Orca Security CNAPP Cloud Security Platform
Orca Security CNAPPExternal reviews
240 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Orca Security is one of the original Cloud Security disrupptors and innovators.
What do you like best about the product?
Context-driven security was considered the future of Cloud Security, and Orca led the charge. The level of depth provided around resources and assets in your cloud is one of the best out there.
We love the ability to clone and customize "baked-in" alerts to meet our environmental needs, specifically around asset tagging/labeling. Their Code Security capabilities are starting to rival those of Synk and others in the space. The potential there is promising, and the product teams are constantly keeping us in the loop.
The Custmoziable Alerts dashboard, which meets my leadership needs, is easy to use. My team can also create and share customized views without much effort.
Searching and "Discovery" have greatly improved in the latest iteration of the product, and the speed at which we find assets and configurations has improved.
Orca provides very in-depth "attack path" visualizations that are easy to follow, clearly visualize risks, and tell an attack story. Although this would be considered intimidating to view, their visual representation is strong.
Side-scanning continues to provide tremendous value to us. It still amazes me how quickly they scan our entire environment and report back changes, threats, risks associated with "data" or storage.
There is a lot more to mention, but lastly, our customer support and sales team has been top-notch. One of the best we have worked with.
We love the ability to clone and customize "baked-in" alerts to meet our environmental needs, specifically around asset tagging/labeling. Their Code Security capabilities are starting to rival those of Synk and others in the space. The potential there is promising, and the product teams are constantly keeping us in the loop.
The Custmoziable Alerts dashboard, which meets my leadership needs, is easy to use. My team can also create and share customized views without much effort.
Searching and "Discovery" have greatly improved in the latest iteration of the product, and the speed at which we find assets and configurations has improved.
Orca provides very in-depth "attack path" visualizations that are easy to follow, clearly visualize risks, and tell an attack story. Although this would be considered intimidating to view, their visual representation is strong.
Side-scanning continues to provide tremendous value to us. It still amazes me how quickly they scan our entire environment and report back changes, threats, risks associated with "data" or storage.
There is a lot more to mention, but lastly, our customer support and sales team has been top-notch. One of the best we have worked with.
What do you dislike about the product?
Reporting on containerization vulnerabilities has improved, but it needs to be better. (Orca has been investing a lot in this space and the future is promising).
Infrastructure as Code custom policy creation is effective but challenging and needs to be more closely linked to the UI. (There might be technical challenges here but overall, we need more visualizations in the UI around this)
Identity-based reporting around "inactive" non-human accounts is an area that needs more attention. (GCP Support is a little behind.)
Infrastructure as Code custom policy creation is effective but challenging and needs to be more closely linked to the UI. (There might be technical challenges here but overall, we need more visualizations in the UI around this)
Identity-based reporting around "inactive" non-human accounts is an area that needs more attention. (GCP Support is a little behind.)
What problems is the product solving and how is that benefiting you?
Agentless cloud storage and data monitoring is benefiting us. We can confidently deploy compute as needed and still scan and detect at the file level.
Comprehensive coverage of all of our major cloud providers.
Context-aware risk prioritization is proving to have its benefits for minizing the overall organizational risk.
Comprehensive coverage of all of our major cloud providers.
Context-aware risk prioritization is proving to have its benefits for minizing the overall organizational risk.
Review Orca Security for Cloud Workload
What do you like best about the product?
Orca is a great tool to describe our cloud security posture. I like it that it supports the major cloud vendors - Azure, AWS, Google. I like it that it is also able to show vulnerabilities in a great dashboard.
What do you dislike about the product?
The dashboard can perform slowly at times. Saving of views seems quirky. Some bugs need to be addressed.
What problems is the product solving and how is that benefiting you?
Visibility into our multiple Cloud workload in terms of security, vulnerabilities, best practices, etc.
Ease of use and great visibility
What do you like best about the product?
Orca provides a great visibilty on our cloud assets, detects what needs to be improved and most important alerts on the severe findings that may be very risky.
Also, provides easy implementation and pretty simple guided process to add more cloud accounts to the subscription.
Also, provides easy implementation and pretty simple guided process to add more cloud accounts to the subscription.
What do you dislike about the product?
I would improve the calculation of the subscription and allow to exclude from the subscription the irrelevant assets types without engaging with the account manager.
What problems is the product solving and how is that benefiting you?
Orca presents in one place all the insights on our cloud assets in the different environments in multiple cloud vendors.
This provides a great visibility and configuring alerts to be sent to all stakeholders upon detection.
This provides a great visibility and configuring alerts to be sent to all stakeholders upon detection.
Orca makes it easy to assess your cloud security posture
What do you like best about the product?
I like the inclusion of GenAI to walk us through remediation steps
What do you dislike about the product?
Sometimes navigating the Orca graph is difficult.
What problems is the product solving and how is that benefiting you?
Orca solves a number of problems: Which servers have unpatched software, which AWS services need to be tightened up, how we have been doing over time
Orca Review
What do you like best about the product?
The Security Features are perfect for Cloud Security.
We use Orca for scanning our cloud accounts in AWS, GCP and Azure.
Orca has some great Cloud Security features: Vulnerability Management, CSPM, and Shift Left Security.
We use Orca for scanning our cloud accounts in AWS, GCP and Azure.
Orca has some great Cloud Security features: Vulnerability Management, CSPM, and Shift Left Security.
What do you dislike about the product?
Sometimes the Engineered solutions seems to have issues. All of these are addressed in the new Orca architecture (Serving Layer 2).
What problems is the product solving and how is that benefiting you?
Cloud Scanning for Vulnerabilities and Shift Left Security.
Easy to use and accurate in covered resources, lacking some coverage areas
What do you like best about the product?
Well thought UI and accurate resource discovery.
What do you dislike about the product?
Issues with integration with AKS private clusters
What problems is the product solving and how is that benefiting you?
Fast vulnerability findings, helpful in planning security maintenance
Sales experience with orca
What do you like best about the product?
The platform and the compliance on cybersecurity rules
What do you dislike about the product?
nothing about orca on the tehcnology platform
What problems is the product solving and how is that benefiting you?
Compliance and cybersecurities issues
Deep insights at an affordable price
What do you like best about the product?
The visibility into cloud workloads is unparalleled. You can get complete visibility into everything in your public cloud provider in 15 minutes, except for Kubernetes workloads, which require another 30 minutes to set up. Orca finds vulnerabilities and misconfigurations.
What do you dislike about the product?
Orca has indicated that it has no intention of expanding into on-prem workloads. If you have offices with network gear or servers, you must split your risk identification and prioritization process - one for each environment.
Additionally, Orca does not proactively communicate upcoming changes to its internal data model. If you're using advanced searches or automation that depend on the Orca data model, these can break or return unexpected results when the underlying data model changes.
Additionally, Orca does not proactively communicate upcoming changes to its internal data model. If you're using advanced searches or automation that depend on the Orca data model, these can break or return unexpected results when the underlying data model changes.
What problems is the product solving and how is that benefiting you?
Orca identifies and prioritizes risk in cloud environments. It detects risks on VMs, in containers, and in how you configure your public cloud provider. These are prioritized based on a number of factors, such as reachability, blast radius, the classification of data on the resource, what cloud privileges the resource has, etc.
Extremely capable cloud security product
What do you like best about the product?
Automatic prioritization and contextualization of findings, continually adding new features
What do you dislike about the product?
It doesn't aggregate findings across multiple generations of ephemeral assets
What problems is the product solving and how is that benefiting you?
We needed a comprehensive cloud asset inventory and vulnerability scanner, and Orca solves those problems and many more
The tool is comprehensive and covers all key aspects of cloud security needed for our organization
What do you like best about the product?
We're able to better prioritize risks, the AI enabled remediation guide is particularly very useful to help guide our product and development teams.
ORCA provides us ability to see the most important security risks across our multi cloud and application footprint- this helps us know what to focus on.
ORCA provides us ability to see the most important security risks across our multi cloud and application footprint- this helps us know what to focus on.
What do you dislike about the product?
The vulnerability management and reporting can be improved upon. There is a minor disconnect between data presented on the dashboard and downloaded reports.
The downloaded reports sometimes need additional tuning to make it presentable.
The downloaded reports sometimes need additional tuning to make it presentable.
What problems is the product solving and how is that benefiting you?
ORCA provides us ability to see the most important security risks across our multi cloud and application footprint- this helps us know what to focus on.
showing 41 - 50