G2

Yagmi M.

Enterprise (> 1000 emp.)

8/3/2026

"Orca Makes Shadow Data Risks Obvious with Clear Sensitive Data Discovery"

5/5

What do you like best about Orca Security?

There was a recurring problem with shadow data: production data getting copied into staging and dev accounts that were nowhere near as locked down, plus data stores nobody even remembered creating. Orca discovers sensitive data across managed, unmanaged, and shadow stores, including files on VMs, containers, and buckets, and then classifies it against categories like PII and payment data. Seeing a forgotten production snapshot sitting in a loosely controlled dev account, and having that tied to how exposed the account was, makes it obvious which copies are genuinely risky versus intentional. Review collected by and hosted on G2.com.

What do you dislike about Orca Security?

A bit of tuning was needed to distinguish sanctioned data copies from the risky ones, since some of the lower-environment data was there on purpose. That said, the configuration was quick to align with our internal workflows. Review collected by and hosted on G2.com.

What problems is Orca Security solving and how is that benefiting you?

It provides real visibility into sensitive data sprawl, including shadow data and misplaced data, so the gap between well-secured production and looser accounts stops being an invisible exposure. It also highlights where AI agents could run into sensitive data they should never be able to touch, turning those risky paths into concrete cleanup work. Review collected by and hosted on G2.com.