I use Orca Security as a CSPM tool primarily for cloud security and posture management. I utilize its CIEM and CDR features extensively. CIEM focuses on cloud infrastructure and entitlement management, and CDR deals with cloud detection and response.
Orca Security CNAPP Cloud Security Platform
Orca Security CNAPPExternal reviews
227 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Orca Security has led us to a greatly improved cloud security posture within days of use.
What do you like best about the product?
The interface is very intuitive and there was not a learning curve at all. Being able to create reports on pretty much any dashboard has been very helpful. Vulnerabilities and misconfigurations found by Orca give us more than enough information to be handed to our development team for remediation without having to do any additional research. Overall, this is a very well thought out platform.
What do you dislike about the product?
I honestly have not found anything I dislike yet.
What problems is the product solving and how is that benefiting you?
It was a very painful process to search for misconfigurations with IAM and networking in our environment. Orca has given us a way to have all of the data we need without having to spend hours searching and it most cases gives the instructions needed to remediate. It has also helped us add more shift left into our development process.
Maximize cloud security management with effective CIEM and CDR features
What is our primary use case?
What is most valuable?
I find Orca Security's CIEM feature invaluable, as it focuses on entitlement and posture management, identifying assets with older OS versions, and asset misconfiguration.
The CDR feature is also critical, focusing on detection and response, triggering alerts like brute force attacks and malware. It provides alert and asset details, which include multiple remediation actions. It combines functionalities of multiple security tools and collects alerts and logs from them.
What needs improvement?
A notable limitation with Orca Security is its scanning feature. The automatic scan only runs every 24 hours, and if an alert is remediated within an hour, it still remains until the next scheduled scan. A more frequent or on-demand scanning option might mitigate this issue.
For how long have I used the solution?
I've been using Orca Security for one and a half years.
What do I think about the stability of the solution?
The stability of Orca Security is satisfactory, and I would rate it nine out of ten. I have experienced very little downtime.
What do I think about the scalability of the solution?
Orca Security is highly scalable, and I would rate its scalability as eight to nine. I have observed minimal downtime.
How are customer service and support?
I have had experiences where I needed to contact Orca support to address issues with alerts that remained active even after remediation. Based on my interactions, I would rate the support team a six out of ten.
How would you rate customer service and support?
Neutral
What's my experience with pricing, setup cost, and licensing?
Orca Security's pricing is known to be a bit high, however, I'm not directly involved in that aspect.
Which other solutions did I evaluate?
I have not used any alternatives to Orca Security.
What other advice do I have?
I would rate Orca Security overall as eight out of ten.
Agent-less Solutions, easy onboard, powerful CNAPP
What do you like best about the product?
Easy Onboarding, I don't need consider the agent implementation plan, or any rollback plan if any bad thing happens.
What do you dislike about the product?
lack of sandbox, or real-time protection
What problems is the product solving and how is that benefiting you?
Orca Security enhances cloud security by leveraging CNAPP benefits, offering comprehensive visibility and protection across environments. This approach enables organizations to identify vulnerabilities, prioritize risks, and ensure compliance, all while streamlining security operations and improving response times. Most important things are 1) no agent, I don't need to take care the installation and compatibility issues, 2) it helps me to prioritize the alerts and risks that I need deal with them immediately.
Seamless integration and side scanning optimize cloud security management
What is our primary use case?
I am primarily using Orca Security for cloud security. Being part of the vulnerability management team, I utilize Orca Security for generating vulnerability alerts on cloud assets.
What is most valuable?
One aspect that stands out is the seamless integration. Once our organization is configured, any cloud account under that organization is automatically detected in Orca Security, along with all the assets associated with it.
Another valuable feature is the side scanning technology using a snapshot mechanism. This technology allows for coverage of almost all cloud assets without interrupting their operations.
What needs improvement?
Orca Security could improve its ticket creation process. Currently, it allows for creating tickets in only one bucket, which requires monitoring to redirect tickets to the appropriate team. It would be beneficial to have segregation for different projects.
Additionally, Orca Security could improve in reporting OS package vulnerabilities, such as missing MS patches or Linux patches.
For how long have I used the solution?
I have been using Orca Security for one year.
What do I think about the stability of the solution?
I would rate the stability as nine out of ten. I personally have not encountered any bugs or issues with the console. It runs almost 24/7.
What do I think about the scalability of the solution?
I would rate the scalability as nine out of ten. The seamless integration allows us to automatically reflect any connected project from our cloud into the console.
How are customer service and support?
I would rate customer service between eight and nine out of ten. The support team assists with issues and provides information on new updates, helping us understand the product better.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Previously, we used Rapid7 for vulnerability management. We switched because we moved from on-premises to the cloud, which required a cloud security solution.
What's my experience with pricing, setup cost, and licensing?
I am not sure about the pricing, as all decisions related to pricing and configuration were made by a different department.
What other advice do I have?
I recommend Orca Security to others looking for a cloud security solution due to its seamless integration and side-scanning technology that does not hamper cloud asset performance. It also offers automation for ticket creation directly from alerts.
I'd rate the solution eight out of ten.
Identify configuration issues, exhaustive list of vulnerable packages as well as abandoned assets 👍
What do you like best about the product?
The easiness of install with the guaranty of exhaustiveness of scanning on all our Cloud accounts.
What do you dislike about the product?
Quite hard for some stakeholders to jump in. Separation / Ownership of assets has to be done on the cloud side, which require every teams to adopt a new and same process.
What problems is the product solving and how is that benefiting you?
Help ensuring secure configurations of kubernetes cluster, managed services, IAM
Spot vulnerable 3rd party libraries
Help inventory all cloud assets
Spot vulnerable 3rd party libraries
Help inventory all cloud assets
Good product, but there is still place for improvement
What do you like best about the product?
Easy to filter the alerts and create automatic tickets.
AI generated remediation steps making fixing the issues easier.
Support is quite responsive
AI generated remediation steps making fixing the issues easier.
Support is quite responsive
What do you dislike about the product?
The screen is sometimes still cluttered a bit (there was improvement in this since we started to use the product, but still sometimes there is way too much information visible, and need a lot of clicks to get to the needed details.)
API calls are sometimes very limited, workarounds are needed for custom integrations.
API calls are sometimes very limited, workarounds are needed for custom integrations.
What problems is the product solving and how is that benefiting you?
We get better overview of our security posture from multi cloud environment. we can compare the "secureness" of our clouds to eachother, as we have a common tool to track the status.
Great tool for measuring and improving cloud security posture
What do you like best about the product?
The tool provides an amazing level of insight in our cloud presence. It is orgranized in an intuitive way, allows for customization, and is easy to drill down into details on specific alerts.
What do you dislike about the product?
Scans sometimes fail and it's not always obvious that there is an issue.
What problems is the product solving and how is that benefiting you?
The largest benefit we're receicing from Orca is a much more complete vision of our cloud environments. Addtionaly, it has greatly increased our efficiency in identifying and correcting vulnerabilities and compliance issues.
Security engineer's perspective
What do you like best about the product?
Very intuitive, looks great, and easy to use
What do you dislike about the product?
might be a little expensive for small businesses
What problems is the product solving and how is that benefiting you?
Viewing the cloud posture, vulnerabilities, and how to resolve them.
A near-complete DevSecOps and CSPM solution that is on track to go above and beyond
What do you like best about the product?
The tool provides a pragmatic view of you security posture. We all know CVEs err on the side of more severe criticality. Orca is aware of this too and tries to reserve the Critical status for things that should be looked at now.
Attack paths provide a seed for internal investigations.
Webhook oriented scans for your repositories are easy to implement.
Customer support is very good. Just a click and you get a chat bot that is quickly picked up by a human.
Attack paths provide a seed for internal investigations.
Webhook oriented scans for your repositories are easy to implement.
Customer support is very good. Just a click and you get a chat bot that is quickly picked up by a human.
What do you dislike about the product?
Attack paths aren't always accurate. For example, a ddos vulnerability won't lead to a pivot to an internal access. Not by itself anyway.
Out of the box scans are fairly infrequent in an environment where changes happen often.
Out of the box scans are fairly infrequent in an environment where changes happen often.
What problems is the product solving and how is that benefiting you?
Outside of the obvious security benefits, Orca provides a view of neglected resources which has led to significant resource clean up.
New Orca Cloud Security User
What do you like best about the product?
Orca Security is very easy to use for new user or organization. The platform is intuitive.
What do you dislike about the product?
While orca ofers deep visbility, managing such an extensive platform without enmterprise support can be overwhelming.
What problems is the product solving and how is that benefiting you?
Comprehensive Coverage: It provides holistic visiblity across workloads, containers, and cloud infrastructure.
showing 21 - 30