We switched to a custom Linux Kernel that agent based VMS could not support. Orca was the only solution that we found that could solve our use case.

Orca is an agentless approach to VMS. This means there is 0 user impact or performance degradation. Your Operations team does not have to manage agent roll out, it also does not need to manage upgrades/downtime. This saves you operating costs and allows your Ops team to focus on other security items. Orca is OS agnostic, it does not matter what your development/architecture team decides to pivot to. Orca supports Windows/Linux/Mac/Containerization. It also is Cloud agnostic, have subs in Azure or AWS? Orca can handle them all with a few clicks. The entire roll out took around 10 minutes.

There are features missing in Orca from a nice to have stand point. The product is fairly new and a lot of these enhancements are being worked on. The Orca team has been very responsive to enhancements thus far.

Product Integration - It's as easy as they sell it. I had it up and running in multiple accounts in no time. Support - Wonderful support and leadership team that cares about their customers. Open API - Rich and open API that allows you to extend and build on top of the product.

The extensibility of the product, and how rich the API is. I can find out almost anything about my environment. Using Orca gives me insight into my entire cloud sprawl. I can get information about malware, open-ingress to EC2 instances, and open source vuln management. The only limit to its use is imagination.

Creating new alerts can be clunky. However, the Orca team is always improving and is currently working on a V2. Navigating the UI can be a bit of a challenge at times when looking for specific info. This is why I often opt for using the API over the UI.

I have enjoyed the Orca security in the sense that it gives in-depth details of vulnerability, attack path, security posture among many others

It is a reach platform which provides us with comprehensive security tooling features.

The only part I have reservations about is the shift-left aspect whereby there is no known IDE extension for the CLI

The first step to increase the security posture of an environment is to understand it. Orca Security instantly gave me that visibility without the hurdles of an agent.

The ability to get quick visibility into the cloud assets without going through the technical hurdles of deploying an agent.

I think the UI could use a bit more improvement. I've been using this software for 6 months and not everything is intuitive. I still forget where things are exactly.

We were trying to solve container security challenges. Actively monitoring what is going on within container. Benefit of agent less solution is two fold, 1) Do not have to install agents on the host machine. 2) Effective in monitoring workloads running in managed containers. Orca security, ability of side-scanning technology examines block storage out of band via a software-as-a-service (SaaS) platform.

Agent less no installation required. Simple 3 step process to connect account and start monitoring. Extensive deep insight into installed packages within container. Clear categorization of alerts as Imminent compromises, Hazardous, Informational with color coding for clear visibility. Also builds digital asset inventory for tracking different types cloud based assets ex: S3 buckets, EC2 instances. Easy to connect multiple accounts across AWS, Azure, GCP. Under Vulnerability management some of the key features to highlight are Asset Discovery, Asset Tagging, Network Scanning, Patch Management,Vulnerability Assessment,Web Scanning, Risk Management and Policy Management. Couple of the key cloud security features to highlight are Endpoint Management,Threat Intelligence,Vulnerability Management, Intrusion Detection System, Behavioral Analytics, Encryption and Application Security. Ease of integration was one of the reason to consider Orca security solution.

Reporting and user interface are immature, but improving, not real time. This is near real time solution depends on frequency of scanning. VM specific details if consolidated as actionable insights will be very helpful to narrow our focus to relevant issues (ex: identified affected packages within a container is great, giving link to specific patches will be very helpful.

Not having to deal with agents combined with direct integration with our ticking system has saved us countless hours of precious engineering time. Because of this, we have gained tremendous value from the product since we can effectively manage AWS risks while focusing on creating more features and values for our customers.

Since Orca Security does not require any agents to install, setup took less than five minutes. We are also use multiple AWS accounts and since setup was simple, within less than thirty minutes, we had a single pane view of most of our AWS risks. In addition, since Orca Security integrates with Atlasssian Jira, with only one click, we could quick open remediation tickets for high risk vulnerabilities.

Although Orca Security offers a ton of AWS coverage, I'd like to see more work with AWS RDS and AWS networking services such as VPC and Security Groups.

Faster and easier deployment, full visibility into AWS and Azure.

Easy deploy and powerfull visibility it´s most values of Orca.

Lack of visibility into the on-premises environment

The best I've had with any vendor.

The agent-less service deployed immediately, with no effort, and replaced three different products. The false positive rate is low. The information presented is easily and immediately actionable. The product has allowed me to reduce effort by 90% of an FTE.

I would like to feed the raw data to our data warehouse, which is not yet possible, though it is coming.

Thanks to Orca we were able to quickly scale our vulnerability management program.

Very easy to set-up. Top-notch customer follow-up and support. Continual solution improvement included in the pricing. Single pane of glass visibility into your Cloud infrastructure with a powerful query language and automation features.

Limitations of agent-less scanning. Container and Kubernetes scanning could be more developed.

Awesome. Coming from nothing deployed to now seeing everything in AWS is awesome and scary at the same time. But it quickly helped us become more aware and more secure in deploying our AWS Infrastructure.

The on-boarding team was great, Scott and Joshua were and are still very helpful, Also the easy of use is critical to get action items out of the Alerts.

Support needs to be more engaged and ensure timeline (SLA's) are meet or at least presented.

Orca helps us maintain and improve our cloud security by prioritizing and contextualizing findings

Incredibly easy setup and 100% visibility of cloud assets

It would be helpful to group similar findings across scaleable infrastructure rather than showing each finding individually

Great team, useful product! I loved working with Orca Security as vendor! Their product provided meaningful insights into overall project security and what can be done better on our side!

I honestly love their innovative product! Used it with AWS cloud infrastructure - only really cool benefits!

Nothing, really! The are clock-sharp in resolving any issues, hepling with setup and configuration, everythin was perfect!

We feel that we've been able to significantly improve our organization's awareness across the board to security issues.

I appreciate how Orca Security does side-scanning, unobtrusively collecting information about our cloud deployments, and then submitting those records through intensive scrutiny. The scan results are compared against CVEs to establish prioritized lists for mitigation efforts

Integration of Orca Security with Microsoft Teams to provide realtime alerts when issues are detected is in it's infancy at present, and we had some troubles getting it going.

Great tool, can be used for inventory, alarms on recent vulnerabilities, applying best practices, etc. It really makes some of the hard challenges in cloud security trivial.

Documentation can be better but thanks to the support team it is not that much of a problem.

Really good experience. Good product and customer support.

PCI templates for compliance.Vulnerability monitoring in real time.

A little bit hard to navigate sometimes.,

The implementation was extremely quick and easy. The feedback we are receiving from the dashboard is very comprehensive.

I have yet to identify anything that I like least.