Try our new research platform with insights from 80,000+ expert users

Orca Security vs Veracode comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.4
Orca Security enhances cloud security and efficiency, reduces costs, and provides significant ROI through quick deployment and user-friendly features.
Sentiment score
6.5
Veracode optimizes development by automating vulnerability detection, reducing costs, improving security, compliance, and enhancing software reliability.
Orca Security significantly improved our visibility from 30% to 100%, enabling better security posture improvements rather than just general cost savings.
Cloud Security Automation Engineer at a financial services firm with 10,001+ employees
This is because you do not need a team of five persons to install and update the agents in thousands of servers.
Cybersecurity Recruitment Specialist at a tech services company with 51-200 employees
I see the benefits of Orca Security immediately because you can see the issues right after deployment, and you can correct the critical issues, so the proof of value is immediate.
Cybersecurity Architect Lead at a consultancy with 11-50 employees
The scanners of Veracode bring status of the weaknesses in the current infrastructure. It scans and provides reports regarding the servers, the network, and the applications running on those servers.
Senior Solutions Architect at IDS Comercial
Regarding price, the evaluation should focus on how efficiently they will recover their investment, considering the time saved through the use of Veracode Fix, for example, and the ability to fix code at dev time compared to the problems faced when fixing after the product is already deployed.
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
We did see a return on investment with Veracode, as we segregated our remediation efforts, which reduced our time to delivery as well as the number of engineers needed to help us in delivering a secure solution.
DevSecOps Engineer at a tech services company with 11-50 employees
 

Customer Service

Sentiment score
5.4
Orca Security's technical support is responsive and effective, though sometimes struggles with complex issues due to limited resources.
Sentiment score
7.2
Veracode's support is praised for responsiveness and expertise, though some experience delays with complex issues.
I would rate the quality of support as nine stars out of ten due to their quick and helpful responses.
Senior Information Security Engineer at a computer software company with 10,001+ employees
The expertise levels could be improved.
Cloud Security Automation Engineer at a financial services firm with 10,001+ employees
The support team assists with issues and provides information on new updates.
Vulnerability Assessment Analyst at a computer software company with 501-1,000 employees
Access to the engineering team is crucial for faster feedback on the product fix process.
Principal Architect at a consultancy with 11-50 employees
I have communicated with the technical support of Veracode a couple of times, and this was a really great experience because these professionals know their material.
Application Security Specialist at Herrenknecht
They share detailed information via email, including screenshots or further clarification about the issue.
DevSecOps Engineer at a tech services company with 1,001-5,000 employees
 

Scalability Issues

Sentiment score
7.9
Orca Security efficiently manages various cloud workloads, offering seamless integration and scaling for enterprises across major cloud platforms.
Sentiment score
7.4
Veracode offers efficient scalability with cloud architecture, supporting diverse applications and user roles across industries despite minor scan delays.
When you onboard an organization, Orca will find new projects, folders, and resources without any additional effort required.
Senior Information Security Engineer at a computer software company with 10,001+ employees
The seamless integration allows us to automatically reflect any connected project from our cloud into the console.
Vulnerability Assessment Analyst at a computer software company with 501-1,000 employees
I believe Orca Security is scalable and can handle small and medium-enterprise businesses effectively.
CTO /Director at OPLIUM
Cloud solutions are easier to scale than on-premise solutions.
Senior Solutions Architect at IDS Comercial
It has a good capacity to scale effectively.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
Implementing these features into our normal CI/CD was good, so I can say that scalability is really good.
Application Security Specialist at Herrenknecht
 

Stability Issues

Sentiment score
8.0
Orca Security is reliable and stable with high user ratings, addressing issues swiftly, and effectively handling vulnerabilities.
Sentiment score
7.8
Veracode is praised for stability and performance despite minor glitches, with continuous improvements ensuring reliability and minimal downtime.
When I need any support, it's very fast to get an answer from the support team.
Cyber Security Analyst Ii at Grupo PRIMO
I personally have not encountered any bugs or issues with the console.
Vulnerability Assessment Analyst at a computer software company with 501-1,000 employees
I have experienced very little downtime.
Works at Ultraviolet Cyber
If the Veracode server is down, we experience many issues during the scan.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
I have observed that it is not that reliable in terms of security because Veracode was not able to find some security threats in our application that existed since the product was developed.
Software Development Engineer II at Rocket Software
It's not that easy to onboard, but once they have been onboarded on the platform, and the pipeline configured alongside the product configured, it works effectively.
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
 

Room For Improvement

Orca Security users want better cloud support, faster scanning, improved automation, enhanced UI, and more comprehensive vulnerability detection.
Veracode requires improvements in reducing false positives, enhancing speed, improving integration, flexibility, support, UI, and customer service.
Another improvement is in handling alerts for multiple files with the same CVE; it should provide an option to manage each file separately without affecting others.
Senior Information Security Engineer at a computer software company with 10,001+ employees
Orca Security could improve in reporting OS package vulnerabilities, such as missing MS patches or Linux patches.
Vulnerability Assessment Analyst at a computer software company with 501-1,000 employees
Security in today's age is important, and if a company can afford it, they should get it as it's the most valuable protection against threats.
Software Developer at a tech vendor with 1,001-5,000 employees
If it could be integrated directly with code repositories such as Bitbucket or GitHub, without the need to create a pipeline to upload and decode code, it would simplify the code scan process significantly.
We had issues with scanning large applications. Scanning took a lot of time, so we kept it outside the DevOps pipeline to avoid delaying deployments.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
A nice addition would be if it could be extended for scenarios with custom cleansers.
IT App Security Senior Analyst at a transportation company with 10,001+ employees
 

Setup Cost

Orca Security offers workload-based pricing with competitive options and flexible terms, providing good value for larger enterprises.
Veracode's higher pricing offers comprehensive security for enterprises, posing challenges for smaller businesses, with negotiable licensing options.
The initial price seemed high, however, after negotiation, the final price was ideal.
Senior Information Security Engineer at a computer software company with 10,001+ employees
Orca Security's pricing is known to be a bit high.
Works at Ultraviolet Cyber
Its license is a bit expensive.
enterprise architect at a tech services company with 1-10 employees
It's not the most expensive solution.
Senior Solutions Architect at IDS Comercial
Overall, Veracode's pricing is lower and more scalable than many alternatives in the market.
DevSecOps Engineer at a tech services company with 1,001-5,000 employees
If there's a security gap, you'll never know the cost or effect.
 

Valuable Features

Orca Security provides agentless threat visibility, AI-driven vulnerability management, and seamless integration for enhanced cloud security and compliance.
Veracode offers comprehensive code analysis, seamless integration, and efficient vulnerability detection, improving security and development speed with minimal manual effort.
Additionally, it covers a large scope of vulnerabilities, CVEs, malware, and misconfiguration.
Senior Information Security Engineer at a computer software company with 10,001+ employees
It provided us with visibility from a central point, increasing our view from the previous thirty percent to a full one hundred percent of our cloud environment.
Cloud Security Automation Engineer at a financial services firm with 10,001+ employees
This technology allows for coverage of almost all cloud assets without interrupting their operations.
Vulnerability Assessment Analyst at a computer software company with 501-1,000 employees
It offers confidence by preventing exposure to vulnerabilities and helps ensure that we are not deploying vulnerable code into production.
Site Leader (India) at Industrial Scientific
The best features in Veracode include static analysis and the early detection of vulnerable libraries; it integrates with tools such as Jenkins.
It fixes issues directly in the IDE while you're doing it.
IT App Security Senior Analyst at a transportation company with 10,001+ employees
 

Categories and Ranking

Orca Security
Ranking in Container Security
10th
Average Rating
9.0
Reviews Sentiment
6.9
Number of Reviews
30
Ranking in other categories
Vulnerability Management (11th), Cloud Workload Protection Platforms (CWPP) (5th), API Security (4th), Cloud Security Posture Management (CSPM) (6th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (8th), Cloud Detection and Response (CDR) (2nd), AI Security (5th)
Veracode
Ranking in Container Security
8th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
208
Ranking in other categories
Application Security Tools (3rd), Static Application Security Testing (SAST) (2nd), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)
 

Mindshare comparison

As of March 2026, in the Container Security category, the mindshare of Orca Security is 4.0%, down from 4.7% compared to the previous year. The mindshare of Veracode is 2.8%, down from 4.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Mindshare Distribution
ProductMindshare (%)
Veracode2.8%
Orca Security4.0%
Other93.2%
Container Security
 

Featured Reviews

reviewer2800203 - PeerSpot reviewer
Assistant Manager at a manufacturing company with 10,001+ employees
Cloud posture management has improved remediation and optimizes costs with contextual risk insights
Since I have not used Orca Security for 10 months, I am uncertain what areas still need improvement, as they may have rolled out features that addressed issues I faced in the past. However, I can say the tool is good. A few things could potentially be improved, particularly regarding false positives and the UI. What I observed is that they release updates to the platform without notifying the customer. Every time the UI is upgraded, they release something without notification. This could be a slight improvement. If they released some kind of notification to just inform the customer about UI changes, the customer would be aware of the changes that Orca Security is making in the backend.
reviewer2703864 - PeerSpot reviewer
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
Onboarding developers successfully while improving code security through IDE integration
Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
10%
Healthcare Company
5%
Financial Services Firm
16%
Computer Software Company
12%
Manufacturing Company
11%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise8
Large Enterprise8
By reviewers
Company SizeCount
Small Business69
Midsize Enterprise45
Large Enterprise114
 

Questions from the Community

What do you like most about Orca Security?
It's for protection. It's an agentless tool. We don't need to install anything at a customer's premises. We can just scan the entire assets in the cloud.
What needs improvement with Orca Security?
I think the downside of Orca Security is the reports. I don't have any good reports ready to deliver to an executive. If I need to deliver some reports to my account manager or an executive, I don'...
What is your primary use case for Orca Security?
I normally use Orca Security for AppSec, and one of the features that I use commonly is the application security. I love it because it's already covered in the same license, and I can get a good ov...
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
What do you like most about Veracode Static Analysis?
I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.
What is your experience regarding pricing and costs for Veracode Static Analysis?
My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.
 

Comparisons

 

Also Known As

No data available
Crashtest Security , Veracode Detect
 

Overview

 

Sample Customers

BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino
Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.
Find out what your peers are saying about Orca Security vs. Veracode and other solutions. Updated: March 2026.
884,873 professionals have used our research since 2012.