Immuta vs Orca Security comparison

Immuta and Orca Security are both solutions in the Data Security Posture Management (DSPM) category. Immuta is ranked #15 with an average rating of 8.0, while Orca Security is ranked #7 with an average rating of 8.6. Additionally, 100% of Immuta users are willing to recommend the solution, compared to 100% of Orca Security users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Orca Security and Immuta are key competitors in the cybersecurity and data governance fields. Orca Security seems to have an advantage due to its competitive pricing and straight forward cloud deployments, while Immuta is preferred for its comprehensive features and long-term ROI.

Features: Orca Security is noted for threat detection, vulnerability management, and comprehensive cloud security capabilities. Immuta stands out with its strong data access control, privacy management, and features aligned with complex data privacy needs.

Room for Improvement: Orca Security users suggest enhancing integrations with on-premises systems, reporting capabilities, and hybrid environment support. Immuta users recommend better user management tools, intuitive configuration processes, and overall user process enhancements.

Ease of Deployment and Customer Service: Orca Security is recognized for straightforward cloud-based deployment and responsive customer service, enhancing user satisfaction. Immuta, though more complex in deployment due to its robust features, offers proactive support that is highly valued.

Pricing and ROI: Orca Security is competitively priced, providing good value and ROI in straightforward cloud deployments. Immuta's pricing is higher, yet it provides extensive capabilities and potential for ROI in complex data environments, delivering long-term value.

To learn more, read our detailed Immuta vs. Orca Security Report (Updated: June 2026).

Buyer's Guide

Immuta vs. Orca Security

June 2026

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

Dibyajyoti Rath

Data Analyst at a consultancy with 10,001+ employees

Centralized access control has secured sensitive data and supports compliant self-service analytics

Immuta is very helpful, but it can be improved in a few areas. The initial setup and policy design can be complex and require a learning curve. The user interface could be more interactive, especially for non-technical users. Policy troubleshooting and debugging could be easier with better visibility into why access was allowed or denied. Performance optimization and deeper integration with more tools could make it even better. Additional improvements would strengthen Immuta further. The documentation and real-world examples would help teams onboard faster. More out-of-the-box policy templates could reduce setup time. Improved policy simulation and testing would help teams understand the impact of changes before applying them. Stronger alerting and monitoring features would help quickly identify access issues. Finally, more end-user training and simplified workflows would make it easier for business users to adopt.

Read full review

Nykole Denoo

Cyber Security Analyst at BNY

Cloud risk visibility has transformed how I prioritize threats and reduce unnecessary spend

From my perspective, Orca Security is a really good tool. I would say one area I would like to see CNAPP platforms get is more intelligence when it comes to risk prioritization, which correlates with vulnerability, exposing assets, identities, and active threats to help the security team focus on risks that are more likely to be exploited. I am a huge advocate for automation. I also think deeper automation for remediation or stronger integration with ticketing and CI/CD pipelines or more customization would help. Executive reporting would help the security team respond significantly faster and communicate risk more effectively if those kinds of improvements are made.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is a cloud-native app that integrates with both IaaS and SaaS. It seamlessly integrates with other platforms."

"Qualys TotalCloud has significantly reduced our workload in terms of managing risks, helping us to be more efficient and save substantial resources."

"In my opinion, this is the best tool."

"Once you have your vulnerabilities fixed and your patches pushed out using Qualys TotalCloud, then you are able to eliminate threats and cyber risk."

"If someone were to ask me to review Qualys TotalCloud, I would summarize it as an end-to-end solution for cloud security with visibility and governance-grade controls without needing to manage multiple disconnected tools."

"The vulnerability management feature is the one I like the most because it provides a clear picture of all vulnerabilities."

"Qualys TotalCloud's most valuable features are its security capabilities that help identify and mitigate risk factors."

"Its excellent graphical interface makes the scanning process simple."

More Qualys TotalCloud pros

"What I appreciate the most is its user-friendliness."

"Immuta has had a very positive impact on our organization, helping us strengthen data security by ensuring sensitive data is only accessible to the right users, simplifying compliance with clear audit trails and consistent policy enforcement, reducing manual access management to save time for data and security teams, and enabling safe self-service analytics so our team can access data faster while still meeting governance and regulatory requirements."

"All features available are good."

"Instead of manually tagging data, Immuta’s auto-discovery capability identifies sensitive information, such as country labels, gender information, and other personal data."

"The tool's most valuable feature is restriction."

"With the way it works, having visibility across the org is hands down the biggest benefit for us."

"The vulnerability management does not require network scanning or agent technology, so I don't need to modify any of my products in order to do vulnerability assessments."

"Orca Security has updated its interface, making it more user-friendly. I find it particularly useful as it allows me to easily navigate the dashboard and prioritize actions based on severity and criticality."

"Orca Security has helped my organization reduce the time it takes to address cloud security alerts; since bringing Orca Security in, it has improved our time to resolve by about fifty percent."

"Overall, I'm thoroughly impressed with this product, which is the best way I can put it."

"One of the valuable features of Orca Security is its design and options that allow flexible filtering and user-friendly visualization."

"The most valuable feature of Orca Security is the automated scanning tool, user-friendliness, and ease of use."

"With Orca, I feel confident that I have full coverage of all of my resources."

More Orca Security pros

Cons

"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."

"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."

"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."

"From a downside perspective, the UI is not user-friendly and feels dated compared to other tools like Prisma Cloud."

"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."

"TotalCloud could improve the classification of vulnerabilities. Specifically, it could enhance the categorization of what aspects fall under patches resolved by OS or software updates and what pertains to configuration adjustments."

"TotalCloud could improve its scanning of niche devices like Wi-Fi dongles and USB modems because they are often untested. It covers everything else, like laptops, mobile devices, and Bluetooth IoT devices. They can improve on the small IoT devices because hackers and testers use these."

"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."

More Qualys TotalCloud cons

"The implementation process with Immuta was quite challenging, primarily due to issues related to database handling and the syncing of user groups."

"There is room for improvement in enhancing the monitoring capabilities."

"Immuta is very helpful, but it can be improved in a few areas."

"Immuta is behind in updating upgrades and software releases."

"We have had some challenges with their support when we were migrating to the cloud version. We we had some issues, and it took us several attempts to get a proper responses as part of that migration."

"I believe they need more time developing this solution, which means they need to be more comprehensive and extended in their approach."

"The timeout settings could be made more customizable, as sometimes if I leave the office early, it's still running unless manually turned off."

"I would like to see an option to do security checks on a code level. This is possible because they have access to all of the code running in the cloud provider, and combining their site-scanning solution with that would be a nice add-on."

"A few things could potentially be improved, particularly regarding false positives and the UI."

"Some dashboards could be a little more personalized for each company and have more options to show the real data we need for our leadership."

"I have concerns about OCI support. When I work with Orca Security, the support for OCI is limited, so I cannot effectively work with the OCI environment."

"There is one issue that I encountered: when Orca Security provides CVEs and we attempt to implement its solutions, sometimes those solutions are not available on the cloud and cannot be implemented."

"We are PCI DSS compliant, so we need to scan our environment externally with tools vetted by the PCI DSS organization. Orca doesn't scan the environment externally. It only scans what's currently in the cloud."

More Orca Security cons

Pricing and Cost Advice

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

"Qualys TotalCloud is expensive."

"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"The cost is high, but it meets our organizational needs."

"TotalCloud's price is about right where I would expect it to be."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

More Qualys TotalCloud pricing and cost advice

"Immuta's pricing is expensive."

"I think their pricing model is aligned with market demand. Of course, Orca could probably better align their pricing model with the needs of smaller businesses as well as some larger-scale enterprises with millions of assets. But in all fairness, I think the Orca sales team has been accommodating and ensured that we're happy with the pricing."

"It is the cost of the visibility that you get. When you really sit down and think about what do you need to do to secure an environment with a low impact on the business, and you take a look out into the world, I think this tool is well justified around cost."

"Its license is a bit expensive."

"Orca is very competitive when compared to the alternatives and is not the most expensive in the market, that's for sure."

"Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."

"The pricing depends on how many assets you have running in your cloud and how many environments you have. If you have a dev environment, test environment, and a production environment then it's really important that you have coverage for all of them."

"The most expensive solution is Palo Alto. They claim to be very robust. The next most expensive is Wiz, followed by Orca and all the rest."

"Orca Security is cheaper compared to other solutions in the same space."

More Orca Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Data Security Posture Management (DSPM) solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

13%

Comms Service Provider

11%

Outsourcing Company

11%

Financial Services Firm

10%

Financial Services Firm

19%

Construction Company

11%

Manufacturing Company

10%

Computer Software Company

Financial Services Firm

14%

Computer Software Company

11%

Manufacturing Company

10%

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	5
Large Enterprise	31

No data available

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	9
Large Enterprise	16

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

See all answers

What needs improvement with Qualys TotalCloud?

To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...

See all answers

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...

See all answers

What needs improvement with Immuta?

Immuta is very helpful, but it can be improved in a few areas. The initial setup and policy design can be complex and...

See all answers

What is your primary use case for Immuta?

My main use case for Immuta is data governance. In my project, which is a data governance project, I use Immuta as a ...

See all answers

What advice do you have for others considering Immuta?

My advice for others considering Immuta would be to plan your policies carefully. Think through roles, data sensitivi...

See all answers

What needs improvement with Orca Security?

Regarding how Orca Security can be improved, I think there is not much; it is fully completed and it is great.

See all answers

What is your primary use case for Orca Security?

My main use case for Orca Security is to secure infrastructure, course, and service. A specific example of how I use ...

See all answers

What advice do you have for others considering Orca Security?

My advice to others looking into using Orca Security is to practice and study the platform in test scenarios. My impr...

See all answers

Comparisons

Wiz vs Qualys TotalCloud

Compared 10% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 8% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

Nucleus Security vs Qualys TotalCloud

Compared 4% of the time

More Qualys TotalCloud Competitors

Satori vs Immuta

Compared 15% of the time

Privacera vs Immuta

Compared 10% of the time

SecuPi Data Security Platform vs Immuta

Compared 9% of the time

BigID Next vs Immuta

Compared 8% of the time

Protegrity’s Data Protection Platform vs Immuta

Compared 8% of the time

More Immuta Competitors

Wiz vs Orca Security

Compared 8% of the time

Upwind vs Orca Security

Compared 5% of the time

Microsoft Defender for Cloud vs Orca Security

Compared 4% of the time

Prisma Cloud by Palo Alto Networks vs Orca Security

Compared 4% of the time

Checkmarx One vs Orca Security

Compared 3% of the time

More Orca Security Competitors

Product Reports

Buyer's Guide

Qualys TotalCloud

August 2026

Download Qualys TotalCloud product report

Buyer's Guide

Data Governance

August 2026

Download Immuta product report

Buyer's Guide

Orca Security

August 2026

Download Orca Security product report

Also Known As

Qualys TotalCloud with FlexScan

No data available

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Immuta ensures secure, controlled access to sensitive data, excelling in data governance, regulatory compliance, and privacy. Key features include dynamic policy enforcement, fine-grained access control, and seamless integration with diverse data sources. Users report improved operational efficiency and enhanced teamwork.

Immuta

Orca Security provides comprehensive security management with agentless visibility and SideScanning technology, ensuring efficient threat detection without performance impact.

Orca Security offers agentless visibility across multi-cloud environments, streamlining security management with features like SideScanning technology and centralized security tools. It focuses on automation, vulnerability management, and compliance checks, enhancing a company's security posture with real-time alerts and integrated threat detection. Its intuitive interface prioritizes critical issues, making it suitable for managing DevSecOps processes efficiently.

What are the key features of Orca Security?

Agentless Visibility: Gain comprehensive insights into cloud environments without deploying agents.
SideScanning Technology: Detect threats and vulnerabilities efficiently across platforms.
Comprehensive Security Management: Centralizes security across AWS, GCP, and Azure with minimal setup effort.
CIEM Feature: Enhances security posture with integrated identity and access management.
Real-Time Alerts: Provide immediate awareness of security threats and vulnerabilities.
Automation and Compliance: Streamline processes with automated vulnerability management and compliance checks.

What benefits and ROI should companies look for in Orca Security?

Centralized Management: Simplifies security operations by consolidating tools across cloud environments.
Improved Security Posture: Reduces alerts and manages threats effectively with detailed insights.
Efficient Threat Detection: Enhances response capabilities with integrated threat detection and real-time alerts.
Easy Deployment and Setup: Facilitates quick implementation without complex configurations.
Enhanced Integration: Supports seamless integration with existing security frameworks and processes.

Companies in industries such as finance, healthcare, and technology leverage Orca Security for cloud security posture management, ensuring compliance with standards and securing applications and databases. Its agentless approach provides comprehensive visibility across AWS, GCP, and Azure, enhancing risk assessment and vulnerability management without impacting asset performance.

Orca Security

Sample Customers

Information Not Available

BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino

Buyer's Guide

Immuta vs. Orca Security

June 2026

Free Report: Immuta vs. Orca Security

Find out what your peers are saying about Immuta vs. Orca Security and other solutions. Updated: June 2026.

DOWNLOAD NOW

909,725 professionals have used our research since 2012.

See our Immuta vs. Orca Security report.

See our list of best Data Security Posture Management (DSPM) vendors.

We monitor all Data Security Posture Management (DSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.