15 años ayudando a las empresas españolas
a elegir el mejor software

Sobre Orca Security

¿Tienes más de 100 activos en la nube? Obtén seguridad instantánea a nivel de carga de trabajo para AWS, Azure y GCP, sin brechas de cobertura ni inconvenientes para los agentes.

Descubre más sobre Orca Security

Puntos a favor:

Ease of use, user experience, fast triage time to determine risk.

Puntos en contra:

Lack of on-prem/legacy scanning is a real bummer.

Valoraciones de Orca Security

Evaluación media

Facilidad de uso
4,7
Atención al cliente
4,8
Funcionalidades
4,6
Relación calidad-precio
4,6

Probabilidad de recomendación

9,2/10

Orca Security tiene una valoración global de 4,8 estrellas sobre 5 según las 56 opiniones de usuarios de Capterra.

¿Has utilizado Orca Security?

Comparte tu experiencia con otros compradores de software.

Filtrar opiniones (56)

Usuario verificado
Usuario de Linkedin verificado
Tecnología y servicios de la información, 1.001-5.000 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Orca - Scan from the side, 0 user impact

5,0 hace 3 años

Comentarios: We switched to a custom Linux Kernel that agent based VMS could not support. Orca was the only solution that we found that could solve our use case.

Puntos a favor:

Orca is an agentless approach to VMS. This means there is 0 user impact or performance degradation. Your Operations team does not have to manage agent roll out, it also does not need to manage upgrades/downtime. This saves you operating costs and allows your Ops team to focus on other security items. Orca is OS agnostic, it does not matter what your development/architecture team decides to pivot to. Orca supports Windows/Linux/Mac/Containerization. It also is Cloud agnostic, have subs in Azure or AWS? Orca can handle them all with a few clicks. The entire roll out took around 10 minutes.

Puntos en contra:

There are features missing in Orca from a nice to have stand point. The product is fairly new and a lot of these enhancements are being worked on. The Orca team has been very responsive to enhancements thus far.

Aaron
Senior Security Engineer en EE. UU.
Software informático, 501-1.000 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Alternativas consideradas previamente:

Know your entire cloud sprawl in minutes

5,0 hace 4 años

Comentarios: Product Integration - It's as easy as they sell it. I had it up and running in multiple accounts in no time. Support - Wonderful support and leadership team that cares about their customers. Open API - Rich and open API that allows you to extend and build on top of the product.

Puntos a favor:

The extensibility of the product, and how rich the API is. I can find out almost anything about my environment. Using Orca gives me insight into my entire cloud sprawl. I can get information about malware, open-ingress to EC2 instances, and open source vuln management. The only limit to its use is imagination.

Puntos en contra:

Creating new alerts can be clunky. However, the Orca team is always improving and is currently working on a V2. Navigating the UI can be a bit of a challenge at times when looking for specific info. This is why I often opt for using the API over the UI.

Azeez
DevOps Engineer en Nigeria
Software informático, 501-1.000 empleados
Ha utilizado el software durante: 1-5 meses
Fuente de la opinión

Orca security general overview

4,0 el año pasado

Comentarios: I have enjoyed the Orca security in the sense that it gives in-depth details of vulnerability, attack path, security posture among many others

Puntos a favor:

It is a reach platform which provides us with comprehensive security tooling features.

Puntos en contra:

The only part I have reservations about is the shift-left aspect whereby there is no known IDE extension for the CLI

Paul
Principal, Application Security Architect en EE. UU.
Software informático, 1.001-5.000 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Alternativas consideradas previamente:

Orca Security Review

5,0 hace 3 años

Comentarios: The first step to increase the security posture of an environment is to understand it. Orca Security instantly gave me that visibility without the hurdles of an agent.

Puntos a favor:

The ability to get quick visibility into the cloud assets without going through the technical hurdles of deploying an agent.

Puntos en contra:

I think the UI could use a bit more improvement. I've been using this software for 6 months and not everything is intuitive. I still forget where things are exactly.

Abhinay
Director of Software Engineering en EE. UU.
Hospital y atención sanitaria, 10.000+ empleados
Ha utilizado el software durante: 1-5 meses
Fuente de la opinión

Agent less solution is the future in security vulnerability and container security monitoring.

5,0 hace 4 años

Comentarios: We were trying to solve container security challenges. Actively monitoring what is going on within container. Benefit of agent less solution is two fold, 1) Do not have to install agents on the host machine. 2) Effective in monitoring workloads running in managed containers.
Orca security, ability of side-scanning technology examines block storage out of band via a software-as-a-service (SaaS) platform.

Puntos a favor:

Agent less no installation required. Simple 3 step process to connect account and start monitoring. Extensive deep insight into installed packages within container. Clear categorization of alerts as Imminent compromises, Hazardous, Informational with color coding for clear visibility. Also builds digital asset inventory for tracking different types cloud based assets ex: S3 buckets, EC2 instances. Easy to connect multiple accounts across AWS, Azure, GCP. Under Vulnerability management some of the key features to highlight are Asset Discovery, Asset Tagging, Network Scanning, Patch Management,Vulnerability Assessment,Web Scanning, Risk Management and Policy Management. Couple of the key cloud security features to highlight are Endpoint Management,Threat Intelligence,Vulnerability Management, Intrusion Detection System, Behavioral Analytics, Encryption and Application Security. Ease of integration was one of the reason to consider Orca security solution.

Puntos en contra:

Reporting and user interface are immature, but improving, not real time. This is near real time solution depends on frequency of scanning. VM specific details if consolidated as actionable insights will be very helpful to narrow our focus to relevant issues (ex: identified affected packages within a container is great, giving link to specific patches will be very helpful.

Jeremy
Cloud Security Engineer en Japón
Servicios financieros, 51-200 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Alternativas consideradas previamente:

Super Easy to Setup and Start Managing Your AWS Risks

5,0 hace 4 años

Comentarios: Not having to deal with agents combined with direct integration with our ticking system has saved us countless hours of precious engineering time. Because of this, we have gained tremendous value from the product since we can effectively manage AWS risks while focusing on creating more features and values for our customers.

Puntos a favor:

Since Orca Security does not require any agents to install, setup took less than five minutes. We are also use multiple AWS accounts and since setup was simple, within less than thirty minutes, we had a single pane view of most of our AWS risks. In addition, since Orca Security integrates with Atlasssian Jira, with only one click, we could quick open remediation tickets for high risk vulnerabilities.

Puntos en contra:

Although Orca Security offers a ton of AWS coverage, I'd like to see more work with AWS RDS and AWS networking services such as VPC and Security Groups.

Jonas
Senior Security Engineer en Brasil
Servicios financieros, 201-500 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Alternativas consideradas previamente:

Faster and Stroger that´s Orca Security

5,0 el año pasado

Comentarios: Faster and easier deployment, full visibility into AWS and Azure.

Puntos a favor:

Easy deploy and powerfull visibility it´s most values of Orca.

Puntos en contra:

Lack of visibility into the on-premises environment

Jonathan
CISO en EE. UU.
Seguros, 201-500 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Alternativas consideradas previamente:

Wide, Accurate Coverage with No Effort

5,0 hace 4 años

Comentarios: The best I've had with any vendor.

Puntos a favor:

The agent-less service deployed immediately, with no effort, and replaced three different products. The false positive rate is low. The information presented is easily and immediately actionable. The product has allowed me to reduce effort by 90% of an FTE.

Puntos en contra:

I would like to feed the raw data to our data warehouse, which is not yet possible, though it is coming.

Aristide
Product Security Engineer en Países Bajos
Comercio minorista, 501-1.000 empleados
Ha utilizado el software durante: Más de un año
Fuente de la opinión

An efficient, All-In-One entry level solution to start tackling Cloud security issues.

4,0 hace 2 años

Comentarios: Thanks to Orca we were able to quickly scale our vulnerability management program.

Puntos a favor:

Very easy to set-up. Top-notch customer follow-up and support. Continual solution improvement included in the pricing. Single pane of glass visibility into your Cloud infrastructure with a powerful query language and automation features.

Puntos en contra:

Limitations of agent-less scanning. Container and Kubernetes scanning could be more developed.

Nick
Security Architect en EE. UU.
Hospital y atención sanitaria, 501-1.000 empleados
Ha utilizado el software durante: 1-5 meses
Fuente de la opinión

Alternativas consideradas previamente:

Easy Quick Win

5,0 hace 2 años

Comentarios: Awesome. Coming from nothing deployed to now seeing everything in AWS is awesome and scary at the same time. But it quickly helped us become more aware and more secure in deploying our AWS Infrastructure.

Puntos a favor:

The on-boarding team was great, Scott and Joshua were and are still very helpful, Also the easy of use is critical to get action items out of the Alerts.

Puntos en contra:

Support needs to be more engaged and ensure timeline (SLA's) are meet or at least presented.

Charbel
Senior Security Engineer en Australia
Servicios financieros, 1.001-5.000 empleados
Ha utilizado el software durante: Más de dos años
Fuente de la opinión

Alternativas consideradas previamente:

Swim with ORCA. It will change your world

5,0 el año pasado

Comentarios: Great experience. The fact they take feedback and make it happen is great.

Puntos a favor:

Easy of deployment. I can deploy and auto deploy to environments

Puntos en contra:

Nothing. Its great. I have no issues with the product

Simon
Senior Application Security Engineer en RU
Administración educativa, 501-1.000 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Probably the best Cloud Native Application Protection Platform I've used

5,0 hace 2 años

Comentarios: Orca solves several problems we regularly face including producing asset inventories, helping with compliance, and providing focussed mitigation of security vulnerabilities. Orca's dashboards provide the necessary insights into the latest threats to allow a more focused application of security resources.

Puntos a favor:

Orca's agentless side-scanning techniques mean that all assets are automatically scanned - even if not running. Their dashboards provide an intuitive, easy to digest view of the current state of application security without being swamped by alerts and information. Orca provides an excellent way of producing an inventory of assets - particularly useful for ephemeral assets that are perpetually being created and destroyed. The compliance feature is also useful for auditing purposes. The recently introduced attack paths feature shows graphically how an attacker could gain access and potentially pivot through the system.

Puntos en contra:

Because of the way Orca's side-scanning technology works using snapshots, the downside is that the scanning is not performed in real-time so cannot provide true xDR capabilities. It would also be useful if older alerts were automatically dismissed after a while when the vulnerability is no longer detected. This would help to reduce the total number of vulnerabilities and alerts that are displayed in the dashboards.

Michael
IT Manager en Israel
Software informático, 51-200 empleados
Ha utilizado el software durante: Más de un año
Fuente de la opinión

Orca Security review

5,0 el año pasado

Comentarios: Orca Security is constantly reviewing our AWS cloud environment security posture keeping our business as safe as possible

Puntos a favor:

The most I like about Orca is its extensive collection of security check for our AWS environment, also that Orca is always working on new features and new improvements

Puntos en contra:

I wish there was also a live scanner, but I guess its not part of the product or how its works, also if the price was lower

Weryke
Deputy CISO en EE. UU.
Automoción, 5.001-10.000 empleados
Ha utilizado el software durante: Más de un año
Fuente de la opinión

Innovative Cloud posture tool that defined a new approach that makes use so easy.

5,0 hace 2 años

Comentarios: Exceptional, I have already recommended to peers who have also purchased.

Puntos a favor:

Ability to discovery new assets only having role built in parent org. It's visibility also of back plane to reduce false positives. Responsiveness of company to implement change to functionality and UI.

Puntos en contra:

I would say API visibility but that is already in Beta now.

Aaron
Director of Cloud Security en EE. UU.
Servicios financieros, 1.001-5.000 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Agentless Cloud Security

5,0 hace 4 años

Comentarios: With other tools we struggled with complete visibility into our cloud. Deploying cloud scanners is a hassle as is agents and we had no visibility into our containers. This product provided all of that in the much coveted "single pane of glass."

Puntos a favor:

The fact that the gaining complete visibility into our cloud workload is agentless and that gives us a complete view into our configurations, VM's, containers and security.

Puntos en contra:

At this point everything is headed in the right direction.

Brian
Director of Information Security en EE. UU.
Salud, bienestar y deporte, 1.001-5.000 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Orca for the Cloud

4,0 hace 2 años

Comentarios: This is a small, fast moving company, which really cares about their customers and their product.

Puntos a favor:

How easy it was go get up, running, and scanning. They really listen to Feature requests and get them in quickly.

Puntos en contra:

Some reporting issues and SIEM data passing early on. This has mostly been addressed via feature requests.

Kevin
Senior Vuln Mgmt Lead en EE. UU.
Seguros, 5.001-10.000 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Orca Review

4,0 el año pasado

Comentarios: Orcas ability to create custom reporting per cloud computing module has been crucial in reporting for our vulnerability remediation. Our internal teams have the ability to rescan items on demand as well to ensure things are being fixed within SLA

Puntos a favor:

Orca has been a crucial tool for our enterprise to to enhance our visibility into our cloud resources. Ontop of being a great product, their support has been outstanding in answering all of our questions, fixing bugs, and expediting our open cases.

Puntos en contra:

The only dislikes of Orca that I have emphasized to their support team is around vulnerability management reporting and navigation within the tool. They have since released the Discovery module that allows us to create custom rules to provide the reports we need. I would like to see them continue to enhance their dashboarding capabilities for vulnerability trend data.

Usuario verificado
Usuario de Linkedin verificado
Software informático, 201-500 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Alternativas consideradas previamente:

Excellent CSPM/CWPP

5,0 el año pasado

Comentarios: Orca helps us maintain and improve our cloud security by prioritizing and contextualizing findings

Puntos a favor:

Incredibly easy setup and 100% visibility of cloud assets

Puntos en contra:

It would be helpful to group similar findings across scaleable infrastructure rather than showing each finding individually

Jon
Vice President, Technology Security, Risk & Compliance en EE. UU.
Tecnología y servicios de la información, 501-1.000 empleados
Ha utilizado el software durante: 1-5 meses
Fuente de la opinión

Alternativas consideradas previamente:

Orca is a great product

4,0 hace 3 años

Comentarios: It was a great experience.

Puntos a favor:

I liked the side scanning technology availab.e

Puntos en contra:

The price was super high for a new to market tool.

Doug
CSO en EE. UU.
Servicios de información, 5.001-10.000 empleados
Ha utilizado el software durante: Más de un año
Fuente de la opinión

Lightning Fast Deployment and Accurate Results

5,0 hace 3 años

Comentarios: We've been able to rapidly get our arms around our cloud configuration and vilnerability management and reduce our risk

Puntos a favor:

Within minutes we were able to deploy this product and begin receiving accurate and actionable insight. There is no performance impact, no agent deployment to worry about and it just works. We were able to integrate this into our devops toolchain and drive results directly to the people who will remediate.

Puntos en contra:

We're still adjusting to the new UI, but that's just familiarity, there is really nothing we don't like about the software.

Alexey
Security Engineer en EE. UU.
Construcción, 201-500 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Agentless Solution with quality results

5,0 hace 2 años

Puntos a favor:

Ease of deployment and accuracy of resutlts

Puntos en contra:

Some features are clunky have to escape out of investigation panel multiple times.

Andrew
Security Engineer II en EE. UU.
Telecomunicaciones, 201-500 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Orca's SideScanner is a game changer.

5,0 hace 2 años

Comentarios: Orca is solving our visibility issue. Without it, we wouldn't have been able to triage log4j, see malware in our environments, investigate vulnerable cloud instances, and a range of other basic but tricky cloud problems.

Puntos a favor:

Orca's SideScanning technology is excellent. The fact that it doesn't require an agent and is still able to provide as much insight as it does is truly amazing.

Puntos en contra:

Orca needs to figure out how to separate the wheat from the chaff. There are always a lot of vulnerabilities that appear in our console from old kernel versions or something that has already been patched that we're still getting alerts on.

Grant
Manager of Security Operations en EE. UU.
Banca, 1.001-5.000 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Easy to set up and quick return on investment

5,0 hace 2 años

Comentarios: Overall experience has been great

Puntos a favor:

How easy it is to set up and the visibility we get

Puntos en contra:

I have trouble with the querying language

Ie
DevSecOps Engineer en Estonia
Software informático, 1.001-5.000 empleados
Ha utilizado el software durante: 6-12 meses
Fuente de la opinión

Great company! Awesome product! Amazing staff!

5,0 hace 11 meses

Comentarios: Great team, useful product! I loved working with Orca Security as vendor! Their product provided meaningful insights into overall project security and what can be done better on our side!

Puntos a favor:

I honestly love their innovative product! Used it with AWS cloud infrastructure - only really cool benefits!

Puntos en contra:

Nothing, really! The are clock-sharp in resolving any issues, hepling with setup and configuration, everythin was perfect!

Giles
Information Security Manager en RU
Deportes, 501-1.000 empleados
Ha utilizado el software durante: 1-5 meses
Fuente de la opinión

Excellent Solution

5,0 el año pasado

Comentarios: Orca are really easy to work with, they move at your pace and provide as much support as you need to properly evaluate the product then bring it into production.

Puntos a favor:

Easy integration and automation, very quick time to value, aggregation of alerts, automatic prioritisation, recognition of alternative mitigations, mapped attack paths, responsive support and product development.

Puntos en contra:

Better at AWS than Azure currently but still developing