Orca Security

Cloud security platform for AWS, Azure, and GCP environments

About Orca Security

Got more than 100 cloud assets? Orca Security is a cloud security platform designed to help businesses detect and identify vulnerabilities, malware, misconfigurations, weak and leaked passwords, lateral movement risk, and high-risk data across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP) environments.

Orca SideScanning™ technology is a radically better approach because Orca doesn’t go inside each workload to fetch data. Instead, it uses an out-of-band process to reach cloud workloads through the runtime storage layer and combines this with metadata gathered from cloud provider APIs. In this way, Orca is able to provide deep and contextualized visibility of cloud environments. It covers 100% of an organization’s assets with absolutely no agent or network scanner.

Orca Security prioritizes risk after assessing the relationships between assets, and can notify IT DevOps and security teams about threats through Slack, and initiate remediation workflows in Jira and ServiceNow. Orca enables businesses to identify unsecured high-risk data such as personally identifiable information (PII), and helps meet compliance mandates such as PCI, HIPAA, CIS, ISO 2700, SOC2, CCPA, and GDPR.

Administrators can use an Open API to connect the system with third-party cloud providers to retrieve data, synchronize processes, and configure Orca Security's dashboard according to business requirements.

Pricing starting from:

N/A

  • Free Version
  • Free Trial
  • Subscription

Key benefits of Orca Security

Detects all important risks in cloud environments—both workload and control plane.

Security teams don’t have to update agents or signature packs to get a hold of the latest data, because Orca curates dozens of vulnerability, exploit, threat intelligence, malware, and leaked password databases to give customers the widest coverage from day one.

Integrates with any cloud environment in minutes without any side effects on performance and availability.

Since there’s no reliance on per-asset integration, customers don’t have to settle for partial deployment and visibility. Even paused or stopped machines are brought to light.

Prioritizes alerts based on all available data, presenting a manageable number of alerts.

Alerts can automatically push to Slack, or customers can click a button to kick-off workflows in Jira or ServiceNow along with each alert’s precise path to remediation.

Orca eases compliance efforts and tracks progress against industry standards. For example, Orca helps meet compliance mandates such as PCI, HIPAA, CIS, SOC2, ISO 2700, CCPA, and GDPR by showing regulators evidence of the customer’s ability to identify and protect PII—as well as their ability to systematically detect vulnerabilities, malware, and improperly secured secrets.

Devices

Business size

S M L

Markets

Austria, Australia, Belgium, Canada, Switzerland, Germany, Denmark, Spain, France, United Kingdom, Gibraltar, Greenland, Ireland, Israel, Isle of Man, Iceland, Jersey, Japan, Liechtenstein, Luxembourg, Netherlands, Norway, New Zealand, Poland, Sweden, Singapore, Turkey, United States

Supported Languages

English

Pricing starting from:

N/A

  • Free Version
  • Free Trial
  • Subscription

Images

Orca Security Software - Orca Security dashboard
Orca Security Software - Orca Security onboarding
Orca Security Software - Orca Security critical alerts
View 5 more
Orca Security video
Orca Security video
Orca Security Software - Orca Security dashboard
Orca Security Software - Orca Security onboarding
Orca Security Software - Orca Security critical alerts

Features

Total features of Orca Security: 45

  • API
  • Access Controls/Permissions
  • Activity Dashboard
  • Alerts / Escalation
  • Alerts/Notifications
  • Anomaly/Malware Detection
  • Anti Virus
  • Application Security
  • Assessment Management
  • Asset Discovery
  • Asset Tagging
  • Behavioral Analytics
  • Container Scanning
  • Continuous Integration
  • DDoS Protection
  • Encryption
  • Endpoint Management
  • Endpoint Protection Software
  • IOC Verification
  • Incident Management
  • Intrusion Detection System
  • Log Management
  • Monitoring
  • Network Scanning
  • Password Protection
  • Patch Management
  • Policy Management
  • Prioritization
  • Risk Alerts
  • Risk Analytics
  • Risk Assessment
  • Risk Management
  • Runtime Container Security
  • Security Auditing
  • Third Party Integrations
  • Threat Intelligence
  • Threat Response
  • Vulnerability / Threat Prioritization
  • Vulnerability Assessment
  • Vulnerability Protection
  • Vulnerability Scanning
  • Web Scanning
  • Web-Application Security
  • Website Crawling
  • Whitelisting/Blacklisting

Alternatives

Lacework

5
#1 Alternative to Orca Security
Lacework is a cloud security and compliance software which provides automated intrusion detection, threat defence,...

Harmony Email & Collaboration

0
#2 Alternative to Orca Security
Harmony Email & Collaboration is an email security platform that provides businesses using Microsoft 365 and G Suite...

Nessus

4,7
#3 Alternative to Orca Security
Nessus is a cloud-based vulnerability assessment solution designed to help security practitioners identity and resolve...

Intezer Protect

0
#4 Alternative to Orca Security
Intezer Protect is a security orchestration, automation, and response (SOAR) software that provides businesses with...

Reviews

Overall rating

4,8 /5
(38)
Value for Money
4,7/5
Features
4,6/5
Ease of Use
4,8/5
Customer Support
4,8/5

Already have Orca Security?

Software buyers need your help! Product reviews help the rest of us make great decisions.

Write a Review!
Showing 5 reviews of 38
Verified Reviewer
Overall rating
  • Industry: Information Technology & Services
  • Company size: 1 001-5 000 Employees
  • Used Daily for 6-12 months
  • Review Source

Overall rating

  • Value for Money
  • Ease of Use
  • Customer Support
  • Likelihood to recommend 10.0 /10

Orca - Scan from the side, 0 user impact

Reviewed on 2021/02/19

We switched to a custom Linux Kernel that agent based VMS could not support. Orca was the only...

We switched to a custom Linux Kernel that agent based VMS could not support. Orca was the only solution that we found that could solve our use case.

Pros

Orca is an agentless approach to VMS. This means there is 0 user impact or performance degradation. Your Operations team does not have to manage agent roll out, it also does not need to manage upgrades/downtime. This saves you operating costs and allows your Ops team to focus on other security items.

Orca is OS agnostic, it does not matter what your development/architecture team decides to pivot to. Orca supports Windows/Linux/Mac/Containerization. It also is Cloud agnostic, have subs in Azure or AWS? Orca can handle them all with a few clicks.

The entire roll out took around 10 minutes.

Cons

There are features missing in Orca from a nice to have stand point. The product is fairly new and a lot of these enhancements are being worked on. The Orca team has been very responsive to enhancements thus far.

Aristide B.
Overall rating
  • Industry: Retail
  • Company size: 501-1 000 Employees
  • Used Weekly for 1+ year
  • Review Source

Overall rating

  • Value for Money
  • Ease of Use
  • Customer Support
  • Likelihood to recommend 8.0 /10

An efficient, All-In-One entry level solution to start tackling Cloud security issues.

Reviewed on 2022/05/23

Thanks to Orca we were able to quickly scale our vulnerability management program.

Thanks to Orca we were able to quickly scale our vulnerability management program.

Pros

Very easy to set-up.
Top-notch customer follow-up and support.
Continual solution improvement included in the pricing.
Single pane of glass visibility into your Cloud infrastructure with a powerful query language and automation features.

Cons

Limitations of agent-less scanning.
Container and Kubernetes scanning could be more developed.

Alternatives Considered

Lacework and Intezer Protect

Reasons for Switching to Orca Security

Agent-less technology so we could set it up quickly without impacting our current IT operation processes. Powerful correlation, prioritization and query engine. Reasonable pricing and top-notch customer support.
Jon R.
Overall rating
  • Industry: Information Technology & Services
  • Company size: 501-1 000 Employees
  • Used Daily for 1-5 months
  • Review Source

Overall rating

  • Value for Money
  • Ease of Use
  • Customer Support
  • Likelihood to recommend 7.0 /10

Orca is a great product

Reviewed on 2021/02/19

It was a great experience.

It was a great experience.

Pros

I liked the side scanning technology availab.e

Cons

The price was super high for a new to market tool.

Alternatives Considered

Harmony Email & Collaboration

Reasons for Choosing Orca Security

Functionality

Reasons for Switching to Orca Security

Ease of use
Brian W.
Overall rating
  • Industry: Health, Wellness & Fitness
  • Company size: 1 001-5 000 Employees
  • Used Daily for 6-12 months
  • Review Source

Overall rating

  • Ease of Use
  • Customer Support
  • Likelihood to recommend 9.0 /10

Orca for the Cloud

Reviewed on 2022/05/23

This is a small, fast moving company, which really cares about their customers and their product.

This is a small, fast moving company, which really cares about their customers and their product.

Pros

How easy it was go get up, running, and scanning. They really listen to Feature requests and get them in quickly.

Cons

Some reporting issues and SIEM data passing early on. This has mostly been addressed via feature requests.

Alternatives Considered

Lacework

Reasons for Switching to Orca Security

They had the features I needed at testing time. Lacework did not.
Simon F.
Overall rating
  • Industry: Education Management
  • Company size: 501-1 000 Employees
  • Used Daily for 6-12 months
  • Review Source

Overall rating

  • Ease of Use
  • Customer Support
  • Likelihood to recommend 9.0 /10

Probably the best Cloud Native Application Protection Platform I've used

Reviewed on 2022/05/23

Orca solves several problems we regularly face including producing asset inventories, helping with...

Orca solves several problems we regularly face including producing asset inventories, helping with compliance, and providing focussed mitigation of security vulnerabilities. Orca's dashboards provide the necessary insights into the latest threats to allow a more focused application of security resources.

Pros

Orca's agentless side-scanning techniques mean that all assets are automatically scanned - even if not running. Their dashboards provide an intuitive, easy to digest view of the current state of application security without being swamped by alerts and information. Orca provides an excellent way of producing an inventory of assets - particularly useful for ephemeral assets that are perpetually being created and destroyed. The compliance feature is also useful for auditing purposes. The recently introduced attack paths feature shows graphically how an attacker could gain access and potentially pivot through the system.

Cons

Because of the way Orca's side-scanning technology works using snapshots, the downside is that the scanning is not performed in real-time so cannot provide true xDR capabilities. It would also be useful if older alerts were automatically dismissed after a while when the vulnerability is no longer detected. This would help to reduce the total number of vulnerabilities and alerts that are displayed in the dashboards.

Showing 5 reviews of 38 Read all reviews

Orca Security FAQs

Below are some frequently asked questions for Orca Security.

Orca Security offers the following pricing plans:

  • Starting from:
  • Pricing model: Subscription
  • Free Trial: Available

Orca Security is available on annual subscriptions. Please contact Orca Security directly for pricing information.

Orca Security has the following typical customers:

51-200, 201-500, 501-1 000, 1 001-5 000

Orca Security supports the following languages:

English

Orca Security supports the following devices:

Orca Security integrates with the following applications:

Jira, Okta, ServiceNow, Slack, Sumo, Sumo Logic, Sustainability Engagement, VIA

Orca Security offers the following support options:

Email/Help Desk, FAQs/Forum, Knowledge Base, Phone Support, 24/7 (Live rep), Chat

Related categories

See all software categories found for Orca Security.