Orca Security CNAPP Cloud Security Platform
Orca Security CNAPPExternal reviews
227 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Best Vulnerability Management Tool EVER
What do you like best about the product?
Hard to narrow down. It's easy to install (15 minutes or less), easy to administer (took 15 minutes to master) and easy to use. Vulnerabilities are scanned and risk assessed daily making it easy to identify what has been remediated and what's outstanding. The vulnerability intelligence feed on the dashboard ensures I know exactly how the latest exploit might impact my organisation and what I need to do to remediate/mitigate the risk.
What do you dislike about the product?
Absolutely nothing!! If I'm going to be really picky my only issue is the Orca only provides me an inside looking out view. It would be perfect if it could also provide me the outside looking in view so I could connect vulnerability remediation to websites and business units.
What problems is the product solving and how is that benefiting you?
As Orca is cloud-native it has solved the problem of trying to get older terrestrial-based technologies to work effectively in cloud environments.
One solution for all your security problems of Cloud
What do you like best about the product?
The intuitive function of ORCA to find vulnerabilities.
What do you dislike about the product?
Sometimes, features are not applicable to all types of assets.
What problems is the product solving and how is that benefiting you?
We wanted single solution for all our Cloud security-related problems and ORCA is that solution for us.
Amazing company, fast replies, knowledgeable people!
What do you like best about the product?
Result-oriented people, great support team
What do you dislike about the product?
Honestly, nothing bad. Only good things!
What problems is the product solving and how is that benefiting you?
Security of our environments
Incident investigations
Scanning of assets for finding vulnerabilities
Incident investigations
Scanning of assets for finding vulnerabilities
Would recommend do to the effectiveness and easy of on-boarding.
What do you like best about the product?
Easy to use and the support from our onboarding team was great. Scott and Joshua are very proactive in what are business case is and how Orca can help.
What do you dislike about the product?
Minor visual effects within the UI. Data discovery to ensure Data Loss Prevention can be affective. Reporting could also use a bit of dazzling for the Executives.
What problems is the product solving and how is that benefiting you?
Complete Cloud Posture and Discovery of everything within AWS. It helps ensure we have security controls in place within our Cloud environment
Recommendations to others considering the product:
This is a quick setup and quick win with visibility of your Cloud Infrastructure.
Orca Securtiy Review
What do you like best about the product?
The ability to quickly gain visibility into your cloud assets and then truly focus on the high risk items.
What do you dislike about the product?
UI could use a bit of improvement, even though already a big improvement from v1. I've been using it for half a year but data display is still not as intuitive for me.
What problems is the product solving and how is that benefiting you?
By not having to go through the painful technical challenges for installing an agent, Orca provided me with near instant visibility.
Recommendations to others considering the product:
If you want near instant visibility into cloud assets, Orca Security is the way to go. Each environment that typically has struggles to get an agent on each and every resource, would find Orca Security very useful.
ORCA Provides X-Ray Vision Into Your Environment
What do you like best about the product?
ORCA provides visibility into the complete environment in a way that no other tool does. Unlike other tools it shows the full range of issues that includes misconfiguration anywhere in the path as well as shows what it recommends. It also does not require an agent so we can use it easily on instances that we spin up and down programmatically at scale. The other really good part is that the messages / alerts that you receive are pretty accurate and are summarized for you already based on the many alerts behind the scenes that you don't see. This use of AI makes it easy to use for any skill level at our SOC. There are many other features that make it a great tool but the ones above are the ones that I like best.
What do you dislike about the product?
I wish it was available for our IBM cloud instances.
What problems is the product solving and how is that benefiting you?
It helps us solve our cloud security problems. It provides a single source to manage everything so it reduces complexity and increases our ability to secure our assets.
Orca Security for the win!
What do you like best about the product?
SaaS Model - no need to maintain infrastructure locally.
Agentless - No more trying to get 10,000 people to adopt your agent into their build pipelines or gold master processes.
Quick to Deploy - We had all our accounts configured, across three major cloud service providers within hours.
Agentless - No more trying to get 10,000 people to adopt your agent into their build pipelines or gold master processes.
Quick to Deploy - We had all our accounts configured, across three major cloud service providers within hours.
What do you dislike about the product?
Honestly, my main complaint is that we took so long to find this product.
What problems is the product solving and how is that benefiting you?
We've been able to find and eliminate numerous persistent threats, malware, and critical misconfiguration across our fleet.
Lightning deployment and solid feedback
What do you like best about the product?
Easy to deploy, no agents to push, results within minutes and continuous feedback on configuration and vulnerability status
What do you dislike about the product?
There's really nothing I don't like about it
What problems is the product solving and how is that benefiting you?
Multi-Cloud vulnerability an configuration management
Orca - Scan from the side, 0 user impact
What do you like best about the product?
This product scans from the side, it is agentless. There is 0 user impact, unlike clunky agent based VMS from the past. Agentless also means your operations team does not have to manage roll outs of software or upgrades.
We use Orca to secure our customer instances, like most companies we are trying to improve our costs for cloud computing. Orca is OS agnostic, this allows your development team to be agile with their product innovation. We can pivot from Windows to Linux and containerization without having to adjust or changing anything from our standard operation procedures for VMS.
We use Orca to secure our customer instances, like most companies we are trying to improve our costs for cloud computing. Orca is OS agnostic, this allows your development team to be agile with their product innovation. We can pivot from Windows to Linux and containerization without having to adjust or changing anything from our standard operation procedures for VMS.
What do you dislike about the product?
The product is fairly new, core functionality is 100% there. The UI could use some enhancement from a functionality perspective, Orca has been very responsive on timelines and fulfilling enhancement requests.
An example for us would be that we cannot submit reports to our internal auditors for a specific Cloud subscription. We have 6 subscriptions currently and they are all very different and need to be audited by different teams.
An example for us would be that we cannot submit reports to our internal auditors for a specific Cloud subscription. We have 6 subscriptions currently and they are all very different and need to be audited by different teams.
What problems is the product solving and how is that benefiting you?
We use a CIS custom built Linux kernel, agent based VMS can not function in our environment. We also feel remote scanning opens too many security holes. Orca scans from the side and is OS agnostic.
As mentioned our images are hardened, since Orca requires only read only access to backups AWS/Azure take automatically we get the full view of what is on these images. Utilizing an agent or network scanner would require us to increase our attack surface.
As mentioned our images are hardened, since Orca requires only read only access to backups AWS/Azure take automatically we get the full view of what is on these images. Utilizing an agent or network scanner would require us to increase our attack surface.
Recommendations to others considering the product:
I would not waste my time reviewing other VMS vendors. Orca does it all from a cloud perspective, as Cloud evolves and your organization evolves Orca is always there. If you stand up a new subscription you can have it secured in 5 minutes. No user impact offers so much value, your support will never have to engage with end users on your agent slowing performance. Your Ops team will never have to roll out another agent or manage these agents upgrades and outages again.
This ORCA keeps us afloat
What do you like best about the product?
Ease of deployment. Very easy to deploy across 60 cloud subscriptions within days. This app is great and allows us to have a glass pane for everything. Even container scanning + Secret scanning + alerting and now automatic remediation
What do you dislike about the product?
At the moment, nothing. The app has everything required
What problems is the product solving and how is that benefiting you?
Vulnerability and security coverage and now container scanning. The ease of deployment and how they do things means we get a full view. It now finds scretes and scans containers in repositories
Recommendations to others considering the product:
Just do it. It will scare you with what it finds.
showing 91 - 100