantly shipping, and AI agents are woven into many of those workflows. We needed visibility that could keep up with that pace—not a slow rollout that would still be incomplete by the time the next agent went live. Orcca connected to our cloud account, and within days it gave us a real risk picture, including the AI agents: the identities they run as, the endpoints they expose, and the data they could touch. We didn’t have to chase teams to get a clear understanding of our agent services. Review collected by and hosted on G2.com. What do you dislike about Orca Security? The main follow-on work was organizing the findings to match how our teams and business units are structured, including grouping agents by owner and function. That organizational step has made ongoing reviews much clearer for leadership. Review collected by and hosted on G2.com. What problems is Orca Security solving and how is that benefiting you? This removed the usual deployment barrier and gave us AI agent visibility before we could normally even finish planning the rollout. That speed matters even more as agents and their workflows appear across the state, because they become visible and governable as quickly as teams create them. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic CS Cathrine S. Enterprise (\> 1000 emp.) 7/29/2026 "Orca’s Attack Path View Transformed How We Prioritize Fixes" 5/5 What do you like best about Orca Security? The thing that really changed how we work is the attack path view. Instead of a list of separate findings, Orca shows the full chain: an exposed asset, the vulnerability on it, the identity it can assume, and the sensitive data at the end of that path. Seeing the entire route makes it obvious which single fix can break the whole chain, so we stopped trying to patch everything and started cutting the links that actually matter. Review collected by and hosted on G2.com. What do you dislike about Orca Security? In a large environment, the attack path graphs can hold a lot of detail, so we found it most effective to scope to the crown jewel assets first. Once we did that, the overall picture became clear and genuinely useful. Review collected by and hosted on G2.com. What problems is Orca Security solving and how is that benefiting you? It moved us from simply counting vulnerabilities to reasoning about exploitable routes, which is a much better use of a small team’s time. It’s especially valuable when AI agents sit somewhere along that route, because we can see how the agents access identities and how the data paths factor into the real chain an attacker could follow. As a result, we fix fewer things, but we reduce the more real risk. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic KK Kishore K. Enterprise (\> 1000 emp.) 7/29/2026 "Orca Uncovered Hidden Malware and Suspicious Workflows Our Other Tools Missed" 5/5 What do you like best about Orca Security? Orca flagged malicious files and suspicious workflows across our workloads that none of our other tooling had caught, including scenarios where an abused AI agent could have been used to plant or trigger malware. It goes beyond simple hash matching, picking up things like cryptominers and web shells that agents might deploy or invoke as part of a compromised toolchain. Because scanning happens off the workload at the storage and configuration layer, there’s nothing for the malware to hide from on the box itself, and it also covers hosts and agent-linked paths we never would have pointed a dedicated scanner at. Review collected by and hosted on G2.com. What do you dislike about Orca Security? We aligned the Orca agent-aware malware and threat findings with our existing endpoint response processes, which helped us fold that context smoothly into the way the team already operates. Review collected by and hosted on G2.com. What problems is Orca Security solving and how is that benefiting you? It gave us malware and abuse visibility across our cloud workloads and the agent paths that were previously blind spots. We can see not just that malware exists, but how AI agents could be used to deploy or spread it, and then cut those routes off. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic FS Fernando S. Enterprise (\> 1000 emp.) 7/27/2026 "Orca Uncovered Agent-Reachable Secrets Fast, with Clear Context and Low Noise" 5/5 What do you like best about Orca Security? We had a vague sense that credentials and secrets were scattered across our environment, but we didn’t have a clear map of which ones agents could actually see. Orca surfaced hardcoded API keys, SSH private keys, and database credentials in places agents or their tools might read—config files, storage buckets, and logs. It doesn’t just pattern-match; it uses entropy and the surrounding context to decide whether a string is truly a secret, which keeps the noise down. Seeing each secret in the context of agent reachability made it clear which exposures could be triggered by agents and needed immediate cleanup. Review collected by and hosted on G2.com. What do you dislike about Orca Security? We spent some time defining suppression rules for the test credentials in our sandboxes, so that agent-relevant secrets stayed front and center in the findings. Review collected by and hosted on G2.com. What problems is Orca Security solving and how is that benefiting you? It turned secret sprawl from an abstract worry into a concrete, prioritized cleanup list, with a special focus on the secrets that AI agents could stumble over. Exposed credentials have become a tracked, agent-aware risk rather than something we had to get to eventually. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic JX Jonathan X. Enterprise (\> 1000 emp.) 7/27/2026 "Orca Delivers a True Shift-Left Win for IaC and Pipeline Security" 5/5 What do you like best about Orca Security? Having Orca scan our infrastructure as code and our pipelines has been a genuine shift-left win for the AI agents. We started catching templates and configuration snippets that would have granted agents broad, long-lived permissions or exposed new agent endpoints before any of those changes ever deployed. Because Orca ties these IaC findings back to the same risk model it uses for the running environment, we can clearly see that a misconfiguration flagged in code is the same kind of agent exposure we’d otherwise be chasing down in production later. Review collected by and hosted on G2.com. What do you dislike about Orca Security? We worked closely with our platform team to integrate agent-focused checks cleanly into our build steps, and to decide which misconfigurations should trigger a warning versus block a deployment. Review collected by and hosted on G2.com. What problems is Orca Security solving and how is that benefiting you? It shifts cloud and agent security left in a way that actually sticks. We’re catching reachable, exploitable agent misconfigurations during code review instead of after agents are already live and exposed, which has made the whole pipeline safer without adding friction. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic MJ Markose J. Enterprise (\> 1000 emp.) 7/26/2026 "Orca Clarified Sensitive Data Exposure and AI Agent Access Paths" 5/5 What do you like best about Orca Security? Orca gave us a much clearer picture of where sensitive data actually lives in relation to our AI agents. It surfaced PII in storage, secrets in places agents might read, and old database snapshots sitting in accounts that newly created agents were able to reach. The real value is the context: each finding shows what the data is, whether it’s exposed, and which agents and identities can access it. That turned what could have been an overwhelming inventory into a clear, prioritized list of data our agents should never be able to touch, along with the paths we needed to close. Review collected by and hosted on G2.com. What do you dislike about Orca Security? We spent a bit of time upfront tuning the data classification and agent reachability settings to align with our own definitions of sensitive information, as well as the agent access paths we consider unacceptable. Review collected by and hosted on G2.com. What problems is Orca Security solving and how is that benefiting you? It folds data security into the same agent-aware risk picture as misconfigurations and identities, so “where is our sensitive data, and which agents can reach it?” is finally a question we can answer continuously. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic RT Rio T. Enterprise (\> 1000 emp.) 7/26/2026 "Orca Brings AI Agent Risk Into Clear Business Context" 5/5 What do you like best about Orca Security? Our finance and enterprise risk teams wanted to understand AI agent risk in business terms, not just issue counts or an abstract idea of "agent exposure." Orca’s context—what data an agent can touch, whether it can reach internet-facing services, and which identities and systems sit behind its paths—lets us group agent-driven risks around business-critical assets and regulated workflows. It’s not a full quantitative risk engine, but it has given us a structured way to discuss which agent behaviors matter most to revenue, compliance, and our contractual obligations. Review collected by and hosted on G2.com. What do you dislike about Orca Security? We still add some business mapping on our side for certain agent-centric technical risks, so they line up neatly with the revenue streams and the contractual exposure. Review collected by and hosted on G2.com. What problems is Orca Security solving and how is that benefiting you? It has moved our security discussions with Finance and Enterprise Risk from “here is a pile of agent findings” to “here are the top agent-driven threats to the system” that actually drive cost and compliance exposure. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic CS Cyril S. Enterprise (\> 1000 emp.) 7/23/2026 "Orca Catches Hidden Exposure from AI Agent-Driven Feature Experiments" 5/5 What do you like best about Orca Security? Our product team constantly runs experiments, turning features on and off with flags that are increasingly evaluated or executed by AI agents. Orca doesn’t try to live in the feature-flag layer; instead, it watches the underlying cloud identity and the agent posture. When an experiment gives an agent broader access than intended, or opens up a test path to sensitive data, Orca picks it up on its next assessment of the cloud and agent surface and flags it. Developers don’t have to change how they ship experiments, but security can still see where agent-driven flags might create unexpected exposure. Review collected by and hosted on G2.com. What do you dislike about Orca Security? Explaining to some product folks why the temporary agent-powered experiments still need proper access controls took a few rounds of education, even with the Orcas findings on hand. Review collected by and hosted on G2.com. What problems is Orca Security solving and how is that benefiting you? It keeps up with experimentation-heavy, agent-driven development without slowing it down. Orca watches the surfaces where risk actually materializes—when agents toggle, evaluate, or act on feature flags. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ## Questions about Orca Security? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Orca Security ](https://www.g2.com/products/orca-security/discussions/new) GU Guest User • Last activity over 3 years ago How much does Orca security cost? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/how-much-does-orca-security-cost) GU Guest User • Last activity 4 months ago Where is Orca security based? 0 Upvotes 2 [ Join the conversation ](https://www.g2.com/discussions/where-is-orca-security-based) [ View all Discussions ](https://www.g2.com/products/orca-security/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 1 month ### Return on Investment 8 months ### Average Discount 16% ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/orca-security/pricing) ## How much does Orca Security cost? Data powered by [BetterCloud](https://www.bettercloud.com). Estimated Price ### $$k - $$k Per Year Based on data from 4 purchases. Get Price Estimate Orca Security Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_65c94fd396adf448fb1d27e503b86982/wiz-wiz.png "Product Avatar Image") Wiz 4.7/5(842) [ Compare Now ](https://www.g2.com/compare/orca-security-vs-wiz-wiz) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_2e0312e88de352c85ff54694e3e0ef8e/forticnapp.jpg "Product Avatar Image") FortiCNAPP 4.4/5(386) [ Compare Now ](https://www.g2.com/compare/forticnapp-vs-orca-security) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_8b3109519c061f3739371275d691098a/cortex-cloud.png "Product Avatar Image") Cortex Cloud 4.1/5(128) [ Compare Now ](https://www.g2.com/compare/cortex-cloud-vs-orca-security) ##### ##### Orca Security Features Administration Auditing Security Compliance Monitoring Anomoly Detection Cloud Gap Analytics Compliance Governance Performance Issue Tracking Detection Rate False Positives [ View More Features ](https://www.g2.com/products/orca-security/features) ## Top-Rated Alternatives [ ![Wiz](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Wiz") Wiz 4.7/5(842) ](https://www.g2.com/products/wiz-wiz/reviews) [ ![Microsoft Defender for Cloud](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Microsoft Defender for Cloud") Microsoft Defender for Cloud 4.4/5(440) ](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) [ ![FortiCNAPP](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "FortiCNAPP") FortiCNAPP 4.4/5(386) ](https://www.g2.com/products/forticnapp/reviews) [ View All Alternatives ](https://www.g2.com/products/orca-security/competitors/alternatives) ##### Categories on G2 [Cloud Compliance](https://www.g2.com/categories/cloud-compliance)[Vulnerability Scanner](https://www.g2.com/categories/vulnerability-scanner)[Cloud Security Posture Management (CSPM)](https://www.g2.com/categories/cloud-security-posture-management-cspm) [Cloud Compliance](https://www.g2.com/categories/cloud-compliance)[Vulnerability Scanner](https://www.g2.com/categories/vulnerability-scanner)[Cloud Security Posture Management (CSPM)](https://www.g2.com/categories/cloud-security-posture-management-cspm)[API Security](https://www.g2.com/categories/api-security)[Cloud Workload Protection Platforms](https://www.g2.com/categories/cloud-workload-protection-platforms)[Container Security](https://www.g2.com/categories/container-security-tools)[Cloud-Native Application Protection Platform (CNAPP)](https://www.g2.com/categories/cloud-native-application-protection-platform-cnapp)[Cloud Detection and Response (CDR)](https://www.g2.com/categories/cloud-detection-and-response-cdr)[AI Security Solutions](https://www.g2.com/categories/ai-security-solutions)[AI Security Posture Management (AI-SPM) Tools](https://www.g2.com/categories/ai-security-posture-management-ai-spm-tools)[Cloud Infrastructure Entitlement Management (CIEM)](https://www.g2.com/categories/cloud-infrastructure-entitlement-management-ciem) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Does Alteryx One meet major enterprise security, governance, and data-privacy standards such as GDPR, SOC 2, or HIPAA, depending on deployment?](https://www.g2.com/discussions/does-alteryx-one-meet-major-enterprise-security-governance-and-data-privacy-standards-such-as-gdpr-soc-2-or-hipaa-depending-on-deployment)[Where to find the best board software](https://www.g2.com/discussions/where-to-find-the-best-board-software)[Which decision making software is the easiest to learn and still integrates seamlessly into an existing tech stack without a long IT project to get it connected?](https://www.g2.com/discussions/which-decision-making-software-is-the-easiest-to-learn-and-still-integrates-seamlessly-into-an-existing-tech-stack-without-a-long-it-project-to-get-it-connected) [Which education finance software is most reliable based on reviews from finance teams at higher education institutions?](https://www.g2.com/discussions/which-education-finance-software-is-most-reliable-based-on-reviews-from-finance-teams-at-higher-education-institutions)[Best AI chatbots for e-commerce businesses](https://www.g2.com/discussions/what-are-the-best-ai-chatbots-for-e-commerce-businesses)[Pros and Cons Details](https://www.g2.com/products/orca-security/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)