No more typing reviews! Try our Samantha, our new voice AI agent.

Fortinet FortiDB [EOL] vs Orca Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiDB [EOL]
Average Rating
8.2
Number of Reviews
7
Ranking in other categories
No ranking in other categories
Orca Security
Average Rating
8.8
Reviews Sentiment
6.9
Number of Reviews
33
Ranking in other categories
Vulnerability Management (10th), Container Security (8th), Cloud Workload Protection Platforms (CWPP) (5th), API Security (3rd), Cloud Security Posture Management (CSPM) (7th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (7th), Cloud Detection and Response (CDR) (2nd), AI Security (3rd)
 

Featured Reviews

VC
CEO & Technical Head Executive at ChellSoft Technologies
Stable with a good interface and excellent technical support
The solution overall is good. All of the features are useful and working well for us. The technical support provided is excellent. The solution is very good at preventing intrusions. You can definitely rely on this solution to cover your security. The pricing of the solution is fair. The interface of the solution is quite stable.
reviewer2799597 - PeerSpot reviewer
Soc Analyst at a tech consulting company with 11-50 employees
Agentless cloud security has improved attack path visibility but still needs stronger real-time blocking
Yes, as per my experience, it has been very helpful. In our organization, we did not find any major or priority one kind of alerts or risks because we had a very good infrastructure structure and cybersecurity architecture built in our organization. Orca Security helped us find what vulnerabilities or gaps existed which we could improve within our architecture. It helped us in such a way that we used to close the open ports and only allowed internal IPs for necessity. For staging environments and for prod we had DOS protection. If network traffic showed that anybody was trying to flood our systems, we would only accept all and our client-related IPs or an approved list of vendor lists we would have. We would get to know where the gaps are and where the improvements we could make. Being an analyst class engineer, I could use my brain in those areas and it was very helpful to have Orca Security in my arsenal.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features of this solution are the security aspects."
"The biggest thing, for us lately, has been their cloud tools. They're like Intercept X from Sophos, where they'll test for ransomware. Fortinet has the same sort of set up with their cloud devices. So your firewall picks up something suspicious, it sends it up to the cloud for analysis. We also have their in-house antivirus. Having different antivirus checkpoints throughout the network is a good thing as well."
"It is a very good solution, and every day the company is updating and developing its devices."
"The dashboard is very simple. It has an easy to use interface."
"It is extremely stable, and can expand as per our needs due to its stability."
"24 x 7 database activity monitoring captures all forms of database activity to detect erroneous or malicious activity."
"When you implement FortiDB in your environment, you get the benefit of three important features: VA, Auditing and Alerting."
"The solution overall is good, all of the features are useful and working well for us, the technical support provided is excellent, the solution is very good at preventing intrusions, you can definitely rely on this solution to cover your security, the pricing of the solution is fair, and the interface of the solution is quite stable."
"The visibility Orca provides into my environment is at the highest level... When I dropped them into the environment, from the very get-go I had more insight into the risks in my environment than I had had during the entire two and a half years I had been here."
"In our opinion, Orca Sensor is the best solution available at the moment, and it significantly affects the visibility and protection of environments."
"Another valuable feature with Orca, something that's not talked about enough, is its ability to rank your gaps and your tasks... You can get visibility with agents and there are a lot of ways to do that. But the ranking and the context across the entire environment, that is what is unique about Orca."
"With Orca, I feel confident that I have full coverage of all of my resources."
"With its Cloud Security Posture Management capability, we have the ability to read across all of our cloud-based environments, which includes AWS and Azure. We have visibility into those environments. Seeing all vulnerabilities and configurations is really powerful for us, but ultimately, the ability to use the API to query across the fleet to understand what is the current state, what is the patch level, which ones are potentially exposed for a new CVE that just came out is even more valuable. It allows us to gather really specific intelligence through simple queries."
"Orca's dashboard is excellent. My team needs to be able to focus on specific areas for improvement in our cloud environment. And most recently, we've started to get good use out of sonar, the search capabilities, and the alert creation."
"Orca gives you great visibility into your assets. It shows you the issues and the things that you need to attend to first, by prioritizing things. You can see a lot of information that is not always visible, even to DevOps, to help you know about the machines and their status. It's very easy to see everything in a single dashboard. That makes it a very useful tool."
"It's for protection. It's an agentless tool. We don't need to install anything at a customer's premises. We can just scan the entire assets in the cloud."
 

Cons

"Some use case analyses could be improved."
"I would like better APIs and integration with other products, like Python and SQL."
"The pricing of this solution is a little bit on the high side and can be improved."
"They need to improve the web filter to make it more user-friendly."
"We had some issues trying to fix some critical bugs, such as the SSL encryption."
"Some use case analyses could be improved."
"I'm an old-school guy. I really don't like web GUI interfaces. They're always slow and laggy and their design is restricted, whereas a binary deployment for an admin tool is always faster, easier, more flexible. I would like that kind of functionality from Fortinet."
"I would like better APIs and integration with other products, like Python and SQL."
"They can expand a little bit in anti-malware detection."
"We are PCI DSS compliant, so we need to scan our environment externally with tools vetted by the PCI DSS organization; Orca doesn't scan the environment externally and only scans what's currently in the cloud."
"The main drawback in an agentless approach is that if the solution detects a virus or malware in the environment, we need to manually remove it. But from my experience with other production environments, it's not straightforward to install agents in the hope they will automatically remediate viruses, even from production environments... Ultimately, the ability to auto-remediate is something that I would like to see."
"Orca Security could improve its ticket creation process."
"Orca Security can be improved as it is very good at posture, but it does not detect attacks or behavioral attacks in the cloud on its own; it depends on other security features or logs like GuardDuty from Amazon, lacking its own intelligence to detect and respond to attacks."
"I experienced some problems with custom tags in Orca Security where I tried to separate the environment for business units so I could ask the tech lead responsible for that vulnerability to fix them."
"They can expand a little bit in anti-malware detection. While we have pretty good confidence that it's going to detect some of the static malware, some of the detections are heuristics. There could be a growth in the library from where they're pulling their information, but we don't get a lot of those alerts based on the design of our products. In general, that might be an area that needs to be filled since they offer it as a service within it."
"I have concerns about OCI support. When I work with Orca Security, the support for OCI is limited, so I cannot effectively work with the OCI environment."
 

Pricing and Cost Advice

"It is not expensive."
"It's relatively inexpensive in comparison to everything else that has the same functionality. If you're looking at SonicWall or if you're looking at WatchGuard, their prices are about a third higher with relatively the same functionality."
"In the licensing model, the licenses are a little bit expensive."
"It is not costly."
"The cost needs to be reduced."
"Its license is a bit expensive."
"We have a total of 25 licenses for this solution. The solution is on a pay-and-you-use model."
"Overall, the pricing is reasonable and the discounts have been acceptable."
"It is the cost of the visibility that you get. When you really sit down and think about what do you need to do to secure an environment with a low impact on the business, and you take a look out into the world, I think this tool is well justified around cost."
"The most expensive solution is Palo Alto. They claim to be very robust. The next most expensive is Wiz, followed by Orca and all the rest."
"I think their pricing model is aligned with market demand. Of course, Orca could probably better align their pricing model with the needs of smaller businesses as well as some larger-scale enterprises with millions of assets. But in all fairness, I think the Orca sales team has been accommodating and ensured that we're happy with the pricing."
"Orca is very competitive when compared to the alternatives and is not the most expensive in the market, that's for sure."
"The pricing depends on how many assets you have running in your cloud and how many environments you have. If you have a dev environment, test environment, and a production environment then it's really important that you have coverage for all of them."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
895,151 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
16%
Computer Software Company
12%
Manufacturing Company
9%
Comms Service Provider
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise4
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise8
Large Enterprise10
 

Questions from the Community

Ask a question
Earn 20 points
What needs improvement with Orca Security?
In two implementation projects that I participated in, the customers reported difficulty with the options for generating specific reports. With these same customers, we had problems importing the c...
What is your primary use case for Orca Security?
When discussing the main use case for Orca Security, I am referring to implementations for my clients. I participate in several CSPM implementations for my company, but I cannot comment much on the...
What advice do you have for others considering Orca Security?
Orca Security typically delivers three major positive changes, in my opinion: a faster understanding of risks in cloud environments, better prioritization, and less noise. Orca Security enables col...
 

Also Known As

FortiDB, FortiGuard Database Security
No data available
 

Overview

 

Sample Customers

Chunghwa Telecom
BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino
Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: May 2026.
895,151 professionals have used our research since 2012.