External reviews
228 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Orca Security is building a really nice tool
What do you like best about the product?
The interface is good but not as intuitive as I would expect from a tool like this but you can find what you need in a couple of clicks. Customer support from the other side is great.
What do you dislike about the product?
As mentioned, the interface is modern but not that intuitive. It is a bit hard to find information about a vulnerable package or file location for example in the web GUI.
What problems is the product solving and how is that benefiting you?
With Orca Security we have a nice overview of vulnerable packages, end-of-live operational systems and so without installing extra agents or software on the servers or virtual machines.
Probably the best Cloud Native Application Protection Platform on the market
What do you like best about the product?
Orca's agentless side-scanning techniques mean that all assets are automatically scanned - even if not running. Their dashboards provide an intuitive, easy to digest view of the current state of application security without being swamped by alerts and information. Orca provides an excellent way of producing an inventory of assets - particularly useful for ephemeral assets that are perpetually being created and destroyed. The compliance feature is also useful for auditing purposes. The recently introduced attack paths feature shows graphically how an attacker could gain access and potentially pivot through the system.
What do you dislike about the product?
Because of the way Orca's side-scanning technology works using snapshots, the downside is that the scanning is not performed in real-time so cannot provide true xDR capabilities. It would also be useful if older alerts were automatically dismissed after a while when the vulnerability is no longer detected. This would help to reduce the total number of vulnerabilities and alerts that are displayed in the dashboards.
What problems is the product solving and how is that benefiting you?
Orca solves several problems we regularly face including producing asset inventories, helping with compliance, and providing focussed mitigation of security vulnerabilities. Orca's dashboards provide the necessary insights into the latest threats to allow a more focused application of security resources.
Recommendations to others considering the product:
Orca is a great product that can help with your organization's application security and governance.
Great product, easy to use and set up
What do you like best about the product?
Orca is extremely easy to set up and we got our 27 AWS accounts onboarded within minutes. The findings from Orca are very relevant and pertinent recommendations were provided for remediation, including links to external documentation when relevant.
Orca is also great at providing peace of mind when it comes to staying on top of new threats and vulnerabilities as it automatically scans our assets when new vulnerabilities are published. Automated scanning for the log4j vulnerabilities were available within a couple of days of disclosure.
Orca is also great at providing peace of mind when it comes to staying on top of new threats and vulnerabilities as it automatically scans our assets when new vulnerabilities are published. Automated scanning for the log4j vulnerabilities were available within a couple of days of disclosure.
What do you dislike about the product?
A few bugs in the UI, which are being addressed quickly.
The UI is also still evolving at a rapid pace, which can make it hard from time to time to find what you are looking for.
The UI is also still evolving at a rapid pace, which can make it hard from time to time to find what you are looking for.
What problems is the product solving and how is that benefiting you?
Cloud Security Posture Management.
Misconfigurations, vulnerability scanning, permission issues, etc...
Misconfigurations, vulnerability scanning, permission issues, etc...
Recommendations to others considering the product:
Overall our experience with Orca has been great and their support team is really on top of their game. So far Orca is ticking all the boxes for us and has quickly become a trusted tool in our security arsenal.
MR Orca's Review
What do you like best about the product?
The Portal is magnificent, ease-of-use, the and from news where it pint points the vulnerabilities and assets impacted by it, and the ability to auto remediate any issue
What do you dislike about the product?
sometimes findings are listed in multiple categories since each category has its own unique orca id, it is frustrating that I have to go to multiple categories to manually resolve the issue
What problems is the product solving and how is that benefiting you?
having a single point of view of all my risks, being able to be a platform-centric rather than tools centric, simplifies compliance and risk mitigation from a security prospective
Recommendations to others considering the product:
I strongly recommend it for any company that is looking for a security and compliance platform.
Very quick implementation and drastically reduced false positives over former DAST tool.
What do you like best about the product?
Ease of of implementation, extended visibility, speed to add celebrity vulnerabilities, ability to affect UI changes. Orca was pretty ground breaking to us over previous tools. But by far the biggest benefit is previously we had to know about something through discovery scans or inventory to evaluate. Orca knows about anything that is created and has already evaluated it before we even come in for the day. No more shadow IT.
What do you dislike about the product?
Not much compared to former tools we have used. It still creates the occasional false positive but sure no tool will be without since there is always some aspect that the tool can't see, like firewall restricting to VPN access.
What problems is the product solving and how is that benefiting you?
Configuration vulnerabilities is a primary business use. On three occasions, Orca identified malware that landed on a server. One occasion it was a completely exposed server that was spun up for weekend testing.
Great product and service!
What do you like best about the product?
Ease of installation/integration, efficiency in resolving issues, clear and concise UI that delivers information to us in a very actionable manner
What do you dislike about the product?
Some small bugs and issues, currently missing some features that competitors have
What problems is the product solving and how is that benefiting you?
Cloud infrastructure security, vulnerability management, threat detection, compliance checks
it is very good tool for finding security risk in your cloud infrastructure.
What do you like best about the product?
Provide details data for cloud resources that are vulnerable and data is well organized in ORCA UI. There is a new feature called shift left for container vulnerability. it is awesome. also, it has a compliance section that displays different compliance framework scores for your infrastructure.
What do you dislike about the product?
As of now, I don't think anything is missing but would like to have a feature that creates security incidents in organization for high trading vulnerability.
What problems is the product solving and how is that benefiting you?
we have improved our cloud infrastructure score to 90 and HIPPA compliance score to 100 by solving various types of orca alerts for the following categories like IAM misconfiguration, data at risk,Lateral movement,Neglected assets, and Vulnerabilities.
Orca is awesome for multi cloud strategy
What do you like best about the product?
Multicloud
Usability
Risk management
Prioritization scale
Usability
Risk management
Prioritization scale
What do you dislike about the product?
So far it seems Orca does not yet have an advanced CIEM capability
What problems is the product solving and how is that benefiting you?
Cloud security posture management
Vulnerability management
Multicloud security
CWPP
Vulnerability management
Multicloud security
CWPP
Orca gives great insight
What do you like best about the product?
When a vulnerability comes out, I can quickly determine if it is even something we are even running in the cloud
What do you dislike about the product?
Probably more against me than Orca; but the difficulty I have with the querying
What problems is the product solving and how is that benefiting you?
Visibility of our cloud environments and allowing us to apply resources to the highest risk
Best Vulnerability Management Tool EVER
What do you like best about the product?
Hard to narrow down. It's easy to install (15 minutes or less), easy to administer (took 15 minutes to master) and easy to use. Vulnerabilities are scanned and risk assessed daily making it easy to identify what has been remediated and what's outstanding. The vulnerability intelligence feed on the dashboard ensures I know exactly how the latest exploit might impact my organisation and what I need to do to remediate/mitigate the risk.
What do you dislike about the product?
Absolutely nothing!! If I'm going to be really picky my only issue is the Orca only provides me an inside looking out view. It would be perfect if it could also provide me the outside looking in view so I could connect vulnerability remediation to websites and business units.
What problems is the product solving and how is that benefiting you?
As Orca is cloud-native it has solved the problem of trying to get older terrestrial-based technologies to work effectively in cloud environments.
showing 191 - 200