Orca Security Reviews & Product Details

Orca makes it much easier for us to manage compliance across our cloud environments. The built-in checks are useful and run continuously, which means we always have an up-to-date view of where we stand. It supports both AWS and Azure well, and that coverage is important for our setup. The reporting is also clear and straightforward, so we can use it directly during audits. Review collected by and hosted on G2.com.

Some reports could use more flexibility in how the data can be filtered or exported. Also, it took me a little time at first to locate specific compliance details, since they aren’t always immediately easy to find. Review collected by and hosted on G2.com.

Getting started with Orca was quick and straightforward. Because it’s agentless, we didn’t have to touch any workloads or worry about disruptions during setup. The connection process went smoothly, and we were able to see all of our cloud resources in one place right away. Overall, it’s convenient to get that level of visibility without having to put in extra setup effort. Review collected by and hosted on G2.com.

Some parts of the platform take a little time to get used to. A few screens and views aren’t as intuitive as they could be, especially for new users who are still learning where everything is. Review collected by and hosted on G2.com.

Selling smart elevator systems and predictive maintenance contracts to large commercial real estate developers requires passing intense corporate security audits. Orca Equity is a phenomenal asset for the commercial team because it helps us provide prospective clients with verifiable, third-party proof of the cloud infrastructure hosting their building telemetry data. Review collected by and hosted on G2.com.

The consumption-based pricing model created friction during our annual budgeting cycles. Orca bases its pricing on the number of scanned cloud workloads, and because our IoT traffic from thousands of connected elevators spikes unpredictably based on building occupancy, it makes costs harder to forecast. Review collected by and hosted on G2.com.

The biggest advantage for us is the agentless setup. We didn’t have to install anything on our workloads, which saved a lot of time and helped us avoid disruption. The side-scanning provides full visibility into vulnerabilities, misconfigurations, and exposed secrets across all of our cloud accounts. I also like that everything is presented in one place, which makes it easier to understand our overall risk posture and see where we need to focus. Review collected by and hosted on G2.com.

The platform is very feature-rich, so it takes a bit of time to get fully comfortable with all the different views and capabilities. A few dashboards could be simplified to make navigation quicker and more intuitive, especially for new users who are still learning their way around. Review collected by and hosted on G2.com.

As the administrator for our cloud-based HR and payroll systems, my primary concern is keeping our employees’ personally identifiable information safe. Orca Security provides incredible peace of mind. What I love most is the agentless side-scanning technology. Our IT department was able to deploy Orca and scan our entire AWS-hosted HR database environment. Review collected by and hosted on G2.com.

The dashboard is built explicitly for cybersecurity engineers, which makes it very intimidating for an HR system administrator. When I’m granted read-only access to verify the security posture of specific HR servers, it still feels difficult to navigate and understand. Review collected by and hosted on G2.com.

The platform integrates smoothly into our multi-cloud setup without adding extra complexity. Agentless scanning has made onboarding straightforward, and we didn’t need to change or modify any existing workloads. The continuous monitoring provides steady, consistent visibility across our environment, which is reassuring because it feels like we’re less likely to miss critical risks. Review collected by and hosted on G2.com.

Some of the deeper insights take a bit of navigating to find. It would be helpful if certain views were streamlined so they’re easier to access more quickly. Review collected by and hosted on G2.com.

Agentless scanning is ideal because getting hundreds of independent research departments to install a security agent in their cloud environments is basically impossible. Orca side-scanning also helps us identify unpatched operating systems and exposed databases. Review collected by and hosted on G2.com.

The alert noise caused by forgotten projects is a constant struggle. Faculty members often leave the lab server running for years after a grant expires, and the platform ends up flagging very outdated libraries as critical vulnerabilities. Review collected by and hosted on G2.com.

We manage multiple client cloud environments, and Orca Security’s side-scanning technology is a major advantage for our deployment teams because it is completely agentless. We don’t have to spend weeks negotiating with the client’s internal developers to install security agents on the workloads. Instead, we simply connect Orca to the AWS or Azure accounts via the IAM role. Review collected by and hosted on G2.com.

Managing multi-tenant environments is a little hard in this. We can have separate client environments, but the overall dashboard approach doesn’t provide a clear multi-tenant view. Review collected by and hosted on G2.com.

The agentless visibility across workloads is a major advantage. It performs well across our mix of containers, VMs, and serverless environments. Alerts are contextual and include clear remediation guidance, which makes them far more actionable than a typical CVE list. Review collected by and hosted on G2.com.

There’s a bit of a learning curve when you first start navigating the platform. Also, some of the remediation suggestions could be better tailored to specific environments. Review collected by and hosted on G2.com.

Managing the fleet of Azure servers for our high-frequency trading and logistics platform requires absolute visibility without any performance degradation. Orca SideScanning has been a real asset. Because it operates entirely agentless, we can deploy comprehensive security monitoring across our entire Azure infrastructure without ever having to schedule maintenance windows. Review collected by and hosted on G2.com.

Navigating between different regional cloud environments within the main dashboard can be slightly disorienting when I’m trying to compare the risk posture of our European trading servers against our Asian logistics nodes. Review collected by and hosted on G2.com.