AWS Security Hub vs Orca Security comparison

Read 21 Orca Security reviews

7,521 Views
5,415 Comparison Views

100% willing to recommend

AWS Security Hub

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jul 27, 2025

Orca Security and AWS Security Hub are two key players in cloud security. Orca Security stands out with its agentless scanning and intuitive usability while AWS Security Hub is preferred for its seamless integration with AWS services and lower cost.

Features: Orca Security's SideScanning technology offers comprehensive cloud visibility without agents. It effectively prioritizes vulnerabilities to manage risks efficiently and supports multi-cloud environments, including container security. AWS Security Hub is noted for its AWS services integration, comprehensive compliance checks, and centralized security management but lacks the detailed agentless scanning provided by Orca.

Room for Improvement: Orca Security can enhance its auto-remediation features, third-party integrations, and alert customization. AWS Security Hub could improve real-time scanning, cross-cloud adaptability, and customizable dashboards to better support hybrid environments.

Ease of Deployment and Customer Service: Orca Security is praised for quick deployment and proactive support, benefiting from a cloud-native design that simplifies updates. AWS Security Hub is easy to set up within AWS but faces challenges in multi-cloud deployments with adequate customer service needing enhancements for diverse environments.

Pricing and ROI: Orca Security, though priced higher, offers a quick ROI through comprehensive features and reduced staffing costs, proving valuable for enhanced security posture. AWS Security Hub is more affordable, providing flexibility in pricing models and excelling in cost-effective AWS ecosystem integration.

To learn more, read our detailed AWS Security Hub vs. Orca Security Report (Updated: September 2025).

AWS Security Hub vs. Orca Security

September 2025

Download the complete report

Helped 872,655 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Security Hub

Ranking in Cloud Security Posture Management (CSPM)

13th

Average Rating

7.6

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Security Orchestration Automation and Response (SOAR) (5th)

Orca Security

Ranking in Cloud Security Posture Management (CSPM)

11th

Average Rating

9.0

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

Vulnerability Management (15th), Container Security (18th), Cloud Workload Protection Platforms (CWPP) (10th), API Security (8th), Cloud-Native Application Protection Platforms (CNAPP) (7th), Data Security Posture Management (DSPM) (9th), Cloud Detection and Response (CDR) (3rd)

Mindshare comparison

As of October 2025, in the Cloud Security Posture Management (CSPM) category, the mindshare of AWS Security Hub is 4.1%, down from 5.0% compared to the previous year. The mindshare of Orca Security is 5.7%, down from 7.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM) Market Share Distribution
Product	Market Share (%)
Orca Security	5.7%
AWS Security Hub	4.1%
Other	90.2%

Cloud Security Posture Management (CSPM)

Featured Reviews

Karthik Ekambaram

Director at Scybers

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Read full review

CHINTAN MEHTA

Cloud Security Automation Engineer at a financial services firm with 10,001+ employees

Consolidating security tools with comprehensive cloud visibility

The documentation for Orca Security could be improved. The compliance framework also needs enhancements, especially concerning integrations with other tools like ServiceNow's vulnerability modules, which are not as mature as expected. It should also increase its capability to ingest data from other security tools like CloudSight for endpoint detection and provide real-time monitoring.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of the solution stems from the fact that it is easy to manage...It is a scalable solution."

"Cloudposse is a valuable feature as it guarantees my security."

"Very good at detection and providing real-time alerts."

"Easily integrates with third-party tools"

"AWS Security Hub can check your infrastructure against multiple compliance frameworks. You can turn on or off specific frameworks based on your needs."

"AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS. They have partners, such as Amazon Preferred Network Partners (APN). If you have different security tools around APN, we can integrate those findings with AWS Security Hub reducing the need to refer to different portals or different UIs. You can have AWS Security Hub act as a single common go-to dashboard."

"Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup."

"I really like the seamless integration with the AWS account structure. It can even be made mandatory as part of the landing zone. These are great features. And there's a single pane of glass for the entire account."

More AWS Security Hub pros

"The vulnerability management does not require network scanning or agent technology, so I don't need to modify any of my products in order to do vulnerability assessments."

"I recommend Orca Security to others looking for a cloud security solution due to its seamless integration and side-scanning technology that does not hamper cloud asset performance."

"The best features of Orca Security include its ability to perform a lot of security controls without requiring any installation of agents, making it very easy to set up."

"One of the valuable features of Orca Security is its design and options that allow flexible filtering and user-friendly visualization."

"The visibility Orca provides into my environment is at the highest level... When I dropped them into the environment, from the very get-go I had more insight into the risks in my environment than I had had during the entire two and a half years I had been here."

"I find Orca Security's CIEM feature invaluable, as it focuses on entitlement and posture management, identifying assets with older OS versions, and asset misconfiguration."

"Orca's SideScanning is the biggest feature. It's the 'wow' factor... With Orca's SideScanning, they just need permissions for your account and that makes it so simple."

"The GUI features are very good. Threat intelligence is also very good."

More Orca Security pros

Cons

"The telemetry doesn't always go into the control center. When you have multiple instances running in AWS, you need a control tower to take feeds from Security Hub and analyze your results. Sometimes exemptions aren't passed between the control tower and Security Hub. The configuration gets mixed up or you don't get the desired results."

"The solution will only give you insight if you have configure rule enabled. It should work more like Prisma Cloud and Dome9 which have a better approach."

"Many findings are too generic or irrelevant to the environment, which can lead to false positives."

"There is room for improvement in implementing AI capabilities."

"The user interface, graphs, and dashboards of the solution could improve in the future. They are not very sophisticated and could use an update."

"From an improvement perspective, there is a need to add more compliance since, right now, AWS Security Hub only provides four to five compliances to control the tool."

"Shortening the response time for support tickets, particularly in production issues, could make the service more efficient."

"One aspect that could be improved in the solution is its adaptability to different markets and geopolitical restrictions. In certain regions like Thailand, specific services from certain countries or providers, such as AWS or Azure, might be limited or blocked. It also needs improvement in would require configuring the solution more adaptable to AWS infrastructure and function."

More AWS Security Hub cons

"Orca Security could improve its ticket creation process. Currently, it allows for creating tickets in only one bucket, which requires monitoring to redirect tickets to the appropriate team."

"We are PCI DSS compliant, so we need to scan our environment externally with tools vetted by the PCI DSS organization. Orca doesn't scan the environment externally. It only scans what's currently in the cloud."

"I think Orca could give me more alerts. It could give me a dashboard with all the specific types of alerts I want to see for the day. It should just be one click."

"The interface can be a bit cranky and sometimes takes a lot of time to load."

"As with all software, the user interface can always be made simpler to use. It would be helpful for people with very little knowledge, like somebody sitting behind the SOC, to allow them to be able to drill down into things a little bit easier than it is currently."

"I would be happy if they offered more automatic remediation options. They're working on that, but the more the better. For example, if they want you to harden a server, they would offer a hardening script that would be more aware of what's going on."

"A notable limitation with Orca Security is its scanning feature. The automatic scan only runs every 24 hours, and if an alert is remediated within an hour, it still remains until the next scheduled scan."

"Orca Security can be improved as there should be some kind of central pane of glass. Similar to how cloud management works, Orca Security should have something comparable."

More Orca Security cons

Pricing and Cost Advice

"AWS Security Hub's pricing is pretty reasonable."

"The pricing is fine. It is not an expensive tool."

"The price of AWS Security Hub is average compared to other solutions."

"There are multiple subscription models, like yearly, monthly, and packaged."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"The price of the solution is not very competitive but it is reasonable."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"Security Hub is not an expensive solution."

"Orca is very competitive when compared to the alternatives and is not the most expensive in the market, that's for sure."

"The pricing depends on how many assets you have running in your cloud and how many environments you have. If you have a dev environment, test environment, and a production environment then it's really important that you have coverage for all of them."

"The price is a bit expensive for smaller organizations."

"Orca Security is cheaper compared to other solutions in the same space."

"We have a total of 25 licenses for this solution. The solution is on a pay-and-you-use model."

"Its license is a bit expensive."

"I think their pricing model is aligned with market demand. Of course, Orca could probably better align their pricing model with the needs of smaller businesses as well as some larger-scale enterprises with millions of assets. But in all fairness, I think the Orca sales team has been accommodating and ensured that we're happy with the pricing."

"Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."

More Orca Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

872,655 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at Bell

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

12%

Manufacturing Company

10%

Government

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

10%

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	5
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	7
Large Enterprise	5

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...

What do you like most about AWS Security Hub?

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.

What needs improvement with AWS Security Hub?

What do you like most about Orca Security?

It's for protection. It's an agentless tool. We don't need to install anything at a customer's premises. We can just scan the entire assets in the cloud.

What needs improvement with Orca Security?

I really love the way Orca Security worked. A potential improvement could be additional security features for the two-step authentication, such as fingerprint recognition similar to what Checkpoint...

What is your primary use case for Orca Security?

We used Orca Security ( /products/orca-security-reviews ) for about two to three months until I left the company. The product itself is really good. It helped us streamline the way we access our se...

Microsoft Sentinel vs AWS Security Hub

Comparisons

Compared 37% of the time

Wiz vs AWS Security Hub

Compared 11% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 7% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 5% of the time

Datadog vs AWS Security Hub

Compared 2% of the time

More AWS Security Hub Competitors

Wiz vs Orca Security

Compared 28% of the time

Microsoft Defender for Cloud vs Orca Security

Compared 8% of the time

Upwind vs Orca Security

Compared 5% of the time

Prisma Cloud by Palo Alto Networks vs Orca Security

Compared 5% of the time

CrowdStrike Falcon Cloud Security vs Orca Security

Compared 3% of the time

More Orca Security Competitors

Product Reports

Download AWS Security Hub product report

AWS Security Hub

October 2025

Download Orca Security product report

October 2025

Also Known As

SQRRL

No data available

Overview

AWS Security Hub is a comprehensive security service that provides a centralized view of security alerts and compliance status across an AWS environment. It collects data from various AWS services, partner solutions, and AWS Marketplace products to provide a holistic view of security posture. With Security Hub, users can quickly identify and prioritize security issues, automate compliance checks, and streamline remediation efforts.

The service offers a range of features including continuous monitoring, threat intelligence integration, and customizable dashboards. It also provides automated insights and recommendations to help users improve their security posture. Security Hub integrates with other AWS services like Amazon GuardDuty, AWS Config, and AWS Macie to provide a unified security experience. Additionally, it supports integration with third-party security tools through its API, allowing users to leverage their existing security investments.

With its user-friendly interface and powerful capabilities, AWS Security Hub is a valuable tool for organizations looking to enhance their security and compliance posture in the cloud.

Amazon Web Services (AWS)

Orca Security provides comprehensive security management with agentless visibility and SideScanning technology, ensuring efficient threat detection without performance impact.

Orca Security offers agentless visibility across multi-cloud environments, streamlining security management with features like SideScanning technology and centralized security tools. It focuses on automation, vulnerability management, and compliance checks, enhancing a company's security posture with real-time alerts and integrated threat detection. Its intuitive interface prioritizes critical issues, making it suitable for managing DevSecOps processes efficiently.

What are the key features of Orca Security?

Agentless Visibility: Gain comprehensive insights into cloud environments without deploying agents.
SideScanning Technology: Detect threats and vulnerabilities efficiently across platforms.
Comprehensive Security Management: Centralizes security across AWS, GCP, and Azure with minimal setup effort.
CIEM Feature: Enhances security posture with integrated identity and access management.
Real-Time Alerts: Provide immediate awareness of security threats and vulnerabilities.
Automation and Compliance: Streamline processes with automated vulnerability management and compliance checks.

What benefits and ROI should companies look for in Orca Security?

Centralized Management: Simplifies security operations by consolidating tools across cloud environments.
Improved Security Posture: Reduces alerts and manages threats effectively with detailed insights.
Efficient Threat Detection: Enhances response capabilities with integrated threat detection and real-time alerts.
Easy Deployment and Setup: Facilitates quick implementation without complex configurations.
Enhanced Integration: Supports seamless integration with existing security frameworks and processes.

Companies in industries such as finance, healthcare, and technology leverage Orca Security for cloud security posture management, ensuring compliance with standards and securing applications and databases. Its agentless approach provides comprehensive visibility across AWS, GCP, and Azure, enhancing risk assessment and vulnerability management without impacting asset performance.

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com

BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino