Our agents can call tools, hit APIs, and read from data sources, but until Orca we didn’t have a clear map of exactly which combinations were possible. Orca shows, for each agent, which tools it can invoke, which services it can reach, and what data stores sit behind those paths. That makes it obvious when an agent’s tool stack is broader than its job. Review collected by and hosted on G2.com.

We aligned the Orca tool and data labels with our internal naming conventions, which made it easier for builders to immediately recognize their own stacks. Review collected by and hosted on G2.com.

Our first wave of AI agents carried broad, long-lived permissions “just in case,” which quietly inflated the blast radius of each workflow. Orca shows effective permissions and actual usage side by side for agents and identities, so we can clearly see which rights are actually exercised and which are dead weight. That context gave us the confidence to move toward just-in-time access. Review collected by and hosted on G2.com.

We ran careful tests around a few high-impact agents before tightening their scopes based on the ORCA findings, which helped us roll out these changes smoothly. Review collected by and hosted on G2.com.

The platform continuously monitors our environment and provides clear, actionable recommendations. I especially like how it automatically prioritizes risks, which makes it easier to focus on what matters most. The dashboard is straightforward and simple enough for everyday use, and overall it helps us stay organized and on top of things. Review collected by and hosted on G2.com.

Some more advanced analytics would help provide greater customization. There’s also a slight learning curve during onboarding, so it takes a bit of time to get fully comfortable with the platform. Review collected by and hosted on G2.com.

Orca makes it much easier to manage cloud security from a single platform. We can monitor vulnerabilities, misconfigurations, and exposed assets without having to deploy agents across our workloads. The contextual prioritization is particularly helpful because it directs us to the issues that truly pose risk to the environment, rather than just generating noise. Review collected by and hosted on G2.com.

There are a lot of features available, which is great, but it can make some areas feel a bit crowded at first. I also think a few of the remediation details could be more environment-specific. Review collected by and hosted on G2.com.

Orca makes it much easier for us to manage compliance across our cloud environments. The built-in checks are useful and run continuously, which means we always have an up-to-date view of where we stand. It supports both AWS and Azure well, and that coverage is important for our setup. The reporting is also clear and straightforward, so we can use it directly during audits. Review collected by and hosted on G2.com.

Some reports could use more flexibility in how the data can be filtered or exported. Also, it took me a little time at first to locate specific compliance details, since they aren’t always immediately easy to find. Review collected by and hosted on G2.com.

The risk scoring is one of the most valuable parts of the platform. The alerts are clear, actionable, and prioritized using real context rather than relying only on severity levels. As a result, we no longer waste time combing through huge CVE lists that don’t actually apply to our environment. Overall, it makes vulnerability management far more manageable and easier to stay on top of. Review collected by and hosted on G2.com.

Some of the more advanced filtering options could be easier to configure. Also, a few of the dashboards take a bit of time to fully get used to, so there’s a small learning curve at first. Review collected by and hosted on G2.com.

The speed of deployment and the value realization are phenomenal. At Madabo Tools, we tend to acquire smaller, niche tool suppliers in Eastern Europe, and merging their legacy cloud environments into our secure network usually takes months of manual auditing. With Orca, we simply connect the acquired company’s cloud API within hours, and we quickly get a complete, prioritized map of their technical debt and vulnerabilities. Review collected by and hosted on G2.com.

When we connect a newly acquired company’s legacy cloud environment, the initial scan generates a truly overwhelming volume of alerts. We have to dedicate significant manpower for the first two weeks just to parse through the initial wave of historical misconfigurations discovered in the newly acquired accounts. Review collected by and hosted on G2.com.

My team is responsible for extracting multi-cluster product validation rules and structuring complex e-commerce taxonomy from raw, scanned vendor catalogs. These databases hold highly proprietary categorization structures for major global retailers. Orca data security posture management is essential; it actively monitors massive cloud storage buckets and alerts us immediately if an engineer accidentally leaves an Azure Blob containing unencrypted retail taxonomy. Review collected by and hosted on G2.com.

Segmenting data visibility within the Orca dashboard feels a bit rigid. I want my taxonomy engineers to log in and see the security posture for only the specific retail database they manage; however, the role-based access control makes this difficult. Review collected by and hosted on G2.com.

Orca brings several parts of cloud security together in a single platform, and that makes a real difference. We can view workload vulnerabilities, misconfigurations, and exposed secrets all in one place, which reduces the need to jump between separate tools. Overall, the experience feels more streamlined and easier to manage for both the security team and operations. Review collected by and hosted on G2.com.

Because it covers so much, some areas take time to fully explore and get comfortable with. A little more customization in the views would make it easier to focus on specific priorities and tailor what I’m seeing to what matters most. Review collected by and hosted on G2.com.

Managing the digital infrastructure for our sports management firm means our team is constantly on the move. The agentless side-scanning technology is a total game changer: we were able to secure our entire cloud environment without having to install the software on the various remote systems or the virtual machines. Our agents use this to access athlete data, and it makes protecting that environment much easier. Review collected by and hosted on G2.com.

The platform is incredibly feature-rich, which can be overwhelming for a small IT team. When we first deployed it, the volume of data and the technical metrics required created a steep learning curve. Review collected by and hosted on G2.com.