I mainly use it as a posture management tool to comply with security frameworks like CIS and NIST, strengthening my overall security posture.
Orca Security CNAPP Cloud Security Platform
Orca Security CNAPPExternal reviews
240 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Easy to implement, incredibly detailed, offers great piece of mind
What do you like best about the product?
There is such a low barrier to implementation, and it gives you actionable insights as well as great remediation steps in no time at all.
What do you dislike about the product?
It's easy to spawn lots of tabs as each click through opens a new window. It can make navigation confusing, but that's picking really picky!
What problems is the product solving and how is that benefiting you?
Being in a highly regulated environment, we need to ensure we are identifying and responding to threats, emerging issues and ensuring our configuration is secure. The Dashboards and reports allow us to give management information to our audit, risk and assurance boards that shows a realistic cyber security posture and an understanding of the effort taken to keep us secure. Previoulsy, we used multiple tools and services, but still had blind spots. The Orca agentless service interogates our entire cloud estate and gives is real peace of mind as a result.
Simple and Easy Product to improve our Cloud Security Posture.
What do you like best about the product?
Prirotizes which one to work and easy setup.
What do you dislike about the product?
Consitently updates in web platform and i see staus page alerts for Increased Delay / Elevated Errors in Asset Scanning or something once a month.
What problems is the product solving and how is that benefiting you?
Show us our Security Posture tying to Compliance, Provide us which assest is at risk for latest CVE threads.
Fast, Reliable and Smart
What do you like best about the product?
Orca is big smart platform that has helped our organization to meet our compliance standards. The tool is not only very complete but also smart, easy to integrate and with excellent customer support. Extra features such as AI integration makes the platform easy to use, understand and easy to follow steps.
What do you dislike about the product?
Orca discontinued a whole page where it showed alert details and now is called "legacy page". This was very useful as we were able to see alerts in a better, big UI, now the remediation tab is smaller.
What problems is the product solving and how is that benefiting you?
- Keep the Infrastructure Compliant
- Security and Alerting
- Policies Enforcement
- Security and Alerting
- Policies Enforcement
Finally I can get accurate security impact estimations before creating infrastructure!
What do you like best about the product?
Shift-left. This is brilliant. You get to have proper infrastructure scanning AND infrastrucute as code analisis on pull request stage. I can't stress enough how important it is. If you create GKE cluster and want it to be secure, without shift-left you'll have to recreate it multiple times. With shift-left you only create it once.
Super easy to add new clouds and projects, super easy to implement scan in them, even with terraform. We are using it on daily basis.
Super easy to add new clouds and projects, super easy to implement scan in them, even with terraform. We are using it on daily basis.
What do you dislike about the product?
No issues with the service itself, I'd love to see Vanta integration for sure.
What problems is the product solving and how is that benefiting you?
I get fast and accurate notifications about infrastructure issues and vulnerabilities, instructions how to fix them (to some extent), easy to use UI.
Orca cloud security solution
What do you like best about the product?
Alerts, compliance, agentless approach, lateral movement, priortization of alerts, 100 % coverage etc these are the main features are excellent. easy to integrate. good customer support. easy to impelement the solution. very easy to use. i am using from last one year. Very good experience.
What do you dislike about the product?
sometime tool failed to load modules in identity and access management, and scoring system need to change
What problems is the product solving and how is that benefiting you?
overall cloud risk is solving by orca
A practical and reliable tool
What do you like best about the product?
Allows an agentless scan of our entire cloud infrastructure and improves the security of our environment daily.
What do you dislike about the product?
Do not have a VM agent outside the cloud provider, which restricts usage to a part of the information system.
What problems is the product solving and how is that benefiting you?
Allows the detection of CVEs, proposes corrections. Allows scanning of containers. Provides a first draft on numerous compliance certifications.
Cloud Security Excellence
What do you like best about the product?
Orca Security has a great platform with lots of features that make cloud security better. It has an easy to use dashboard to check for problems and sends alerts in real-time. Orca works with many cloud providers and has features like Cloud Security Posture Management and Container Security. It uses Generative AI to make things easier.
What do you dislike about the product?
Less filter options in creating Dashboard
What problems is the product solving and how is that benefiting you?
Orca Security really helps us with our cloud security.
It gives us a clear view of our risks in the cloud. Orca alerts us right away if there's a possible threat, so we can act fast to stay safe. Overall, Orca Security is great product for cloud security work smoothly
It gives us a clear view of our risks in the cloud. Orca alerts us right away if there's a possible threat, so we can act fast to stay safe. Overall, Orca Security is great product for cloud security work smoothly
Quick and easy setup and helps comply with various security frameworks and strengthens overall security posture
What is our primary use case?
What is most valuable?
The reporting and automated remediation capabilities are valuable to me. They're real game-changers.
What needs improvement?
Maybe better customization options for security frameworks and better integration with reporting tools like Power BI or Grafana dashboards. Modularizing reports and dashboards would be fantastic. Simplifying the way users build custom frameworks would be good.
For how long have I used the solution?
I have been using this solution for one year.
What do I think about the stability of the solution?
No issues at all! It's been quite stable and reliable.
What do I think about the scalability of the solution?
It is a very scalable solution. It supports all three major cloud providers and is designed for easy deployment. So, from my perspective, it's highly scalable.
How are customer service and support?
The customer support was not good. It really depended on who you got assigned to. Overall, I'd say it was decent, not perfect, but definitely helpful.
Which solution did I use previously and why did I switch?
We also looked at Lacework and CrowdStrike. The main problem with Lacework was the pricing model. It was based on capacity, and with our ever-growing environment, the costs became unsustainable.
The features, ease of integration, and compatibility with all our security frameworks swayed us towards Orca.
We migrated everything to Orca and haven't looked back.
How was the initial setup?
The initial setup is very easy. I would rate my experience with the initial setup a ten out of ten, where ten is easy to set up.
What about the implementation team?
I managed it all by myself. We had some support from Orca at the time, but the process itself was very easy. The whole setup, from initial discussions with Orca and setting up our own environments, was only about two to three days.
What was our ROI?
It is worth the money we are paying for it.
What's my experience with pricing, setup cost, and licensing?
It's not as expensive as some competitors like Prisma Cloud, but it's not the cheapest either. A subscription model based on AWS usage would be an interesting option to explore.
What other advice do I have?
Users can meet all the needs around security, automation, customization, and reporting. Orca is a feature-rich tool, easy to use, and seamlessly integrates with major cloud providers.
It offers comprehensive visibility not just from a security standpoint but also for management and high availability. That's my key advice.
Overall, I would rate the solution a ten out of ten.
A complete assessment and defined priorities in less than 24 hours
What do you like best about the product?
The platform is very intuitive and does not require extensive training to set it up and understand the initial results. In less than 24 hours, a complete overview of our cloud was provided and priorities were defined. The dashboard provides great clarity and relevant metrics. Orca also offers possible resolutions recommended by AI.
What do you dislike about the product?
The KPIs showing the evolution over time could be a bit more refined.
What problems is the product solving and how is that benefiting you?
Orca, in 24 hours, provided a clear and precise result as well as priorities, while we had been trying to implement tools by ourselves for several months.
end to end cloud security
What do you like best about the product?
one of the best all in one suite i ever used so far seemless and its abudance of features helps us to get our hygenie report quickly and helped us on our pre audit. easy integrations and implementation since its agentless.
customer support is one of the best i have seen compared to other big players.
customer support is one of the best i have seen compared to other big players.
What do you dislike about the product?
UI should be improved and they are working on it
What problems is the product solving and how is that benefiting you?
entire cloud security findings its helping us >90% issues found due to our own lack of understanding or operational use. reporting helps us to know where we are
showing 51 - 60