Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Just what I needed!
What do you like best about the product?
Ease of setup and a nice overview of all accounts
What do you dislike about the product?
UI had some unusual workflows initially but those have since been resolved
What problems is the product solving and how is that benefiting you?
Security and risk assessment of cloud infrasrtucture
Recommendations to others considering the product:
great tool that is easy to set up and brings great visibility to cloud environment
- Leave a Comment |
- Mark review as helpful
Orca, Security in the cloud
What do you like best about the product?
Ease of installation, scanning of containers, security logging (such as brute force attempts), no need to have local account on images. Also how fast they are to listen to customer suggestions, turning them to feature requests, and implementing these.
What do you dislike about the product?
Early on the reporting was a bit weak, as was the SIEM intergration. Due to the support and feature requests, this was resolved pretty early on. The issues really are minor at this point.
What problems is the product solving and how is that benefiting you?
Vulnerability Management was the key item we needed to solve. The ability to assess overall cloud security, auditing, and other features were just great additions.
Awesome support team and easy to deploy
What do you like best about the product?
Ease of deployment and integrations. Great team to work with.
What do you dislike about the product?
Lots of findings to go through for initial triage but that is nothing new.
What problems is the product solving and how is that benefiting you?
Vulnerability management of workloads, cloud security posture
Recommendations to others considering the product:
Awesome tool for vuln management in cloud native environment
Frictionless actionable insights within a day. Fantastic for M&A due diligence
What do you like best about the product?
Orca is an agentless deployment that allows you to gain insights into your cloud environments within an incredibly short time frame. It also helps prioritize its findings for maximum security value.
What do you dislike about the product?
Because it's an agentless deployment, it does not compete with traditional enterprise-grade security tooling. Instead, it delivers 80% of that value with only 20% (if even that) of the effort.
What problems is the product solving and how is that benefiting you?
We solve the problem of immediate insights into potential and recent acquisitions. This allows us to scope the level of effort required to bring acquisition security postures up to our standards.
Inexpensive yet critical and mandatory part of my cyber security strategy roadmap
What do you like best about the product?
Inexpensive, up-to-date in terms of vulnerability assessments, ease of use.
What do you dislike about the product?
Nothing at this point. If I had to nitpick, no dark mode.
What problems is the product solving and how is that benefiting you?
With Orca Security, I am able to have real-time vulnerability assessment into my containers and instances on AWS.
Orca Security is building a really nice tool
What do you like best about the product?
The interface is good but not as intuitive as I would expect from a tool like this but you can find what you need in a couple of clicks. Customer support from the other side is great.
What do you dislike about the product?
As mentioned, the interface is modern but not that intuitive. It is a bit hard to find information about a vulnerable package or file location for example in the web GUI.
What problems is the product solving and how is that benefiting you?
With Orca Security we have a nice overview of vulnerable packages, end-of-live operational systems and so without installing extra agents or software on the servers or virtual machines.
Probably the best Cloud Native Application Protection Platform on the market
What do you like best about the product?
Orca's agentless side-scanning techniques mean that all assets are automatically scanned - even if not running. Their dashboards provide an intuitive, easy to digest view of the current state of application security without being swamped by alerts and information. Orca provides an excellent way of producing an inventory of assets - particularly useful for ephemeral assets that are perpetually being created and destroyed. The compliance feature is also useful for auditing purposes. The recently introduced attack paths feature shows graphically how an attacker could gain access and potentially pivot through the system.
What do you dislike about the product?
Because of the way Orca's side-scanning technology works using snapshots, the downside is that the scanning is not performed in real-time so cannot provide true xDR capabilities. It would also be useful if older alerts were automatically dismissed after a while when the vulnerability is no longer detected. This would help to reduce the total number of vulnerabilities and alerts that are displayed in the dashboards.
What problems is the product solving and how is that benefiting you?
Orca solves several problems we regularly face including producing asset inventories, helping with compliance, and providing focussed mitigation of security vulnerabilities. Orca's dashboards provide the necessary insights into the latest threats to allow a more focused application of security resources.
Recommendations to others considering the product:
Orca is a great product that can help with your organization's application security and governance.
Great product, easy to use and set up
What do you like best about the product?
Orca is extremely easy to set up and we got our 27 AWS accounts onboarded within minutes. The findings from Orca are very relevant and pertinent recommendations were provided for remediation, including links to external documentation when relevant.
Orca is also great at providing peace of mind when it comes to staying on top of new threats and vulnerabilities as it automatically scans our assets when new vulnerabilities are published. Automated scanning for the log4j vulnerabilities were available within a couple of days of disclosure.
Orca is also great at providing peace of mind when it comes to staying on top of new threats and vulnerabilities as it automatically scans our assets when new vulnerabilities are published. Automated scanning for the log4j vulnerabilities were available within a couple of days of disclosure.
What do you dislike about the product?
A few bugs in the UI, which are being addressed quickly.
The UI is also still evolving at a rapid pace, which can make it hard from time to time to find what you are looking for.
The UI is also still evolving at a rapid pace, which can make it hard from time to time to find what you are looking for.
What problems is the product solving and how is that benefiting you?
Cloud Security Posture Management.
Misconfigurations, vulnerability scanning, permission issues, etc...
Misconfigurations, vulnerability scanning, permission issues, etc...
Recommendations to others considering the product:
Overall our experience with Orca has been great and their support team is really on top of their game. So far Orca is ticking all the boxes for us and has quickly become a trusted tool in our security arsenal.
MR Orca's Review
What do you like best about the product?
The Portal is magnificent, ease-of-use, the and from news where it pint points the vulnerabilities and assets impacted by it, and the ability to auto remediate any issue
What do you dislike about the product?
sometimes findings are listed in multiple categories since each category has its own unique orca id, it is frustrating that I have to go to multiple categories to manually resolve the issue
What problems is the product solving and how is that benefiting you?
having a single point of view of all my risks, being able to be a platform-centric rather than tools centric, simplifies compliance and risk mitigation from a security prospective
Recommendations to others considering the product:
I strongly recommend it for any company that is looking for a security and compliance platform.
Very quick implementation and drastically reduced false positives over former DAST tool.
What do you like best about the product?
Ease of of implementation, extended visibility, speed to add celebrity vulnerabilities, ability to affect UI changes. Orca was pretty ground breaking to us over previous tools. But by far the biggest benefit is previously we had to know about something through discovery scans or inventory to evaluate. Orca knows about anything that is created and has already evaluated it before we even come in for the day. No more shadow IT.
What do you dislike about the product?
Not much compared to former tools we have used. It still creates the occasional false positive but sure no tool will be without since there is always some aspect that the tool can't see, like firewall restricting to VPN access.
What problems is the product solving and how is that benefiting you?
Configuration vulnerabilities is a primary business use. On three occasions, Orca identified malware that landed on a server. One occasion it was a completely exposed server that was spun up for weekend testing.
showing 151 - 160