Orca Security CNAPP Cloud Security Platform
Orca Security CNAPPExternal reviews
229 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Inexpensive yet critical and mandatory part of my cyber security strategy roadmap
What do you like best about the product?
Inexpensive, up-to-date in terms of vulnerability assessments, ease of use.
What do you dislike about the product?
Nothing at this point. If I had to nitpick, no dark mode.
What problems is the product solving and how is that benefiting you?
With Orca Security, I am able to have real-time vulnerability assessment into my containers and instances on AWS.
Orca Security is building a really nice tool
What do you like best about the product?
The interface is good but not as intuitive as I would expect from a tool like this but you can find what you need in a couple of clicks. Customer support from the other side is great.
What do you dislike about the product?
As mentioned, the interface is modern but not that intuitive. It is a bit hard to find information about a vulnerable package or file location for example in the web GUI.
What problems is the product solving and how is that benefiting you?
With Orca Security we have a nice overview of vulnerable packages, end-of-live operational systems and so without installing extra agents or software on the servers or virtual machines.
Probably the best Cloud Native Application Protection Platform on the market
What do you like best about the product?
Orca's agentless side-scanning techniques mean that all assets are automatically scanned - even if not running. Their dashboards provide an intuitive, easy to digest view of the current state of application security without being swamped by alerts and information. Orca provides an excellent way of producing an inventory of assets - particularly useful for ephemeral assets that are perpetually being created and destroyed. The compliance feature is also useful for auditing purposes. The recently introduced attack paths feature shows graphically how an attacker could gain access and potentially pivot through the system.
What do you dislike about the product?
Because of the way Orca's side-scanning technology works using snapshots, the downside is that the scanning is not performed in real-time so cannot provide true xDR capabilities. It would also be useful if older alerts were automatically dismissed after a while when the vulnerability is no longer detected. This would help to reduce the total number of vulnerabilities and alerts that are displayed in the dashboards.
What problems is the product solving and how is that benefiting you?
Orca solves several problems we regularly face including producing asset inventories, helping with compliance, and providing focussed mitigation of security vulnerabilities. Orca's dashboards provide the necessary insights into the latest threats to allow a more focused application of security resources.
Recommendations to others considering the product:
Orca is a great product that can help with your organization's application security and governance.
Great product, easy to use and set up
What do you like best about the product?
Orca is extremely easy to set up and we got our 27 AWS accounts onboarded within minutes. The findings from Orca are very relevant and pertinent recommendations were provided for remediation, including links to external documentation when relevant.
Orca is also great at providing peace of mind when it comes to staying on top of new threats and vulnerabilities as it automatically scans our assets when new vulnerabilities are published. Automated scanning for the log4j vulnerabilities were available within a couple of days of disclosure.
Orca is also great at providing peace of mind when it comes to staying on top of new threats and vulnerabilities as it automatically scans our assets when new vulnerabilities are published. Automated scanning for the log4j vulnerabilities were available within a couple of days of disclosure.
What do you dislike about the product?
A few bugs in the UI, which are being addressed quickly.
The UI is also still evolving at a rapid pace, which can make it hard from time to time to find what you are looking for.
The UI is also still evolving at a rapid pace, which can make it hard from time to time to find what you are looking for.
What problems is the product solving and how is that benefiting you?
Cloud Security Posture Management.
Misconfigurations, vulnerability scanning, permission issues, etc...
Misconfigurations, vulnerability scanning, permission issues, etc...
Recommendations to others considering the product:
Overall our experience with Orca has been great and their support team is really on top of their game. So far Orca is ticking all the boxes for us and has quickly become a trusted tool in our security arsenal.
MR Orca's Review
What do you like best about the product?
The Portal is magnificent, ease-of-use, the and from news where it pint points the vulnerabilities and assets impacted by it, and the ability to auto remediate any issue
What do you dislike about the product?
sometimes findings are listed in multiple categories since each category has its own unique orca id, it is frustrating that I have to go to multiple categories to manually resolve the issue
What problems is the product solving and how is that benefiting you?
having a single point of view of all my risks, being able to be a platform-centric rather than tools centric, simplifies compliance and risk mitigation from a security prospective
Recommendations to others considering the product:
I strongly recommend it for any company that is looking for a security and compliance platform.
Very quick implementation and great visibility.
What do you like best about the product?
Their data posture has been a good update. Further attack path visibility is a great help.
What do you dislike about the product?
Not as much advancement in vulnerability validations as I would like to see but great product.
What problems is the product solving and how is that benefiting you?
Configuration vulnerabilities is a primary business use. On three occasions, Orca identified malware that landed on a server. One occasion it was a completely exposed server that was spun up for weekend testing.
Great product and service!
What do you like best about the product?
Ease of installation/integration, efficiency in resolving issues, clear and concise UI that delivers information to us in a very actionable manner
What do you dislike about the product?
Some small bugs and issues, currently missing some features that competitors have
What problems is the product solving and how is that benefiting you?
Cloud infrastructure security, vulnerability management, threat detection, compliance checks
it is very good tool for finding security risk in your cloud infrastructure.
What do you like best about the product?
Provide details data for cloud resources that are vulnerable and data is well organized in ORCA UI. There is a new feature called shift left for container vulnerability. it is awesome. also, it has a compliance section that displays different compliance framework scores for your infrastructure.
What do you dislike about the product?
As of now, I don't think anything is missing but would like to have a feature that creates security incidents in organization for high trading vulnerability.
What problems is the product solving and how is that benefiting you?
we have improved our cloud infrastructure score to 90 and HIPPA compliance score to 100 by solving various types of orca alerts for the following categories like IAM misconfiguration, data at risk,Lateral movement,Neglected assets, and Vulnerabilities.
Orca is awesome for multi cloud strategy
What do you like best about the product?
Multicloud
Usability
Risk management
Prioritization scale
Usability
Risk management
Prioritization scale
What do you dislike about the product?
So far it seems Orca does not yet have an advanced CIEM capability
What problems is the product solving and how is that benefiting you?
Cloud security posture management
Vulnerability management
Multicloud security
CWPP
Vulnerability management
Multicloud security
CWPP
Orca gives great insight
What do you like best about the product?
When a vulnerability comes out, I can quickly determine if it is even something we are even running in the cloud
What do you dislike about the product?
Probably more against me than Orca; but the difficulty I have with the querying
What problems is the product solving and how is that benefiting you?
Visibility of our cloud environments and allowing us to apply resources to the highest risk
showing 191 - 200