Orca Security

Vorteile

PCI templates for compliance.Vulnerability monitoring in real time.

Nachteile

A little bit hard to navigate sometimes.,

Vorteile

Easy deploy and powerfull visibility it´s most values of Orca.

Nachteile

Lack of visibility into the on-premises environment

In Betracht gezogene Alternativen

Warum Orca Security gewählt wurde

Zuvor genutzte Software

Gründe für den Wechsel zu Orca Security

Vorteile

It is a reach platform which provides us with comprehensive security tooling features.

Nachteile

The only part I have reservations about is the shift-left aspect whereby there is no known IDE extension for the CLI

Vorteile

I believe Orca is an amazing tool. The fact it is agentless, can be deployed in AWS, Azure, and GCP make it an all around tool. Another reason I like Orca is the support I have gotten. The team is always available when we have issues and is able to resolve anything we see quickly.

Nachteile

I have no cons on this product. It works as intended.

Vorteile

Orca has the complete package of security tooling available. If cybersecurity is a very important concern for your company, this is the best choice.

Nachteile

While a complete package, they are very expensive. If you don't need all features other competitors might be more valuable for the money.

Vorteile

I honestly love their innovative product! Used it with AWS cloud infrastructure - only really cool benefits!

Nachteile

Nothing, really! The are clock-sharp in resolving any issues, hepling with setup and configuration, everythin was perfect!

Vorteile

Easy of deployment. I can deploy and auto deploy to environments

Nachteile

Nothing. Its great. I have no issues with the product

In Betracht gezogene Alternativen

Vorteile

Orca is extremely easy to set up and we got our 27 AWS accounts onboarded within minutes. The findings from Orca are very relevant and pertinent recommendations were provided for remediation, including links to external documentation when relevant.
Orca is also great at providing peace of mind when it comes to staying on top of new threats and vulnerabilities as it automatically scans our assets when new vulnerabilities are published. Automated scanning for the log4j vulnerabilities were available within a couple of days of disclosure.

Nachteile

A few bugs in the UI, which are being addressed quickly.

Vorteile

Incredibly easy setup and 100% visibility of cloud assets

Nachteile

It would be helpful to group similar findings across scaleable infrastructure rather than showing each finding individually

In Betracht gezogene Alternativen

Vorteile

Orca has been a crucial tool for our enterprise to to enhance our visibility into our cloud resources. Ontop of being a great product, their support has been outstanding in answering all of our questions, fixing bugs, and expediting our open cases.

Nachteile

The only dislikes of Orca that I have emphasized to their support team is around vulnerability management reporting and navigation within the tool. They have since released the Discovery module that allows us to create custom rules to provide the reports we need. I would like to see them continue to enhance their dashboarding capabilities for vulnerability trend data.

Vorteile

The most I like about Orca is its extensive collection of security check for our AWS environment, also that Orca is always working on new features and new improvements

Nachteile

I wish there was also a live scanner, but I guess its not part of the product or how its works, also if the price was lower

Vorteile

Agentless was a very big win for me. And now with API scanning, it goes to the next level!

Nachteile

No dark mode. Seriously. We need to make sure that products have dark mode!

Vorteile

Not only does Orca work, the customer success team is always on top of things and keeping what we want for the future in mind.

Nachteile

Sometimes I feel like UI focuses a little too much on style rather than function.

Vorteile

"Security score analysis" and "from the news" areas.

Nachteile

Seeing already dismissed alerts & unclear algorithm for "security score analysis".

Vorteile

Orca is pretty simple to set up and provides a vast amount of data right out of the gate. There is very little continual maintenance needed.

Nachteile

The inability to create exceptions based on characteristics. Ea File path, name

Vorteile

Orca allows collaboration across departments to manage cloud compliance, security, and posture. The UI is simple and easy to navigate. The integrations are straightforward to setup.

Nachteile

Sometimes they roll out new features that don't extend to the rest of the product which can make it hard to use.

Vorteile

Very easy to set-up.
Top-notch customer follow-up and support.
Continual solution improvement included in the pricing.
Single pane of glass visibility into your Cloud infrastructure with a powerful query language and automation features.

Nachteile

Limitations of agent-less scanning.
Container and Kubernetes scanning could be more developed.

Vorteile

easy to use/configure, great insights and automated remediation

Nachteile

does not provide visibility into system activity (like applications in memory)

Vorteile

I like how this product identifies, prioritizes and remediates security risks and compliance issues

Nachteile

for started it is a difficult software or UI is complex

Vorteile

Orca is an agentless approach to VMS. This means there is 0 user impact or performance degradation. Your Operations team does not have to manage agent roll out, it also does not need to manage upgrades/downtime. This saves you operating costs and allows your Ops team to focus on other security items.

Orca is OS agnostic, it does not matter what your development/architecture team decides to pivot to. Orca supports Windows/Linux/Mac/Containerization. It also is Cloud agnostic, have subs in Azure or AWS? Orca can handle them all with a few clicks.

The entire roll out took around 10 minutes.

Nachteile

There are features missing in Orca from a nice to have stand point. The product is fairly new and a lot of these enhancements are being worked on. The Orca team has been very responsive to enhancements thus far.

Vorteile

Orca's agentless side-scanning techniques mean that all assets are automatically scanned - even if not running. Their dashboards provide an intuitive, easy to digest view of the current state of application security without being swamped by alerts and information. Orca provides an excellent way of producing an inventory of assets - particularly useful for ephemeral assets that are perpetually being created and destroyed. The compliance feature is also useful for auditing purposes. The recently introduced attack paths feature shows graphically how an attacker could gain access and potentially pivot through the system.

Nachteile

Because of the way Orca's side-scanning technology works using snapshots, the downside is that the scanning is not performed in real-time so cannot provide true xDR capabilities. It would also be useful if older alerts were automatically dismissed after a while when the vulnerability is no longer detected. This would help to reduce the total number of vulnerabilities and alerts that are displayed in the dashboards.

Vorteile

Orca's SideScanning technology is excellent. The fact that it doesn't require an agent and is still able to provide as much insight as it does is truly amazing.

Nachteile

Orca needs to figure out how to separate the wheat from the chaff. There are always a lot of vulnerabilities that appear in our console from old kernel versions or something that has already been patched that we're still getting alerts on.

Vorteile

I appreciate how Orca Security does side-scanning, unobtrusively collecting information about our cloud deployments, and then submitting those records through intensive scrutiny. The scan results are compared against CVEs to establish prioritized lists for mitigation efforts

Nachteile

Integration of Orca Security with Microsoft Teams to provide realtime alerts when issues are detected is in it's infancy at present, and we had some troubles getting it going.

Vorteile

Ability to discovery new assets only having role built in parent org. It's visibility also of back plane to reduce false positives. Responsiveness of company to implement change to functionality and UI.

Nachteile

I would say API visibility but that is already in Beta now.

Vorteile

The extensibility of the product, and how rich the API is. I can find out almost anything about my environment. Using Orca gives me insight into my entire cloud sprawl. I can get information about malware, open-ingress to EC2 instances, and open source vuln management. The only limit to its use is imagination.

Nachteile

Creating new alerts can be clunky. However, the Orca team is always improving and is currently working on a V2. Navigating the UI can be a bit of a challenge at times when looking for specific info. This is why I often opt for using the API over the UI.

Vorteile

Agent less no installation required. Simple 3 step process to connect account and start monitoring. Extensive deep insight into installed packages within container. Clear categorization of alerts as Imminent compromises, Hazardous, Informational with color coding for clear visibility. Also builds digital asset inventory for tracking different types cloud based assets ex: S3 buckets, EC2 instances. Easy to connect multiple accounts across AWS, Azure, GCP.
Under Vulnerability management some of the key features to highlight are Asset Discovery, Asset Tagging, Network Scanning, Patch Management,Vulnerability Assessment,Web Scanning, Risk Management and Policy Management.
Couple of the key cloud security features to highlight are Endpoint Management,Threat Intelligence,Vulnerability Management,
Intrusion Detection System, Behavioral Analytics, Encryption and Application Security. Ease of integration was one of the reason to consider Orca security solution.

Nachteile

Reporting and user interface are immature, but improving, not real time. This is near real time solution depends on frequency of scanning. VM specific details if consolidated as actionable insights will be very helpful to narrow our focus to relevant issues (ex: identified affected packages within a container is great, giving link to specific patches will be very helpful.

Vorteile

Since Orca Security does not require any agents to install, setup took less than five minutes. We are also use multiple AWS accounts and since setup was simple, within less than thirty minutes, we had a single pane view of most of our AWS risks. In addition, since Orca Security integrates with Atlasssian Jira, with only one click, we could quick open remediation tickets for high risk vulnerabilities.

Nachteile

Although Orca Security offers a ton of AWS coverage, I'd like to see more work with AWS RDS and AWS networking services such as VPC and Security Groups.

In Betracht gezogene Alternativen

Gründe für den Wechsel zu Orca Security

Vorteile

The on-boarding team was great, Scott and Joshua were and are still very helpful, Also the easy of use is critical to get action items out of the Alerts.

Nachteile

Support needs to be more engaged and ensure timeline (SLA's) are meet or at least presented.

Vorteile

The ability to get quick visibility into the cloud assets without going through the technical hurdles of deploying an agent.

Nachteile

I think the UI could use a bit more improvement. I've been using this software for 6 months and not everything is intuitive. I still forget where things are exactly.

Vorteile

How easy it was go get up, running, and scanning. They really listen to Feature requests and get them in quickly.

Nachteile

Some reporting issues and SIEM data passing early on. This has mostly been addressed via feature requests.

Vorteile

Ease of deployment and accuracy of resutlts

Nachteile

Some features are clunky have to escape out of investigation panel multiple times.

Vorteile

Easy integration and automation, very quick time to value, aggregation of alerts, automatic prioritisation, recognition of alternative mitigations, mapped attack paths, responsive support and product development.

Nachteile

Better at AWS than Azure currently but still developing

Vorteile

No need to install any kind of software or agents on the servers/virtual machines. Modern graphical interface. Great customer support and onboarding

Nachteile

Sometimes is hard to find the information you need, it's not because of all the data available but it's not available in the GUI

Vorteile

How easy it is to set up and the visibility we get

Nachteile

I have trouble with the querying language

Vorteile

The agent-less service deployed immediately, with no effort, and replaced three different products. The false positive rate is low. The information presented is easily and immediately actionable. The product has allowed me to reduce effort by 90% of an FTE.

Nachteile

I would like to feed the raw data to our data warehouse, which is not yet possible, though it is coming.

In Betracht gezogene Alternativen

Gründe für den Wechsel zu Orca Security

Vorteile

easy to deploy and great consolidated views of all AWS accounts

Nachteile

UI had some unusual workflows at first but most have been resolved.

Vorteile

Lots of easy to use dashboards, reasonable classification of vulnerabilities and threats, good integration and even better support.

Nachteile

Some bugs from time to time and inconsistencies with labelling of alerts as time goes by.

Vorteile

Within minutes we were able to deploy this product and begin receiving accurate and actionable insight. There is no performance impact, no agent deployment to worry about and it just works. We were able to integrate this into our devops toolchain and drive results directly to the people who will remediate.

Nachteile

We're still adjusting to the new UI, but that's just familiarity, there is really nothing we don't like about the software.

Vorteile

Easy integration, ease of understanding of risks and detailed information and categorization of risks in our environment

Nachteile

No AliCloud support and limited CI/CD and runtime serverless security visibility

Vorteile

Great tool, can be used for inventory, alarms on recent vulnerabilities, applying best practices, etc. It really makes some of the hard challenges in cloud security trivial.

Nachteile

Documentation can be better but thanks to the support team it is not that much of a problem.

Vorteile

The fact that the gaining complete visibility into our cloud workload is agentless and that gives us a complete view into our configurations, VM's, containers and security.

Nachteile

At this point everything is headed in the right direction.

Vorteile

agentless malware detection and great server/ containers visibility to identify security-related threats

Nachteile

The one thing that I least liked about this software, is that it's not real-time protection

Vorteile

Orca implements into an AWS account in minutes and is able to assess the risk of all EBS volumes WITHOUT the need for authentication. This revolutionary side-scanning technology allows for total DevOps and Security governance in cloud accounts where some assets may not follow strict IAM standards.

Nachteile

Orca has a lot of room to do much more than its current feature set. Looking forward to seeing what they do next.

Vorteile

Vulnerability scanning without the need for agents.

Nachteile

Lots of sub-menus in the website's interface.

Vorteile

The Orca UI is clean and provides a good overview, the alerts are relevant, and the export functionality is very useful.

Nachteile

The compliance functionality is a work in progress.

Vorteile

Amazing company, fast replies, knowledgeable people!

Nachteile

Honestly, nothing bad. Only good things!

Vorteile

The product deployment was simple, quick and easy. The visibility gained for all cloud services was almost instant. The ability to conduct side scanning is a game changer that does not affect production.

Nachteile

Operational reporting was good, but executive reporting lacks in the early days of product development. For the value gained, we are willing to wait.

Vorteile

One stop solution for Cloud Security Problems

Nachteile

Application security is missing from the software

Vorteile

I liked the side scanning technology availab.e

Nachteile

The price was super high for a new to market tool.

Vorteile

Jira ticket generation, agent-less scanning, Container domination, ease of use and setup, Clean dashboard.

Nachteile

Lack of on-prem/legacy scanning is a real bummer