No more typing reviews! Try our Samantha, our new voice AI agent.

Orca Security vs Reco comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Orca Security
Average Rating
8.8
Reviews Sentiment
7.0
Number of Reviews
41
Ranking in other categories
Vulnerability Management (8th), Container Security (8th), Cloud Workload Protection Platforms (CWPP) (6th), API Security (2nd), Cloud Security Posture Management (CSPM) (7th), Cloud-Native Application Protection Platforms (CNAPP) (6th), Data Security Posture Management (DSPM) (7th), Cloud Detection and Response (CDR) (2nd), AI Security (1st)
Reco
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Nykole Denoo - PeerSpot reviewer
Cyber Security Analyst at BNY
Cloud risk visibility has transformed how I prioritize threats and reduce unnecessary spend
From my perspective, Orca Security is a really good tool. I would say one area I would like to see CNAPP platforms get is more intelligence when it comes to risk prioritization, which correlates with vulnerability, exposing assets, identities, and active threats to help the security team focus on risks that are more likely to be exploited. I am a huge advocate for automation. I also think deeper automation for remediation or stronger integration with ticketing and CI/CD pipelines or more customization would help. Executive reporting would help the security team respond significantly faster and communicate risk more effectively if those kinds of improvements are made.
reviewer2817672 - PeerSpot reviewer
Gerente De Arquitectura De Ciberseguridad at a financial services firm with 5,001-10,000 employees
Security posture management has provided clear SaaS and AI agent risk visibility and alerts
I am not using the inclusion of LLMs in the knowledge graph yet; to be honest, I see that it's showing things, but until now, I don't see big value on that. Apart from the integration with Copilot Studio that I mentioned, I would like to see more posture security controls added in some SaaS applications; I see a few of them, but it could have more. I would like to see real-time detection in prompts included to Reco in the next releases, maybe in Copilot Studio to see if I have any attack or prompt injection or whatever in Copilot Studio and all the agent platforms to inspect those prompts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"With its Cloud Security Posture Management capability, we have the ability to read across all of our cloud-based environments, which includes AWS and Azure. We have visibility into those environments. Seeing all vulnerabilities and configurations is really powerful for us, but ultimately, the ability to use the API to query across the fleet to understand what is the current state, what is the patch level, which ones are potentially exposed for a new CVE that just came out is even more valuable. It allows us to gather really specific intelligence through simple queries."
"Orca's SideScanning is the biggest feature. It's the 'wow' factor... With Orca's SideScanning, they just need permissions for your account and that makes it so simple."
"Orca provides X-ray vision into everything within the cloud properties, whereas normally, this would require multiple tools."
"I appreciate Orca Security because I can see CSPM, KSPM, and DSPM, and it works with major security frameworks such as NIST and CIS, allowing me to see comprehensive insights on my cloud environment, with CI/CD integration and shift-left configuration that helps me improve cloud maturity and DevSecOps maturity as a complete CNAPP platform with the most capabilities to work with cloud security."
"Orca Security has updated its interface, making it more user-friendly. I find it particularly useful as it allows me to easily navigate the dashboard and prioritize actions based on severity and criticality."
"We really enjoy using Orca; it's a very well-designed, well-executed product, I'm really super-impressed, this is a game-changer."
"OrcA Security improved our collaboration because we could explain better to everyone at the company what we were doing and how it positively impacts our security posture."
"It covers our entire multi-cloud environment in a single view and tells us everything we need to know about our vulnerability footprint."
"What I like about Reco is that it's pretty easy to integrate with the applications; it's almost plug and play."
"What I appreciated most about Reco was its strong detection capability."
 

Cons

"In two implementation projects that I participated in, the customers reported difficulty with the options for generating specific reports."
"A notable limitation with Orca Security is its scanning feature. The automatic scan only runs every 24 hours, and if an alert is remediated within an hour, it still remains until the next scheduled scan."
"In the future, I'd like to see Orca work better with third-party vendors. Specifically, being able to provide sanitized results from third parties."
"There were a couple of times when Orca was down when I was trying to access it."
"Some visualizations and dashboards in Orca Security were not as clear to me; even though I can edit and modify them as much as I prefer, the dashboards that came with the application were not ideal."
"We are PCI DSS compliant, so we need to scan our environment externally with tools vetted by the PCI DSS organization. Orca doesn't scan the environment externally. It only scans what's currently in the cloud."
"A few things could potentially be improved, particularly regarding false positives and the UI."
"The timeout settings could be made more customizable, as sometimes if I leave the office early, it's still running unless manually turned off."
"To be honest, I see that it's showing things, but until now, I don't see big value on that."
"What I disliked about Reco was that it sometimes produced a lot of false positives."
 

Pricing and Cost Advice

"The pricing depends on how many assets you have running in your cloud and how many environments you have. If you have a dev environment, test environment, and a production environment then it's really important that you have coverage for all of them."
"Orca Security is cheaper compared to other solutions in the same space."
"Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."
"The price is a bit expensive for smaller organizations."
"I think their pricing model is aligned with market demand. Of course, Orca could probably better align their pricing model with the needs of smaller businesses as well as some larger-scale enterprises with millions of assets. But in all fairness, I think the Orca sales team has been accommodating and ensured that we're happy with the pricing."
"We have a total of 25 licenses for this solution. The solution is on a pay-and-you-use model."
"Its license is a bit expensive."
"It is the cost of the visibility that you get. When you really sit down and think about what do you need to do to secure an environment with a low impact on the business, and you take a look out into the world, I think this tool is well justified around cost."
Information not available
report
Use our free recommendation engine to learn which AI Security solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
11%
Manufacturing Company
10%
Outsourcing Company
7%
Outsourcing Company
30%
Construction Company
16%
Manufacturing Company
14%
Wholesaler/Distributor
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise9
Large Enterprise16
No data available
 

Questions from the Community

What needs improvement with Orca Security?
Regarding how Orca Security can be improved, I think there is not much; it is fully completed and it is great.
What is your primary use case for Orca Security?
My main use case for Orca Security is to secure infrastructure, course, and service. A specific example of how I use Orca Security to secure my infrastructure or services is for vulnerability manag...
What advice do you have for others considering Orca Security?
My advice to others looking into using Orca Security is to practice and study the platform in test scenarios. My impressions of the risk detection and identification capabilities of Orca Security a...
What is your experience regarding pricing and costs for Reco?
My experience with the pricing was reasonable; it was okay for the features and what the product provides. The contract, the negotiation, and everything were okay.
What needs improvement with Reco?
I am not using the inclusion of LLMs in the knowledge graph yet; to be honest, I see that it's showing things, but until now, I don't see big value on that. Apart from the integration with Copilot ...
What is your primary use case for Reco?
I implemented Reco for cybersecurity posture management for SaaS applications, and also for AI agents posture, so SaaS security posture management and agent posture management. I am using Reco for ...
 

Comparisons

 

Overview

 

Sample Customers

BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino
Information Not Available
Find out what your peers are saying about Orca Security, TrendAI, Checkmarx and others in AI Security. Updated: July 2026.
909,725 professionals have used our research since 2012.