External reviews
228 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Fantastic, powerful tool for cloud security
What do you like best about the product?
Orca provides top-tier dashboards and easy dashboard customization which quickly surfaces critical risks.
Orca support replies rapidly and consistently works to resolve issues.
Orca installation in 2/3 of our main cloud environments was a smooth process, and the last environment took just an extra hour of work. Overall, a very smooth onboarding process, and great training resources were provided.
Orca provides incredibly rich, useful data about the risks it detects, with very low/none false positives.
Orca support replies rapidly and consistently works to resolve issues.
Orca installation in 2/3 of our main cloud environments was a smooth process, and the last environment took just an extra hour of work. Overall, a very smooth onboarding process, and great training resources were provided.
Orca provides incredibly rich, useful data about the risks it detects, with very low/none false positives.
What do you dislike about the product?
The compliance modules currently load extremely slowly, lack CIS critical controls v8.1, and waiting for the promised module rewrite next year sucks.
Orca knowledgebase documentation is tied to your Orca login. To faciliate non-technical staff (or folks who don't need console access) working with the tool, it would be great if they were decoupled.
Exporting risk data to CSV from Orca often requires selecting which of 119-250+ columns I want, at least once, unless you like getting a 1 GB CSV file (wow!)
Exporting to CSV frequently hangs (probably due to the default enormous CSV size), requiring the usage of scheduled reports, which is less convenient.
Orca knowledgebase documentation is tied to your Orca login. To faciliate non-technical staff (or folks who don't need console access) working with the tool, it would be great if they were decoupled.
Exporting risk data to CSV from Orca often requires selecting which of 119-250+ columns I want, at least once, unless you like getting a 1 GB CSV file (wow!)
Exporting to CSV frequently hangs (probably due to the default enormous CSV size), requiring the usage of scheduled reports, which is less convenient.
What problems is the product solving and how is that benefiting you?
Orca is an incredibly powerful tool. We're using it to detect vulnerabilities in virtual machines, misconfigured serverless functions, excessive IAM policies, unhardened virtual machines, VMs missing critical protective software, VMs under attack, and so much more, and that's just the tip of what Orca can do.
One of the Most Effective Security Tools I Have Ever Used
What do you like best about the product?
Orca is great about helping security teams priortize vulnerabilities based on factors other than just CVSS scores so that we make the most efficient use of our time.
What do you dislike about the product?
I think there is room for improvement in some parts of the UX. Orca is great about gathering a ton of data about our resources, misconfigurations, and vulnerabilities, but I think there is still room for improvement in terms of summarizing large quantities of vulnerabilities and pivoting to them from the dashboards.
What problems is the product solving and how is that benefiting you?
Inventorying cloud resources, vulnerability scanning, and vulnerability prioritization. Priortizing the right vulnerabilties allows our team to be more effective with our time.
The solution is incredible. Easy deployment and full visibility
What do you like best about the product?
The ability to understand the risks of the cloud environment with its main threats and how we can remediate in an automated way.
What do you dislike about the product?
So far no difficulty encountered in usability
What problems is the product solving and how is that benefiting you?
All the visibility and exposure of my environment and the ability through templates to correct in an automated way.
Orca Cloud Security Solution CNAPP
What do you like best about the product?
In Orca Security console, dashboards, Security Score, Lateral movement all features are great and ease to use. I like the agentless approach and provide finding even in stopped instances is marvelous.
What do you dislike about the product?
not supported on-prem solution in orca security.
What problems is the product solving and how is that benefiting you?
Overall cloud security for our workload on aws, azure gcp related to VA, misconfiguration, lateral movement risk, Data at risk etc..
Orca exceeds expectations as a cloud security solution and back the product up with great support
What do you like best about the product?
SaaS Configuration is incredibly easy, but they also have the capability to support private deployment models as well
Support and turnaround times for requested product functionality are quick
Discovery search feature is great and makes it easy to quickly pull together custom reports
API Security feature does a great job highlighting external exposure risks for cloud application services where other competitors fell short
Coverage of CSP services Inventoried within Orca include even the darker corners of the 1000's of cloud services available
Support and turnaround times for requested product functionality are quick
Discovery search feature is great and makes it easy to quickly pull together custom reports
API Security feature does a great job highlighting external exposure risks for cloud application services where other competitors fell short
Coverage of CSP services Inventoried within Orca include even the darker corners of the 1000's of cloud services available
What do you dislike about the product?
Ui can be a little buggy with the newer features sometimes, but it's never impacted what I needed to get done and it is still by far the best Ui experience amongst it's direct competitors
What problems is the product solving and how is that benefiting you?
I've been able to leverage Orca's Agentless scan results to quickly accelerate our identification and remediation process for vulnerabilities across cloud environments. Whether you're just starting to understand the state of your cloud environments or are looking to speed up your response time to zero day Vulns, Orca helps takes the guess work out of what should be prioritized first with an excellent approach to risk contextualization.
Additionally, their API Security feature does an exceptional job shining light on an underappreciated aspect of cloud security. The Cloud is not a traditional network perimeter and failure to monitor or understand how these cloud provider application services can impact cloud network boundaries can be a costly mistake. This functionality should be on your 'must have' list when evaluating competitors
The way core AWS, Azure and GCP services are named and how they function are all fundamentally unique to each provider, but Orca does a great job highlighting risks specific to each provider while also normalizing some of the terminology across providers so that you don't have to be an expert in the nuances of comparable service's
Additionally, their API Security feature does an exceptional job shining light on an underappreciated aspect of cloud security. The Cloud is not a traditional network perimeter and failure to monitor or understand how these cloud provider application services can impact cloud network boundaries can be a costly mistake. This functionality should be on your 'must have' list when evaluating competitors
The way core AWS, Azure and GCP services are named and how they function are all fundamentally unique to each provider, but Orca does a great job highlighting risks specific to each provider while also normalizing some of the terminology across providers so that you don't have to be an expert in the nuances of comparable service's
We've been using Orca for at least 4 years now in a multitenancy environment
What do you like best about the product?
Really easy to deploy, amazing insight into our cloud environments and ease of reporting integration and remediation, coupled with continuous developmentment and product enhancements.
What do you dislike about the product?
I do not have any dislikes, but I would like to see more SIEM like capability (for example to indentify abnormal behavior from users, etc.) to move closer towards having one integrated platform for cloud VM and MDR.
What problems is the product solving and how is that benefiting you?
Orca helps us by providing visibility and prioritizing our most critical security risks across all of our cloud environments. We can see vulnerabilities, misconfigurations, identity and access management issues, and potential lateral movement risks, which helps us to quickly identify and remediate threats across our entire cloud estate.
Great Product With A Ton of Insight
What do you like best about the product?
It is an easy product to manage and implement. The customer support is also phenomenal. The Orca application will discover all of the issues in your environments.
What do you dislike about the product?
It is a bit confusing to navigate and I do like the legacy ui better but the benefits greatly out weigh this issue.
What problems is the product solving and how is that benefiting you?
It is able to find both AWS/Azure/OCI security concerns and also vulnerabilties associated with assets.
Orca's Insightful Remediation Steps
What do you like best about the product?
Orca has given us the ability to have valuable insight into our cloud environments We are also able to easily have insights into alerts and the remediation steps that are provided are super helpful to assist with fixing an alert It has also been super nice to have the integration into slack to give us a better timeliness with our response times.
What do you dislike about the product?
I honestly do not have anything bad right now
What problems is the product solving and how is that benefiting you?
Orca has helped with their detailed remediation descriptions that helps speed up the process of investigating alerts.
Orca is the best one stop security finding solution
What do you like best about the product?
It has integration with all public cloud and it calculate the score , which helps to priorities the work.
customer support also very good.
customer support also very good.
What do you dislike about the product?
nothing found. it will be better if it create service now ticket automatically for critical and high findings.
What problems is the product solving and how is that benefiting you?
Orca detecting the security findings and vulnerebilities from our public cloud AWS and Azure.
Its calculating score, based on that we priorities the work. also Orca giving the remediations steps, which helps us to solve the finding.
Its calculating score, based on that we priorities the work. also Orca giving the remediations steps, which helps us to solve the finding.
Ocra Security for AWS MultiAccount Security Management
What do you like best about the product?
Extrem detailed alerts from hundreds of categories with the ability to customize and categorize alerts, track imprvement. The dashboard is fanstatic.
What do you dislike about the product?
When we change a high level orca alert to a low level priority, when a new but similar high level ocra alert is found, it does not automatically put it as a low level alert for us.
What problems is the product solving and how is that benefiting you?
Orca is helping us solve complex AWS IAM permissions for least privialged access roles.
showing 11 - 20