Appgate SDP vs Orca Security comparison

Appgate and Orca Security are both solutions in the ZTNA as a Service category. Additionally, 100% of Appgate users are willing to recommend the solution, compared to 100% of Orca Security users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Appgate SDP and Orca Security based on real PeerSpot user reviews.

Find out in this report how the two ZTNA as a Service solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Appgate SDP vs. Orca Security Report (Updated: May 2023).

Buyer's Guide

Appgate SDP vs. Orca Security

May 2023

Download the complete report

Helped 860,825 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Featured Reviews

Matt Crockford

Head of Cybersecurity at SES Water

It's easy to roll out, and their understanding of our business made it seamless

One aspect we value about iboss is its simplicity. Their customer service is brilliant, and they are super responsive and knowledgeable. It's easy to roll out, and their understanding of our business made it seamless. We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times. The user interface is highly intuitive. Our IT team picked it up with minimal training. It's arranged so that it's easy to find where things are. Another advantage is the single pane of glass console, which gives you visibility into what's happening. We're not fully there yet because we haven't implemented zero trust, but we're excited about the possibilities from the demos we've seen. We launched a POC of iboss' ChatGPT Risk Protection feature two weeks ago. AI is a great tool, but you need to be careful what you put into it. My biggest fear is employees inputting sensitive corporate information or customer PII data into one of these chatbots. I was impressed by our trial of the feature. It's exactly what we wanted. Now, when a user goes to ChatGPT, there's a banner warning them not to share information, and we can block conversations containing customer data like bank details and email addresses. I don't want to stop people from using it, but we need visibility. We've only tried it on a test group of 15 people. You can configure it to look for specific keywords or integrate it with your DLP policy if you have that configured

Read full review

IgnitiusMolepo

Senior IP Network Defense at MTN

Helps us manage traffic-related issues and streamlines access management for the network

Appgate SDP has significantly streamlined our access management, providing a notably efficient solution compared to traditional VPNs. The simplicity of the SDP platform is a standout feature; instead of navigating through intricate details, users can seamlessly connect to the company's network or switch to the internet with minimal effort, unlike VPNs which often involve waiting for connection handling and unblocking. Recognizing the robustness of SDP, we made strategic decisions to minimize reliance on VPNs, reserving only two for administrative purposes. In a scenario where Appgate SDP significantly improved our network security posture, the platform played a crucial role in fortifying defenses against major threats. The encryption algorithms utilized by SDP provide a high level of security to our network architecture. Compared to Cisco, SDP proves to be most critical in protecting resources with the help of role-based policies. It only provides selective access to the application. The dynamic policy engine significantly enhances our access control mechanisms. It has single sign-on and multifactor authentication features. It makes processes faster and easier. It has helped our IT team to manage the workload with ease. It gives an intelligent solution whenever they face traffic-related problems. I rate it a nine out of ten.

Read full review

CHINTAN MEHTA

Cloud Security Automation Engineer at a financial services firm with 10,001+ employees

Consolidating security tools with comprehensive cloud visibility

The documentation for Orca Security could be improved. The compliance framework also needs enhancements, especially concerning integrations with other tools like ServiceNow's vulnerability modules, which are not as mature as expected. It should also increase its capability to ingest data from other security tools like CloudSight for endpoint detection and provide real-time monitoring.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I would rate the technical support of iboss a solid 10 without a shadow of a doubt."

"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."

"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."

"We chose iboss for both zero trust and proxy (SWG) because their SWG was superior."

"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."

"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."

"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."

"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."

More iboss pros

"The flexibility of the tool is valuable. It is very robust. It has a very robust configuration capability."

"The interface is really friendly. It's simple to understand."

"One of the most important features is stopping lateral movement across our network."

"The simplicity of the SDP platform is a standout feature; instead of navigating through intricate details, users can seamlessly connect to the company's network or switch to the internet with minimal effort."

"It is a scalable solution...The support answers your questions very fast."

"It is pretty stable."

"I find Orca Security's CIEM feature invaluable, as it focuses on entitlement and posture management, identifying assets with older OS versions, and asset misconfiguration."

"The best features of Orca Security include its ability to perform a lot of security controls without requiring any installation of agents, making it very easy to set up."

"I recommend Orca Security to others looking for a cloud security solution due to its seamless integration and side-scanning technology that does not hamper cloud asset performance."

"The most valuable feature of Orca Security is the automated scanning tool, user-friendliness, and ease of use."

"The product itself is really good. It helped us streamline the way we access our servers."

"The GUI features are very good. Threat intelligence is also very good."

"Orca Security has patented technologies. It's an agentless solution, so you don't need to install an agent. Instead, it contacts your account provider and fetches metadata, eliminating the need for snapshots or reserved space to copy client infrastructure."

"Once our organization is configured, any cloud account under that organization is automatically detected in Orca Security, along with all the assets associated with it."

More Orca Security pros

Cons

"Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern."

"One thing I would like to see differently with their Zero Trust platform is that some of the AI aspects related to high-risk activities have more false positives."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

"Sometimes when you call in support, you get someone who is just following a sheet. It feels like a runaround. You feel that you are running into that support wall."

"File integrity monitoring would be very advantageous as an additional feature."

"I'd like to see them accelerate development on the security side, particularly around data loss prevention."

"The area I would like to see improvement in is the ability with in the reporter to navigate directly to the content the user is traversing. It is kind of there, but it's not perfect. Quite frequently, I receive links that lead me to pages with error messages."

"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."

More iboss cons

"The user interface should be improved as it is not very easy to work with the updates."

"One limitation is that it's harder to provide access to multiple applications in the company with Appgate, but that's probably because of poor management."

"It would be better to connect to an application portal from any device. Documentation and support could be better."

"One thing that kind of sticks out to me is the ability to do a proper non-split tunnel. VPN tunnel-wise, it is not really a true unsplit tunnel, but I think that's just because of the way it's designed. A split VPN basically allows your system to talk to other systems without being forced down the tunnel. A VPN running in a non-split tunnel mode forces all the traffic down the tunnel to wherever you're VPNing to. It forces the traffic down so that the traffic is subject to the firewall and rules that you have in your corporate environment and such. It helps to prevent remote malicious folks that may be talking directly to that box from piggybacking into the corporate environment through it. They do it partially, but it would be nice to see more of an enterprise-level solution there."

"They could provide a single-box solution to manage tools for 4000 users. Additionally, they could add extra features to enhance remote micro connection."

"On the cloud, when you make some changes, it may be difficult."

"They can expand a little bit in anti-malware detection. While we have pretty good confidence that it's going to detect some of the static malware, some of the detections are heuristics. There could be a growth in the library from where they're pulling their information, but we don't get a lot of those alerts based on the design of our products. In general, that might be an area that needs to be filled since they offer it as a service within it."

"Orca Security can be improved as there should be some kind of central pane of glass. Similar to how cloud management works, Orca Security should have something comparable."

"A notable limitation with Orca Security is its scanning feature. The automatic scan only runs every 24 hours, and if an alert is remediated within an hour, it still remains until the next scheduled scan."

"We are PCI DSS compliant, so we need to scan our environment externally with tools vetted by the PCI DSS organization. Orca doesn't scan the environment externally. It only scans what's currently in the cloud."

"In the future, I'd like to see Orca work better with third-party vendors. Specifically, being able to provide sanitized results from third parties."

"The solution could improve by making the dashboards more elaborative and more descriptive."

"I would like to see better customization options for security frameworks and better integration with reporting tools like Power BI or Grafana dashboards."

"It's not all clouds that they are currently onboarded with. For instance, they are not yet with public cloud and many other private clouds."

More Orca Security cons

Pricing and Cost Advice

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"It is probably in line with other solutions, but I do not deal with the financial side."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is expensive compared to one of its competitors."

"The overall pricing for iboss is very competitive and transparent."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is a pretty expensive tool. It is maybe about $20,000 per year for a hundred users or so."

"The pricing is according to the market price. It is not a very cheap solution. They have some very aggressive promotions to sell the product in the market."

"We pay $100 per user per month. One license for the site is around $17."

"Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."

"We have a total of 25 licenses for this solution. The solution is on a pay-and-you-use model."

"Orca is very competitive when compared to the alternatives and is not the most expensive in the market, that's for sure."

"Orca Security is cheaper compared to other solutions in the same space."

"While it's competitive with Palo Alto Prisma, I think Orca's list price is very high. I would advise Orca to lower it because, at that price, I might consider alternatives like Wiz, which also offers agentless services."

"Its license is a bit expensive."

"It is the cost of the visibility that you get. When you really sit down and think about what do you need to do to secure an environment with a low impact on the business, and you take a look out into the world, I think this tool is well justified around cost."

"I think their pricing model is aligned with market demand. Of course, Orca could probably better align their pricing model with the needs of smaller businesses as well as some larger-scale enterprises with millions of assets. But in all fairness, I think the Orca sales team has been accommodating and ensured that we're happy with the pricing."

More Orca Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which ZTNA as a Service solutions are best for your needs.

See recommendations

860,825 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Financial Services Firm

11%

Manufacturing Company

Government

Computer Software Company

15%

Manufacturing Company

10%

Financial Services Firm

Government

Computer Software Company

16%

Financial Services Firm

12%

Manufacturing Company

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about iboss?

Content filtering is the most useful feature of iboss.

See all answers

What needs improvement with iboss?

For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...

See all answers

What is your primary use case for iboss?

Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...

See all answers

What do you like most about Appgate SDP?

The simplicity of the SDP platform is a standout feature; instead of navigating through intricate details, users can ...

See all answers

What needs improvement with Appgate SDP?

They could provide a single-box solution to manage tools for 4000 users. Additionally, they could add extra features ...

See all answers

What is your primary use case for Appgate SDP?

We use Appgate SDP as a substitute for traditional VPN.

See all answers

What do you like most about Orca Security?

It's for protection. It's an agentless tool. We don't need to install anything at a customer's premises. We can just ...

See all answers

What needs improvement with Orca Security?

Orca Security can be improved as there should be some kind of central pane of glass. Similar to how cloud management ...

See all answers

What is your primary use case for Orca Security?

Our clients use Orca Security for various reasons. We implement it for the clients.

See all answers

Comparisons

Zscaler Internet Access vs iboss

Compared 19% of the time

Netskope vs iboss

Compared 16% of the time

Cisco Umbrella vs iboss

Compared 15% of the time

Prisma Access by Palo Alto Networks vs iboss

Compared 10% of the time

Infoblox BloxOne Threat Defense vs iboss

Compared 4% of the time

More iboss Competitors

Prisma Access by Palo Alto Networks vs Appgate SDP

Compared 9% of the time

Zscaler Internet Access vs Appgate SDP

Compared 8% of the time

Cato SASE Cloud Platform vs Appgate SDP

Compared 7% of the time

Zscaler Zero Trust Exchange Platform vs Appgate SDP

Compared 6% of the time

Fortinet FortiClient vs Appgate SDP

Compared 5% of the time

More Appgate SDP Competitors

Wiz vs Orca Security

Compared 32% of the time

Microsoft Defender for Cloud vs Orca Security

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs Orca Security

Compared 5% of the time

AWS Security Hub vs Orca Security

Compared 4% of the time

CrowdStrike Falcon Cloud Security vs Orca Security

Compared 3% of the time

More Orca Security Competitors

Product Reports

Buyer's Guide

iboss

June 2025

Download iboss product report

Buyer's Guide

ZTNA

June 2025

Download Appgate SDP product report

Buyer's Guide

Orca Security

March 2025

Download Orca Security product report

Also Known As

iBoss Cloud Platform

No data available

Overview

iboss offers a comprehensive security platform designed for diverse use cases such as web filtering, data loss protection, corporate proxy services, and URL filtering.

iboss integrates advanced features to address dynamic security needs, leveraging its strength in SASE, ZTNA, AI initiatives, and cloud integration, while ensuring seamless operations for remote work. It excels in historical forensics, malware protection, and flexible cloud deployments. Users benefit from comprehensive traffic scanning, robust malware detection, and PaaS capabilities that reduce hardware management. An intuitive admin console ensures efficient management with content filtering and low false positives. SSL decryption enhances security, while DLP protects data in AI conversations. Deployment is rapid and scalable, allowing effortless integration with emerging technologies.

What features does iboss offer?

Granular Web Filtering: Provides precise control over web content access.
Traffic Scanning: Monitors data through multiple ports for security breaches.
Malware Detection: Ensures superior protection against malware threats.
PaaS Capabilities: Eliminates need for hardware management.
SSL Decryption: Enhances data protection by decrypting secure connections.
DLP Capabilities: Safeguards data during AI interactions.

What benefits and ROI should users consider?

Scalability: Adapts quickly to growing demands and emerging tech integration.
Rapid Deployment: Reduces time to implement security measures.
User-Friendly Admin Console: Facilitates efficient operations management.
Low False Positives: Increases accuracy of threat detection systems.

iboss finds significant application in sectors such as education, where web filtering for K-12 is crucial, and in corporate environments requiring robust proxy services and URL filtering for network security. Its adaptability is essential in scenarios demanding flexible, decentralized security frameworks, particularly for remote work setups.

iboss

Appgate SDP is a network access control tool for local and remote access, multifactor authentication, and micro-segmentation. It is a flexible, robust, and configurable tool with good documentation, interface improvements, and ease of deployment.

It helps organizations prevent lateral movement across networks and servers and provides a more granular access control structure than traditional VPNs. Appgate SDP's valuable features include the ability to hide servers, good support, stability, scalability, and stopping lateral movement. It is currently being used as the main VPN solution for many companies.

Appgate

Orca Security is the pioneer of agentless cloud security that is trusted by hundreds of enterprises globally. Orca makes cloud security possible for enterprises moving to and scaling in the cloud with its patented SideScanning™ technology and Unified Data Model. The Orca Cloud Security Platform delivers the world's most comprehensive coverage and visibility of risks across AWS, Azure, Google Cloud and Kubernetes.

At Orca Security, we’re on a mission to make it fast, easy, and cost effective for organizations to address critical cloud security issues so they can operate in the cloud with confidence.

Key Platform Features:

Agentless: Complete, centralized coverage of the entire cloud estate, without the need for installing and configuring agents or layering together multiple siloed tools. Full visibility of cloud misconfigurations, vulnerabilities, workload protection, malware scanning, image scanning, file integrity monitoring and more.
Asset Inventory: Get a complete inventory of all your public cloud assets, including detailed information on installed OSes, software, and applications, as well as data and network assets such as storage buckets, Virtual Private Clouds (VPCs), and Security Groups.

Attack Path Analysis: Visualize attack vectors to critical assets or crown jewels. See which assets are susceptible to lateral movement, assume roles, privilege escalation, and more.

Risk Prioritization: Prioritize the 1% of risks that matter the most, based on impact scores. Secure the vulnerabilities and misconfigured targets (critical assets) and eliminate the potential risks residing on the attack paths to those targets.
Cloud Threat Detection: Monitor for malicious activity within your entire cloud estate. Be aware of detected threats, user behavior anomalies and more.

Breach Forensics: Log every change and all activity into a central repository for investigation procedures to confirm or deny entry and compromises within the cloud estate.
Cloud To Dev (Shift Left): Orca’s built-in shift left capabilities enables DevOps to focus more security attention earlier in the CI/CD pipelines. Security teams are able to trace a production risk (misconfiguration or vulnerability) directly to the original source code repository from which it came, even down to the exact line of code that is at the root of the identified risk.
Compliance: Choose from over 60 preconfigured compliance frameworks, cloud security best practices, CIS Benchmarks, or design and build your own compliance framework for fast and continuous reporting.
Security Score: The Orca Security Score is found on Orca’s Risk Dashboard and is updated daily. The overall score is calculated based on performance in the following five categories - Suspicious Activity, IAM, Data at Risk, Vulnerable Assets, and Responsiveness. Since the scores are percentage based and not raw numbers, you can objectively make comparisons to other organizations within your industry or business units of different sizes. In addition to reporting to senior management, the Orca Security Score can help with internal self-monitoring, as a way of measuring risk mitigation efforts, to know where to focus efforts, and track progress.

Orca Security Benefits

Consolidate technologies to reduce costs and complexity:

“The more I can get out of this one solution, the better. I see Orca as the tool where we get all cloud-related security data.” - Joshua Scott, Head of Security and IT | Postman

Avoid costly breaches:

"I look at proactive asset discovery, configuration management, and vulnerability management as being able to find a vulnerability before the bad guys do and being able to deal with it before something exploits it. This is what Orca does for us." - Doug Graham, CSO & CPO | Lionbridge

Increase team productivity and efficiency by focusing on high-value activities and solving the 1% of risks that matter most:

"Orca is unique in that it locates vulnerabilities with precision and delivers tangible, actionable results – without having to sift through all the noise." - Aaron Brown, Senior Cloud Security Engineer | Sisense

Quick Time-to-Value with Immediate ROI:

"Orca told us we could have some visibility within 5 or 10 minutes, and I thought, ‘There’s no way.’ Well, I was wrong. They really did it." - Thomas Hill, CISO | Live Oak Bank

Reduce MTTR and remove operational friction:

“We can’t ask developers things like ‘Did you think about security? When you start a new VM on AWS, can you please let me know so I’m able to scan it? Can you please deploy an agent on that machine for me?’ We need a better way to work. Orca provides that better way by eliminating organizational friction.” - Erwin Geirnaert, Cloud Security Architect | NG Data

Orca Security

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

United States Air Force FINRA Weight Watchers Rackspace DataDog SageNet Verdant Norwegian Cruise Line VoiceBase The Third Floor

BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino

Buyer's Guide

Appgate SDP vs. Orca Security

May 2023

Free Report: Appgate SDP vs. Orca Security

Find out what your peers are saying about Appgate SDP vs. Orca Security and other solutions. Updated: May 2023.

DOWNLOAD NOW

860,825 professionals have used our research since 2012.

See our Appgate SDP vs. Orca Security report.

See our list of best ZTNA as a Service vendors and best Cloud Detection and Response (CDR) vendors.

We monitor all ZTNA as a Service reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.