Orca Security Erfahrungen

PCI templates for compliance.Vulnerability monitoring in real time.

A little bit hard to navigate sometimes.,

I believe Orca is an amazing tool. The fact it is agentless, can be deployed in AWS, Azure, and GCP make it an all around tool. Another reason I like Orca is the support I have gotten. The team is always available when we have issues and is able to resolve anything we see quickly.

I have no cons on this product. It works as intended.

Orca has the complete package of security tooling available. If cybersecurity is a very important concern for your company, this is the best choice.

While a complete package, they are very expensive. If you don't need all features other competitors might be more valuable for the money.

I honestly love their innovative product! Used it with AWS cloud infrastructure - only really cool benefits!

Nothing, really! The are clock-sharp in resolving any issues, hepling with setup and configuration, everythin was perfect!

Easy of deployment. I can deploy and auto deploy to environments

Nothing. Its great. I have no issues with the product

Incredibly easy setup and 100% visibility of cloud assets

It would be helpful to group similar findings across scaleable infrastructure rather than showing each finding individually

The most I like about Orca is its extensive collection of security check for our AWS environment, also that Orca is always working on new features and new improvements

I wish there was also a live scanner, but I guess its not part of the product or how its works, also if the price was lower

Agentless was a very big win for me. And now with API scanning, it goes to the next level!

No dark mode. Seriously. We need to make sure that products have dark mode!

Not only does Orca work, the customer success team is always on top of things and keeping what we want for the future in mind.

Sometimes I feel like UI focuses a little too much on style rather than function.

"Security score analysis" and "from the news" areas.

Seeing already dismissed alerts & unclear algorithm for "security score analysis".

Orca is pretty simple to set up and provides a vast amount of data right out of the gate. There is very little continual maintenance needed.

The inability to create exceptions based on characteristics. Ea File path, name

Orca allows collaboration across departments to manage cloud compliance, security, and posture. The UI is simple and easy to navigate. The integrations are straightforward to setup.

Sometimes they roll out new features that don't extend to the rest of the product which can make it hard to use.

Very easy to set-up.
Top-notch customer follow-up and support.
Continual solution improvement included in the pricing.
Single pane of glass visibility into your Cloud infrastructure with a powerful query language and automation features.

Limitations of agent-less scanning.
Container and Kubernetes scanning could be more developed.

easy to use/configure, great insights and automated remediation

does not provide visibility into system activity (like applications in memory)

I like how this product identifies, prioritizes and remediates security risks and compliance issues

for started it is a difficult software or UI is complex

Orca is an agentless approach to VMS. This means there is 0 user impact or performance degradation. Your Operations team does not have to manage agent roll out, it also does not need to manage upgrades/downtime. This saves you operating costs and allows your Ops team to focus on other security items.

Orca is OS agnostic, it does not matter what your development/architecture team decides to pivot to. Orca supports Windows/Linux/Mac/Containerization. It also is Cloud agnostic, have subs in Azure or AWS? Orca can handle them all with a few clicks.

The entire roll out took around 10 minutes.

There are features missing in Orca from a nice to have stand point. The product is fairly new and a lot of these enhancements are being worked on. The Orca team has been very responsive to enhancements thus far.

I appreciate how Orca Security does side-scanning, unobtrusively collecting information about our cloud deployments, and then submitting those records through intensive scrutiny. The scan results are compared against CVEs to establish prioritized lists for mitigation efforts

Integration of Orca Security with Microsoft Teams to provide realtime alerts when issues are detected is in it's infancy at present, and we had some troubles getting it going.

Ability to discovery new assets only having role built in parent org. It's visibility also of back plane to reduce false positives. Responsiveness of company to implement change to functionality and UI.

I would say API visibility but that is already in Beta now.