Great Visibility
What do you like best about the product?
Plethora of information and visibility into our cloud environment.
What do you dislike about the product?
Managing roles, groups and permissions could be better. Search functionality could be improved.
What problems is the product solving and how is that benefiting you?
Solving our need for visibility into our increasing cloud environment.
Orca is great tool for cloud security
What do you like best about the product?
Orca provides visibility to my environment, is easy to onboard, and is a genuinely cloud-native solution.
What do you dislike about the product?
It's almost near real-time results. I hope in future; it can produce real-time results.
What problems is the product solving and how is that benefiting you?
Orca helps my organisation solve asset discovery and management in multi-cloud platforms. It also provides rich vulnerability insight for my organisation to fix and improve.
User-friendly and efficiently identifies and addresses internal vulnerabilities
What is our primary use case?
I've been working on this cloud security platform for the past one and a half years. Essentially, we focus on checking different components of AWS and Azure.
We check over containers, instances, and various other elements running in the cloud. Our work is specifically designed for the cloud environment. We identify and address internal vulnerabilities across applications and operating systems which we are using in the cloud.
If there are any patch management requirements, we ensure they are done across different applications and even API interfaces.
In summary, our goal is to maintain security settings across the cloud infrastructure, such as AWS and Azure, used by our company. We connect with the DevSecOps team to actively work on securing the cloud environment and remediate vulnerabilities. We make sure incidents are properly handled, and necessary updates are implemented without causing disruptions. To facilitate communication, we use SMS for incident closure. This has been our focus for the past year.
How has it helped my organization?
Previously, we had a hybrid model where we used both physical devices and VMs across the cloud to manage enterprise security solutions. With Orca Security, we have a specific solution that allows us to monitor internal vulnerabilities and the most exploitable ones across the cloud. This platform is dependable and includes a powerful AI engine that we are currently using.
It helps us identify and address vulnerabilities early on, including CPU weaknesses and other variations. Additionally, it provides remediation guidance and facilitates patching and updates. Furthermore, it gathers threat intelligence, which is beneficial during incidents.
What is most valuable?
Recently, Orca Security has updated its interface, making it more user-friendly. I find it particularly useful as it allows me to easily navigate the dashboard and prioritize actions based on severity and criticality.
This feature makes it easy for me to look at prototypes and determine the necessary steps to take, focusing on critical issues first. I love the interface dashboard.
What needs improvement?
I would say that there are some loading issues. Since this is a cloud-native platform, there may be a problem with connecting to the dashboard as soon as it's open. The interface can be a bit cranky and sometimes takes a lot of time to load. So, the way APIs are deployed for our dashboards or monitoring systems needs to be corrected and optimized.
In future releases, Orca Secure needs to have new integrations with different security solutions apart from the cloud. We have EDRs, XDRs, and MDRs. Orca Security should automate the process of connecting and integrating with these solutions. It can be an essential way of protecting the infrastructure in an effective manner.
For how long have I used the solution?
I have been using Orca Security for the last two years.
What do I think about the stability of the solution?
I would rate the stability of Orca Secure a nine out of ten.
What do I think about the scalability of the solution?
I would rate the scalability of Orca Secure a nine out of ten.
What about the implementation team?
We directly bought this product from Orca Security itself, so we did not use any third party to install or deploy it.
What was our ROI?
What's my experience with pricing, setup cost, and licensing?
The price is a bit expensive for smaller organizations. It can be expensive for smaller organizations, but if you are managing your infrastructure in the cloud, it's definitely worth trying.
We have certain subscriptions and licenses for around a thousand instances deployed across the cloud. We purchased the subscriptions for the necessary devices we are running. It has cost us a lot.
What other advice do I have?
I would definitely recommend using Orca Secure. It's a very good cloud security platform. Apart from what I've seen, it has a really extensive dashboard and analysis capabilities. It picturizes actual vulnerabilities and provides guidance for remediation. It's a valuable cloud security evaluation tool, and I would suggest it as the first thing to learn.
Overall, I would rate the solution a solid nine out of ten.
Instant on cloud security platform
What do you like best about the product?
I have been using Orca Security for the last couple of months and am very impressed with its capabilities and performance while being agentless.
It's incredible that it gives me 100% visibility into my or customers' cloud environments quickly and helps me detect and fix misconfigurations, vulnerabilities, malware, and compliance issues.
The dashboard shows me the most critical risks and compliance issues at a glance. The alerts are prioritized based on severity, accessibility, and business impact.
What do you dislike about the product?
The only improvement I can think of for Orca Security is expanding its coverage to more cloud platforms and services.
What problems is the product solving and how is that benefiting you?
Agentless collection of data eliminates coverage gaps, vulnerability management for cloud, access to regulatory compliance frameworks to help prioritize risks, and continuous monitoring of the cloud estate.
Orca provides an amazing Cybersecurity insights instantaneously easily.
What do you like best about the product?
Easy to onboard to our existing clouds with an agentless approach. Very comprehensive on the Cybersecurity threats and vulnerabilities with daily updates. Comes with the recommended resolution for immediate action.
What do you dislike about the product?
No support for on-premise and private cloud workloads. Unable to automatically detect Windows ESU available on Azure. License costs cannot be reduced as workloads are optimised.
What problems is the product solving and how is that benefiting you?
The solution provides instant insights into the Cybersecurity landscape of our Cloud infrastructure and how to remediate vulnerabilities easily. We immediately see benefits within 30 days to reduce more than 30% of the threats and vulnerabilities within the organisation.
ORCA Security: Empowering Organizations with Simplified Cloud Intelligence and Risk Visibility
What do you like best about the product?
By leveraging ORCA Security, our collaboration with the DevOps Team has significantly improved. This streamlined solution allows security engineers to seamlessly share relevant findings, leading to more efficient remediation processes. With ORCA, we have successfully eliminated organizational hurdles between DevOps and Security teams, promoting a smoother and more effective working relationship.
What do you dislike about the product?
The User Interface occasionally experiences slower loading times, requiring some patience. There is room for improvement in the scanning capabilities, particularly in terms of providing more automated remediation for certain alerts. Integrating the ability to auto-remediate with Orca would be a valuable addition and enhance the overall user experience.
What problems is the product solving and how is that benefiting you?
Orca's deep visibility across AWS, Azure, and other cloud environments, Orca maximizes its comprehensive view to establish a robust risk management approach. Its advanced capabilities efficiently detect vulnerabilities, security misconfigurations, and compliance violations across various cloud workloads, including containers and VMs. By effectively prioritizing urgent alerts and minimizing alert fatigue, the Orca platform empowers security teams to take proactive measures and prevent potential threats.
Brilliant Cloud Security Posture Management tool that is easy to use
What do you like best about the product?
Turn-Key solution
Customer support - friendly team and fantastic support
New product features and innovation
Fantastic coverage across your cloud environment
Feature-rich product offering with CIEM, DSPM etc
What do you dislike about the product?
Nothing the product works really well and is easy to use and provides a robust view of your cloud environment.
What problems is the product solving and how is that benefiting you?
We are in the process of implementing a POV but ORCA assists in understanding our cloud vulnerabilities and provides visibility into this landscape.
Perfect security solution with brilliant support
What do you like best about the product?
We incorporated the ORCA security solution almost six months ago and have already started benefitting from it. The best part for my technical teams comes with the remediation as the tool provides alerts combining multiple aspects of security risks, including critical vulnerabilities, making fixing them more accessible.
In addition, I like the support system at Orca Security, as the Customer Success Managers are always available for prompt support and assistance with any challenge we might encounter. Additionally, the console's support chat part is relatively quick in its turnaround time, making ORCA security amongst the top few vendors with best-in-class service.
What do you dislike about the product?
There are no dislikes so far. However, I am still exploring more features that might help address the improvement points. A small input would be the ability to download Organization Dashboards as pdf.
What problems is the product solving and how is that benefiting you?
The best part for my technical teams comes with the remediation as the tool provides alerts combining multiple aspects of security risks, including critical vulnerabilities, making fixing them more accessible.
Had exceptional experience
What do you like best about the product?
Agentless Approach and Deep Visibility. It doesn't require the installation of any agents or additional software, that’s why we need just minutes to onboard new accounts to Orca. After onboarding, Orca provides really comprehensive asset discovery, vulnerability scanning, and risk assessment. Also, I am impressed by Orca Security's continuous product development and its dedication to introducing new features.
What do you dislike about the product?
Usually, Orca performs scans every 24 hours, that's why alerts are not real-time. Also, it would be great if Orca expand its integration capabilities especially with Cloudflare
What problems is the product solving and how is that benefiting you?
Orca Security provides contextualized alerts and actionable insights to security teams. By correlating security incidents with context, it helps prioritize and address security issues effectively. Additionally, its agentless approach reduces the complexity of deployment and ongoing management, making it easier for us to integrate Orca Security into our existing security operations.
A security systems with many quality features
What do you like best about the product?
It's unlikely to pick one out of the many good features of the system but would single out the shift-left security methodology provided by the Orca CLI scanning
What do you dislike about the product?
Container image security is one of the features that I don't really see quality in, with Orca security. Scanning the image repository seems much more daunting than anticipated
What problems is the product solving and how is that benefiting you?
It's solving problems with cloud security, and intrusion detection of malicious IP access. Additionally, we get insight into containers running in our clusters across different region.
