


Orca Security and Microsoft Defender for Cloud are key players in the cloud security domain. While both offer robust features, Orca’s agentless architecture and comprehensive risk prioritization give it a slight edge in terms of immediate operational efficiency and integration.
Features: Orca Security is noted for its agentless deployment, offering side-scanning technology to cover vulnerabilities, compliance issues, and prioritize risks without installing agents. It enables a full view of cloud environments, integrating seamlessly with CI/CD pipelines. Microsoft Defender for Cloud benefits from deep integration with the Microsoft ecosystem, providing multi-cloud security management with emphasis on robust threat detection and compliance, integrating effectively with tools like Microsoft Sentinel for centralized monitoring.
Room for Improvement: Orca Security could improve by offering more granular alert management, enhancing integration with a wider range of security tools, and delivering more intuitive dashboards. Microsoft Defender for Cloud might refine its alert prioritization, enhance real-time threat response, and reduce false positives, while also working on interface consistency across platforms.
Ease of Deployment and Customer Service: Orca Security's agentless approach simplifies deployment primarily in public clouds, though customer support feedback is mixed but generally seen as responsive. Microsoft Defender for Cloud is implemented across public, hybrid, and private clouds, benefiting from its comprehensive integration capabilities; however, complexity in subscription models can pose challenges, despite robust Microsoft support structures.
Pricing and ROI: Orca Security is viewed as cost-effective, yielding significant ROI through improved visibility and operational cost reduction. Its immediate time-to-value is well-regarded. Microsoft Defender for Cloud is competitively priced within the enterprise realm but can be costly when expanded across numerous resources. Its complex pricing structure is balanced by deep integration within the Microsoft ecosystem, potentially offering high value depending on existing infrastructure investments.
We are able to scan all our assets with less human intervention and achieve overall effective outcomes.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
Defender proactively indexes and analyzes documents, identifying potential threats even when inactive, enhancing preventative security.
Identifying potential vulnerabilities has helped us avoid costly data losses.
Compared to not having Microsoft Defender for Cloud in place, we definitely saw an advantage by not having downtime due to a security threat.
Orca Security significantly improved our visibility from 30% to 100%, enabling better security posture improvements rather than just general cost savings.
This is because you do not need a team of five persons to install and update the agents in thousands of servers.
I see the benefits of Orca Security immediately because you can see the issues right after deployment, and you can correct the critical issues, so the proof of value is immediate.
On a scale from one to ten, I would rate customer support a ten.
A more efficient solution would be to provide instant call options with engineers, comparable to features offered by other tools.
The technical support from Qualys is excellent, always available 24/7 for any urgent needs.
Since security is critical, we prefer a quicker response time.
The support team was very responsive to queries.
They understand their product, but much like us, they struggle with the finer details, especially with new features.
I would rate the quality of support as nine stars out of ten due to their quick and helpful responses.
The expertise levels could be improved.
The support team assists with issues and provides information on new updates.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
I would rate its scalability a ten out of ten.
The scalability of Qualys TotalCloud is excellent, and I would rate it as ten out of ten.
As we have reduced our on-premises infrastructure, it is about how we can migrate workloads to the cloud to make it easier, and then having everything fully encompassed and secured within that area makes it much easier for us to scale as needed and grow.
We are using infrastructure as a code, so we do not have any scalability issues with Microsoft Defender for Cloud implementation because our cloud automatically does it.
It has multiple licenses and features, covering infrastructures from a hundred to five hundred virtual machines, without any issues.
Orca Security provides a highly scalable architecture for us.
The main limitation was that the findings were often siloed because they are different platforms.
When you onboard an organization, Orca will find new projects, folders, and resources without any additional effort required.
It has a lot of scanning mechanisms, which are agentless APIs, eBPF, and cloud agents, that are highly reliable.
It is a stable solution, which is why we chose it.
It offers 99.9 percent uptime.
Defender's stability has been flawless for us.
I have not experienced any crashes or downtime.
Microsoft Defender for Cloud is very stable.
When I need any support, it's very fast to get an answer from the support team.
The agentless part of it and the fact that it integrates directly with a cloud provider such as AWS helps to reduce operational overhead and potential points of failure that come with managing agents across multiple systems.
I personally have not encountered any bugs or issues with the console.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
If we find a critical or high vulnerability on an IP or server, the remediation steps should be communicated clearly.
Microsoft, in general, could significantly improve its communication and support.
It would be beneficial to streamline recommendations to avoid unnecessary alerts and to refine the severity of alerts based on specific environments or environmental attributes.
The artificial intelligence features could be expanded to allow the system to autonomously manage security issues without needing intervention from admins.
Another improvement is in handling alerts for multiple files with the same CVE; it should provide an option to manage each file separately without affecting others.
Orca Security could improve in reporting OS package vulnerabilities, such as missing MS patches or Linux patches.
Security in today's age is important, and if a company can afford it, they should get it as it's the most valuable protection against threats.
In our case, replacing the tool will give us better functionalities without increasing the cost compared to what we pay today for the competitor.
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
Qualys TotalCloud offers good pricing that is affordable and competitive with the market.
Security has essentially no cost when compared to the cost of a breach.
Every time we consider expanding usage, we carefully evaluate the necessity due to cost concerns.
We appreciate the licensing approach based on employee count rather than a big enterprise license.
The initial price seemed high, however, after negotiation, the final price was ideal.
Orca Security's pricing is known to be a bit high.
Its license is a bit expensive.
FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans.
This user-friendly platform provides a comprehensive inventory of all assets and allows for customized policy and control design.
Deploying a single agent provides comprehensive visibility across various cloud aspects, including workload protection, security posture management, and container security.
The most valuable feature for me is the variety of APIs available.
This feature significantly aids in threat detection and enhances the user experience by streamlining security management.
The most valuable feature is the recommendations provided on how to improve security.
Additionally, it covers a large scope of vulnerabilities, CVEs, malware, and misconfiguration.
It provided us with visibility from a central point, increasing our view from the previous thirty percent to a full one hundred percent of our cloud environment.
This technology allows for coverage of almost all cloud assets without interrupting their operations.
| Product | Mindshare (%) |
|---|---|
| Orca Security | 6.1% |
| Microsoft Defender for Cloud | 6.5% |
| Qualys TotalCloud | 2.4% |
| Other | 85.0% |

| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 11 |
| Large Enterprise | 38 |
| Company Size | Count |
|---|---|
| Small Business | 31 |
| Midsize Enterprise | 12 |
| Large Enterprise | 49 |
| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 9 |
| Large Enterprise | 16 |
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
Microsoft Defender for Cloud is a comprehensive security platform offering integration with Microsoft services, multi-cloud capability, AI-driven threat detection, compliance, and unified visibility for improved security operations.
Microsoft Defender for Cloud manages security operations by integrating with Microsoft services and supporting multi-cloud environments. Its features include AI-driven threat detection, compliance oversight, and advanced threat protection. It simplifies processes with unified visibility, threat intelligence, and automated workflows, enhancing security posture across various workloads. Despite its robust capabilities, improvements are needed in third-party tool integration, comprehensive AI-driven remediation, and a more intuitive dashboard. Users report complexity in licensing, inadequate documentation, and high costs, with room for enhancements in compliance reporting and multi-cloud support.
What are the key features of Microsoft Defender for Cloud?
What benefits and ROI can users expect?
Organizations use Microsoft Defender for Cloud to secure applications from code to runtime across Azure, AWS, Google Cloud, and on-premises environments. Security teams use it to manage cloud security posture, protect servers, containers, and AI workloads, and investigate threats in the Microsoft Defender portal. It provides comprehensive security overviews by monitoring cloud vulnerabilities, limiting unauthorized access, and replacing existing tools with its extensive capabilities from network security to compliance checks, securing Azure infrastructure, and enhancing client security.
Orca Security provides comprehensive security management with agentless visibility and SideScanning technology, ensuring efficient threat detection without performance impact.
Orca Security offers agentless visibility across multi-cloud environments, streamlining security management with features like SideScanning technology and centralized security tools. It focuses on automation, vulnerability management, and compliance checks, enhancing a company's security posture with real-time alerts and integrated threat detection. Its intuitive interface prioritizes critical issues, making it suitable for managing DevSecOps processes efficiently.
What are the key features of Orca Security?
What benefits and ROI should companies look for in Orca Security?
Companies in industries such as finance, healthcare, and technology leverage Orca Security for cloud security posture management, ensuring compliance with standards and securing applications and databases. Its agentless approach provides comprehensive visibility across AWS, GCP, and Azure, enhancing risk assessment and vulnerability management without impacting asset performance.
We monitor all Cloud-Native Application Protection Platforms (CNAPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.