Orca Security

Orca - Scan from the side, 0 user impact

Opmerkingen: We switched to a custom Linux Kernel that agent based VMS could not support. Orca was the only solution that we found that could solve our use case.

Pluspunten:

Orca is an agentless approach to VMS. This means there is 0 user impact or performance degradation. Your Operations team does not have to manage agent roll out, it also does not need to manage upgrades/downtime. This saves you operating costs and allows your Ops team to focus on other security items. Orca is OS agnostic, it does not matter what your development/architecture team decides to pivot to. Orca supports Windows/Linux/Mac/Containerization. It also is Cloud agnostic, have subs in Azure or AWS? Orca can handle them all with a few clicks. The entire roll out took around 10 minutes.

Minpunten:

There are features missing in Orca from a nice to have stand point. The product is fairly new and a lot of these enhancements are being worked on. The Orca team has been very responsive to enhancements thus far.

Know your entire cloud sprawl in minutes

Opmerkingen: Product Integration - It's as easy as they sell it. I had it up and running in multiple accounts in no time. Support - Wonderful support and leadership team that cares about their customers. Open API - Rich and open API that allows you to extend and build on top of the product.

Pluspunten:

The extensibility of the product, and how rich the API is. I can find out almost anything about my environment. Using Orca gives me insight into my entire cloud sprawl. I can get information about malware, open-ingress to EC2 instances, and open source vuln management. The only limit to its use is imagination.

Minpunten:

Creating new alerts can be clunky. However, the Orca team is always improving and is currently working on a V2. Navigating the UI can be a bit of a challenge at times when looking for specific info. This is why I often opt for using the API over the UI.

Orca security general overview

Opmerkingen: I have enjoyed the Orca security in the sense that it gives in-depth details of vulnerability, attack path, security posture among many others

Pluspunten:

It is a reach platform which provides us with comprehensive security tooling features.

Minpunten:

The only part I have reservations about is the shift-left aspect whereby there is no known IDE extension for the CLI

Great Product

Pluspunten:

I believe Orca is an amazing tool. The fact it is agentless, can be deployed in AWS, Azure, and GCP make it an all around tool. Another reason I like Orca is the support I have gotten. The team is always available when we have issues and is able to resolve anything we see quickly.

Minpunten:

I have no cons on this product. It works as intended.

Best in class, but expensive

Pluspunten:

Orca has the complete package of security tooling available. If cybersecurity is a very important concern for your company, this is the best choice.

Minpunten:

While a complete package, they are very expensive. If you don't need all features other competitors might be more valuable for the money.