No more typing reviews! Try our Samantha, our new voice AI agent.

Aqua Cloud Security Platform vs Orca Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Container Security
11th
Ranking in Cloud Workload Protection Platforms (CWPP)
8th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
6th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Vulnerability Management (11th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (1st)
Aqua Cloud Security Platform
Ranking in Container Security
20th
Ranking in Cloud Workload Protection Platforms (CWPP)
19th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
18th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
17
Ranking in other categories
Cloud and Data Center Security (14th), Software Supply Chain Security (11th), DevSecOps (13th)
Orca Security
Ranking in Container Security
8th
Ranking in Cloud Workload Protection Platforms (CWPP)
6th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
5th
Average Rating
8.8
Reviews Sentiment
6.9
Number of Reviews
34
Ranking in other categories
Vulnerability Management (10th), API Security (3rd), Cloud Security Posture Management (CSPM) (6th), Data Security Posture Management (DSPM) (7th), Cloud Detection and Response (CDR) (2nd), AI Security (3rd)
 

Mindshare comparison

As of June 2026, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of Qualys TotalCloud is 2.0%, up from 1.4% compared to the previous year. The mindshare of Aqua Cloud Security Platform is 3.0%, down from 4.0% compared to the previous year. The mindshare of Orca Security is 5.8%, down from 7.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud-Native Application Protection Platforms (CNAPP) Mindshare Distribution
ProductMindshare (%)
Orca Security5.8%
Qualys TotalCloud2.0%
Aqua Cloud Security Platform3.0%
Other89.2%
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
SP
Cloud Security Practitioner at a tech vendor with 10,001+ employees
Secures cloud workloads from build to runtime and has needed simpler setup and alert tuning
Regarding how Aqua Cloud Security Platform can be improved, the first area is the complex initial setup. Deployment and configuration can be complex, especially in large environments that require skilled resources. For Kubernetes environments, initial onboarding and policy setup takes time. Compared to Wiz onboarding, it is not very straightforward, as I have also worked with Wiz. The UI is powerful but not very simple for new users, as navigation and dashboard can be overwhelming. Alert noise and tuning are required because Aqua generates a large number of initial alerts that need tuning to reduce false positives. Additionally, pricing can be high depending on workload scale, especially for large Kubernetes and multi-cloud environments. For improvements to Aqua Cloud Security Platform, I think better integration with SOAR and XDR platforms, more AI-driven prioritization, and providing simpler out-of-the-box policies would be beneficial.
reviewer2799597 - PeerSpot reviewer
Soc Analyst at a tech consulting company with 11-50 employees
Agentless cloud security has improved attack path visibility but still needs stronger real-time blocking
Yes, as per my experience, it has been very helpful. In our organization, we did not find any major or priority one kind of alerts or risks because we had a very good infrastructure structure and cybersecurity architecture built in our organization. Orca Security helped us find what vulnerabilities or gaps existed which we could improve within our architecture. It helped us in such a way that we used to close the open ports and only allowed internal IPs for necessity. For staging environments and for prod we had DOS protection. If network traffic showed that anybody was trying to flood our systems, we would only accept all and our client-related IPs or an approved list of vendor lists we would have. We would get to know where the gaps are and where the improvements we could make. Being an analyst class engineer, I could use my brain in those areas and it was very helpful to have Orca Security in my arsenal.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"While automatic inventory detection upon connection is a helpful feature, a truly valuable capability would be assessing an environment's security posture against Azure and CIS best practices."
"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"
"The most valuable feature of Qualys TotalCloud is the visibility it provides."
"Qualys TotalCloud's most valuable feature is its agent versatility."
"I found the initial setup user-friendly."
"I would recommend Qualys TotalCloud to other users because it is cost-efficient and has a good return on investment."
"I would definitely recommend Qualys TotalCloud to other users."
"I appreciate TotalCloud's real-time protection and remediation features. The remediation options include automated one-click remedies and custom changes that help manage vulnerabilities efficiently."
"Aqua Security is the most advanced solution in the market for container security."
"We mainly used Aqua Security for container-related Kubernetes security in the CI/CD pipelines to secure the runtime of the Kubernetes clusters."
"Support is very helpful."
"The most valuable features are that it's easy to use and manage."
"The image security and image scanning were quite easy compared to Prisma, the solution was very user-friendly, easy to set up, stable, and the documentation was robust."
"We use Aqua Security for the container security features."
"The DTA, which stands for Dynamic Threat Analysis, allows me to analyze Docker images in a sandbox environment before deployment, helping me anticipate risks."
"The CSPM product is great at securing our cloud accounts and I really like the runtime protection for containers and functions too."
"I would rate the quality of support as nine stars out of ten due to their quick and helpful responses."
"Orca Security has patented technologies. It's an agentless solution, so you don't need to install an agent. Instead, it contacts your account provider and fetches metadata, eliminating the need for snapshots or reserved space to copy client infrastructure."
"There are so many valuable features that I could list, but one that I appreciate is the PCI DSS compliance report."
"We really enjoy using Orca; it's a very well-designed, well-executed product, I'm really super-impressed, this is a game-changer."
"For me, it's a no-brainer to have Orca running in your cloud."
"Orca gives you great visibility into your assets. It shows you the issues and the things that you need to attend to first, by prioritizing things. You can see a lot of information that is not always visible, even to DevOps, to help you know about the machines and their status. It's very easy to see everything in a single dashboard. That makes it a very useful tool."
"One of the valuable features of Orca Security is its design and options that allow flexible filtering and user-friendly visualization."
"The visibility Orca provides into my environment is at the highest level... When I dropped them into the environment, from the very get-go I had more insight into the risks in my environment than I had had during the entire two and a half years I had been here."
 

Cons

"TotalCloud could improve its scanning of niche devices like Wi-Fi dongles and USB modems because they are often untested. It covers everything else, like laptops, mobile devices, and Bluetooth IoT devices. They can improve on the small IoT devices because hackers and testers use these."
"The support process is inefficient due to the excessive number of replies required when submitting tickets."
"Enhancing clarity regarding its compliance capabilities would be beneficial, as the current scope is limited in geographic coverage."
"Two areas for improvement in Qualys TotalCloud are the speed of the public cloud platform and vulnerability detection."
"I think Qualys TotalCloud needs to improve its handling of zero-day vulnerabilities and supply chain management because modern ransomware attacks not only target prime critical infrastructures but also the supply chain system."
"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."
"A feature improvement could be the inclusion of Windows OS support for container security, as it is currently only supported for Linux."
"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."
"The solution could improve user-friendliness."
"Aqua Security could improve the forwarding of logging into Splunk and into other tools, it should be easier."
"It's a bit hard to use the user roles. That was a bit confusing."
"Since we are working from home, we would like to have the proper training for Aqua."
"Aqua is a bit expensive so you have to really justify going for it or not."
"They want to release improvements to their product to work with other servers because now there are more focused on the Kubernetes environment. They need to improve the normal servers. I would like to have more options."
"Aqua Security lacks a lot in reporting."
"I would like Aqua Security to look into is the development of a web security portal."
"Orca Security could improve its ticket creation process."
"I think the downside of Orca Security is the reports."
"In the future, I'd like to see Orca work better with third-party vendors. Specifically, being able to provide sanitized results from third parties."
"I would like to see an option to do security checks on a code level."
"I experienced some problems with custom tags in Orca Security where I tried to separate the environment for business units so I could ask the tech lead responsible for that vulnerability to fix them."
"I would like to see an option to do security checks on a code level. This is possible because they have access to all of the code running in the cloud provider, and combining their site-scanning solution with that would be a nice add-on."
"I would be happy if they offered more automatic remediation options."
"A notable limitation with Orca Security is its scanning feature. The automatic scan only runs every 24 hours, and if an alert is remediated within an hour, it still remains until the next scheduled scan."
 

Pricing and Cost Advice

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Qualys TotalCloud is expensive."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"It comes at a reasonable cost."
"Aqua Security is not cheap, and it's not very expensive, such as Splunk, they are in the middle."
"Dealing with licensing costs isn't my responsibility, but I know that the licenses don't depend on the number of users, but instead are priced according to your workload."
"They were reasonable with their pricing. They were pretty down-to-earth about the way they pitched their product and the way they tried to close the deal. They were one of the rare companies that approached the whole valuation in a way that made sense for our company, for our needs, and for their own requirements as well... They will accommodate your needs if they are able to understand them and they're stated clearly."
"The pricing of this solution could be improved."
"The pricing depends on how many assets you have running in your cloud and how many environments you have. If you have a dev environment, test environment, and a production environment then it's really important that you have coverage for all of them."
"We have a total of 25 licenses for this solution. The solution is on a pay-and-you-use model."
"Overall, the pricing is reasonable and the discounts have been acceptable."
"Orca Security is cheaper compared to other solutions in the same space."
"Orca is very competitive when compared to the alternatives and is not the most expensive in the market, that's for sure."
"While it's competitive with Palo Alto Prisma, I think Orca's list price is very high. I would advise Orca to lower it because, at that price, I might consider alternatives like Wiz, which also offers agentless services."
"Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."
"I think their pricing model is aligned with market demand. Of course, Orca could probably better align their pricing model with the needs of smaller businesses as well as some larger-scale enterprises with millions of assets. But in all fairness, I think the Orca sales team has been accommodating and ensured that we're happy with the pricing."
report
Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.
896,942 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
9%
Manufacturing Company
9%
Comms Service Provider
7%
Financial Services Firm
21%
Government
9%
Computer Software Company
9%
Manufacturing Company
8%
Financial Services Firm
16%
Computer Software Company
12%
Manufacturing Company
9%
Comms Service Provider
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise28
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise1
Large Enterprise11
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise8
Large Enterprise11
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
What do you think of Aqua Security vs Prisma Cloud?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...
What needs improvement with Orca Security?
In two implementation projects that I participated in, the customers reported difficulty with the options for generat...
What is your primary use case for Orca Security?
When discussing the main use case for Orca Security, I am referring to implementations for my clients. I participate ...
What advice do you have for others considering Orca Security?
Orca Security typically delivers three major positive changes, in my opinion: a faster understanding of risks in clou...
 

Also Known As

Qualys TotalCloud with FlexScan
Aqua Security Platform, CloudSploit, Argon
No data available
 

Overview

 

Sample Customers

Information Not Available
HPE Salesforce Telstra Ellie Mae Cathay Pacific HomeAway
BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino
Find out what your peers are saying about Aqua Cloud Security Platform vs. Orca Security and other solutions. Updated: May 2026.
896,942 professionals have used our research since 2012.