Try our new research platform with insights from 80,000+ expert users
Orca Security Logo

Orca Security Reviews

Vendor: Orca Security
4.5 out of 5
Leave a review

What is Orca Security?

Orca Security provides comprehensive security management with agentless visibility and SideScanning technology, ensuring efficient threat detection without performance impact.

Get the Orca Security Buyer's Guide and find out what your peers are saying about Orca Security, Wiz, Datadog and more!
Orca Security is the #3 ranked solution in top Cloud Detection and Response (CDR) solutions, #7 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #8 ranked solution in API Security Solutions, #9 ranked solution in top Data Security Posture Management (DSPM) solutions, #10 ranked solution in Cloud Workload Protection Platforms, #11 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #15 ranked solution in top Vulnerability Management solutions, and #18 ranked solution in Container Security Solutions. PeerSpot users give Orca Security an average rating of 9.0 out of 10. Orca Security is most commonly compared to Wiz: Orca Security vs Wiz. Orca Security is popular among the large enterprise segment, accounting for 60% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.
Buyer's Guide
Orca Security
September 2025
Get the report
Helped 870,623 peers since 2012

Featured Orca Security reviews

Read more reviews

Orca Security mindshare

Product category:
Cloud Security Posture Management (CSPM)
As of October 2025, the mindshare of Orca Security in the Cloud Security Posture Management (CSPM) category stands at 5.7%, down from 7.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Cloud Security Posture Management (CSPM) Market Share Distribution
ProductMarket Share (%)
Orca Security5.7%
Wiz20.8%
Prisma Cloud by Palo Alto Networks11.3%
Other62.2%
Cloud Security Posture Management (CSPM)

PeerResearch reports based on Orca Security reviews

TypeTitleDate
CategoryCloud Security Posture Management (CSPM)Oct 17, 2025Download
ProductReviews, tips, and advice from real usersOct 17, 2025Download
ComparisonOrca Security vs WizOct 17, 2025Download
ComparisonOrca Security vs Prisma Cloud by Palo Alto NetworksOct 17, 2025Download
ComparisonOrca Security vs SentinelOne Singularity Cloud SecurityOct 17, 2025Download
Suggested products
TitleRatingMindshareRecommending
Wiz4.520.8%96%26 interviewsAdd to research
Datadog4.31.9%97%201 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

Orca Security's most valuable features include comprehensive visibility through SideScanning, efficient vulnerability prioritization, agentless deployment, and seamless multi-cloud integration. It offers detailed threat intelligence, automated scanning, CI/CD pipeline integration, and compliance management. The platform's user-friendly interface and flexible filtering enhance usability. Its ability to manage security controls without requiring agents consolidates multiple tools into one, improving security posture across environments like AWS, Azure, and GCP while providing real-time insights and automated alerts.
  • "The product itself is really good. It helped us streamline the way we access our servers."
  • "Orca Security has helped reduce the time it takes to address cloud security alerts."
  • "The GUI features are very good. Threat intelligence is also very good."

Room for Improvement

Orca Security could enhance real-time risk assessment and data center integration. They should improve their user interface, increase automation for remediation, and expand third-party integrations. Frequent scanning and better notification systems are needed. Documentation, dashboard presentation, and user education require refinement. Greater flexibility in alerts and ticketing would be beneficial. Coverage for private clouds is lacking. Monitoring and response capabilities should be upgraded, and they should simplify customization options for security frameworks and cloud integration.
  • "The timeout settings could be made more customizable, as sometimes if I leave the office early, it's still running unless manually turned off."
  • "Orca Security can be improved as there should be some kind of central pane of glass. Similar to how cloud management works, Orca Security should have something comparable."
  • "Orca Security can be improved as there should be some kind of central pane of glass. Similar to how cloud management works, Orca Security should have something comparable."

ROI

Users experienced significant ROI from Orca Security with reduced costs and increased efficiency. It replaced multiple tools, saving around $450,000, and minimized staffing expenses by $336,000 annually. Its immediate time-to-value and daily updates provided a quick and effective solution for cloud security, making it indispensable for operations. Simplifying tasks for engineers and achieving enhanced visibility from 30% to 100% were also highlighted as major advantages.

Pricing

Enterprise users indicate that Orca Security's pricing is competitive but considered high by some, similar to Rapid7 but lower than Prisma Cloud. The model is based on cloud workloads or environments, offering flexibility with potential discounts for strategic partners. Many highlight no additional costs beyond standard licensing, with a pay-as-you-use approach. While some find the tool expensive for smaller organizations, the comprehensive features justify the cost for cloud-native users.
  • "Its license is a bit expensive."
  • "Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."
  • "Orca Security is cheaper compared to other solutions in the same space."

Popular Use Cases

Organizations use Orca Security primarily for cloud security posture management. It helps in identifying threats, vulnerabilities, and misconfigurations by providing insights into cloud environments like AWS, Azure, and GCP with its agentless approach. It enables users to check compliance with standards, manage cloud security settings, and ensure visibility across infrastructure. By leveraging APIs, Orca Security scans for asset inventory, ensuring configurations adhere to best practices without impacting performance.

Service and Support

Orca Security customer service is highly responsive, often resolving inquiries swiftly. Many users rate their support between eight to ten, appreciating their quick feedback and helpfulness. Some mention the benefit of real-time interaction via Slack. However, there are mentions of inconsistency when dealing with different support personnel and occasional longer response times. The support personnel's knowledge and eagerness to address feature requests stand out, creating a sense of reliability and trustworthiness for users.

Deployment

Many users found Orca Security's initial setup remarkably easy, often completed within minutes due to its agentless nature. The installation typically requires only providing necessary credentials and permissions for cloud environments like AWS, Azure, or Google. Users appreciated its simplicity, with minimal effort needed for deployment, reducing overhead significantly. Those who encountered difficulties with AWS found GCP and Azure easier. Professional services are available for more complex deployments.

Scalability

Orca Security is highly scalable and easily integrates with varying cloud environments, supporting seamless expansion across multiple accounts and environments. Its design accommodates extensive use across AWS and Azure without performance issues. Organizations appreciate the ability to track vulnerabilities efficiently. By avoiding agent installation, Orca ensures quick scalability with minimal effort. Users experience reliable scalability regardless of their organization's size, with many praising its effectiveness in large environments. Rating typically ranges from eight to ten.

Stability

Users experienced minimal downtime with Orca Security, noting occasional issues. While some initially faced bugs and frontend problems, stability has improved significantly. Many users rate it between nine and ten, acknowledging its reliability and smooth functionality. They appreciate updates and problem-solving by the support team. Despite rare downtime during off-hours, it's considered highly stable, performing well with continuous updates. The interface has improved, with most users encountering no disruptions or delays.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Orca Security Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business9
Midsize Enterprise7
Large Enterprise5
By reviewers
By visitors reading reviews
Company SizeCount
Small Business317
Midsize Enterprise179
Large Enterprise742
By visitors reading reviews

Top industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
13%
Manufacturing Company
10%
University
5%
Retailer
5%
Healthcare Company
4%
Comms Service Provider
4%
Insurance Company
4%
Government
4%
Educational Organization
3%
Energy/Utilities Company
3%
Media Company
3%
Outsourcing Company
3%
Non Profit
3%
Construction Company
3%
Transportation Company
2%
Performing Arts
2%
Real Estate/Law Firm
2%
Legal Firm
2%
Hospitality Company
2%
Wholesaler/Distributor
2%
Recreational Facilities/Services Company
1%
Aerospace/Defense Firm
1%
Logistics Company
1%
Consumer Goods Company
1%
Wellness & Fitness Company
1%

Compare Orca Security with alternative products

Go!

Learn more about Orca Security

Orca Security offers agentless visibility across multi-cloud environments, streamlining security management with features like SideScanning technology and centralized security tools. It focuses on automation, vulnerability management, and compliance checks, enhancing a company's security posture with real-time alerts and integrated threat detection. Its intuitive interface prioritizes critical issues, making it suitable for managing DevSecOps processes efficiently.

What are the key features of Orca Security?
  • Agentless Visibility: Gain comprehensive insights into cloud environments without deploying agents.
  • SideScanning Technology: Detect threats and vulnerabilities efficiently across platforms.
  • Comprehensive Security Management: Centralizes security across AWS, GCP, and Azure with minimal setup effort.
  • CIEM Feature: Enhances security posture with integrated identity and access management.
  • Real-Time Alerts: Provide immediate awareness of security threats and vulnerabilities.
  • Automation and Compliance: Streamline processes with automated vulnerability management and compliance checks.
What benefits and ROI should companies look for in Orca Security?
  • Centralized Management: Simplifies security operations by consolidating tools across cloud environments.
  • Improved Security Posture: Reduces alerts and manages threats effectively with detailed insights.
  • Efficient Threat Detection: Enhances response capabilities with integrated threat detection and real-time alerts.
  • Easy Deployment and Setup: Facilitates quick implementation without complex configurations.
  • Enhanced Integration: Supports seamless integration with existing security frameworks and processes.

Companies in industries such as finance, healthcare, and technology leverage Orca Security for cloud security posture management, ensuring compliance with standards and securing applications and databases. Its agentless approach provides comprehensive visibility across AWS, GCP, and Azure, enhancing risk assessment and vulnerability management without impacting asset performance.

Orca Security customers

BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino

Related questions

  • 103
Which tool is best for CNAPP: Wiz or Orca?
  • 39
What are your best practices for Identity and Access Management (IAM) in the Cloud?
  • 62
What is the minimum security features set required for Cloud Backup and Storage Software?
  • 9
What are your best practices to achieve DevOps security in the cloud?
  • 31
Is there a single tool to unify cloud compliance reporting?
  • 18
What is Unified Cloud Security? Can you define the scope and use cases of the term?
  • 35
What is an Application Security Posture Management (ASPM)?
  • 11
Which solutions offer a preventive, proactive approach to cloud security posture management?
  • 12
What are the potential PaaS attack vectors in the cloud?
  • 6
Which Cloud Security Posture Management solutions enable threat-hunting?

Product Categories

Product Categories
Cloud Security Posture Management (CSPM)
Vulnerability Management
Container Security
Cloud Workload Protection Platforms (CWPP)
API Security
Cloud-Native Application Protection Platforms (CNAPP)
Data Security Posture Management (DSPM)
Cloud Detection and Response (CDR)

Popular Comparisons

Popular Comparisons
Wiz vs Orca Security Logo
Wiz vs Orca Security
Datadog vs Orca Security Logo
Datadog vs Orca Security
Microsoft Defender for Cloud vs Orca Security Logo
Microsoft Defender for Cloud vs Orca Security
Prisma Cloud by Palo Alto Networks vs Orca Security Logo
Prisma Cloud by Palo Alto Networks vs Orca Security
Darktrace vs Orca Security Logo
Darktrace vs Orca Security
Snyk vs Orca Security Logo
Snyk vs Orca Security
SentinelOne Singularity Cloud Security vs Orca Security Logo
SentinelOne Singularity Cloud Security vs Orca Security
Checkmarx One vs Orca Security Logo
Checkmarx One vs Orca Security
Veracode vs Orca Security Logo
Veracode vs Orca Security
Qualys VMDR vs Orca Security Logo
Qualys VMDR vs Orca Security
Tenable Nessus vs Orca Security Logo
Tenable Nessus vs Orca Security
AWS GuardDuty vs Orca Security Logo
AWS GuardDuty vs Orca Security
CrowdStrike Falcon Cloud Security vs Orca Security Logo
CrowdStrike Falcon Cloud Security vs Orca Security
AWS Security Hub vs Orca Security Logo
AWS Security Hub vs Orca Security
Tenable Security Center vs Orca Security Logo
Tenable Security Center vs Orca Security
See all alternatives
 
Orca Security Reviews Summary
Author infoRatingReview Summary
Cloud Security Automation Engineer at a financial services firm with 10,001+ employees4.0We used Orca Security for cloud security, particularly for CSPM and vulnerability assessment. Its agentless setup simplified deployment, replacing many tools and improving visibility to 100%. However, the documentation and compliance framework could benefit from enhancements.
Senior Information Security Engineer at a computer software company with 10,001+ employees4.0I use Orca Security for managing cloud security posture, finding its flexible filtering and visualization valuable. While it effectively identifies vulnerabilities and compliance issues, it needs better management options for snoozing alarms and handling alerts with multiple files.
Software Developer at a tech vendor with 1,001-5,000 employees4.5I found Orca Security significantly enhanced our server access and security without relying on a VPN. While the multi-tenant architecture effectively managed alerts, I suggest improving two-step authentication features and timeout settings for added convenience.
Vulnerability Assessment Analyst at a computer software company with 501-1,000 employees4.0I use Orca Security for cloud security and vulnerability alerts. Its seamless integration and side scanning technology are valuable. However, ticket creation could improve by allowing segregation for different projects, and reporting OS package vulnerabilities needs enhancement.
enterprise architect at a tech services company with 1-10 employees4.5We implement Orca Security for clients who value its excellent GUI and threat intelligence features. However, it needs a central management system similar to Palo Alto Panorama. Customers often choose it due to its presence in Gartner's Top 5.
Works at Ultraviolet Cyber4.0I use Orca Security primarily for cloud security and posture management. Its CIEM and CDR features are invaluable, but the automatic scan runs only every 24 hours, which limits timely detection. I have not used any alternatives.
Presales Security Engineer / CSM at Cybersel Group4.5We use Orca Security to detect misconfigurations and vulnerabilities without needing an agent. The solution's detailed analysis can be overwhelming for nontechnical users, though it provides significant value to those with technical expertise, especially in cloud environments.
Cloud Security Contractor at TripAdvisor5.0I use Orca Security for posture management to comply with frameworks like CIS and NIST. Its reporting and automated remediation are transformative. Although customization could improve, it offers good ROI and outperformed solutions like Lacework due to features and integration.