• HOME
  • CATEGORIES

    • CATEGORIES

    • Browse All Categories
  • FOR VENDORS

    • FOR VENDORS

    • Log In to Vendor Portal
    • Get Started
  • REVIEWS

    • REVIEWS

    • Write a Review
    • Product Reviews
    • Vendor Directory
    • Product Comparisons
  • GARTNER PEER COMMUNITY™
  • GARTNER.COM
  • Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQPrivacyTerms of Service
    ©2026 Gartner, Inc. and/or its affiliates.
    All rights reserved.
  • Categories

    • No categories available

      Browse All Categories

      Select a category to view markets

  • For Vendors

    • Log In to Vendor Portal 

    • Get Started 

  • Write a Review

Join / Sign In
  1. Home
  2. /
  3. Orca Security
Logo of Orca Security

Orca Security

byOrca Security
in
4.6
Market Presence: Cloud-Native Application Protection Platforms, API Protection

Overview

Product Information on Orca Security

Updated 13th October 2025

What is Orca Security?

Orca Security is a software designed to provide comprehensive cloud security and compliance solutions across public cloud environments. The software offers features such as asset inventory, vulnerability management, threat detection, and risk assessment, enabling organizations to identify and prioritize security risks without agents. It integrates with major cloud platforms to deliver visibility into workloads, configurations, and data, supporting incident investigation and compliance reporting. Orca Security addresses challenges associated with securing complex cloud infrastructures by enabling users to detect misconfigurations, malware, and sensitive data exposure, contributing to improved security posture and regulatory compliance in cloud ecosystems.

Orca Security Pricing

Orca Security software typically offers a subscription-based pricing model structured around cloud asset coverage and environment size. Pricing varies according to the number of cloud workloads, accounts, or resources protected, with options for annual or multi-year subscription terms and tiered packages based on specific feature sets and organizational requirements. Custom quotes may be provided for enterprise deployments.

Overall experience with Orca Security

IT Security & Risk Management Associate
500M - 1B USD, Banking
FAVORABLE

“Significant reduction in critical and high-level vulnerabilities after the first year of use.”

5.0
Feb 22, 2026
The product is easy to use. The initial setup is very simple. In the first year of use, we managed to reduce vulnerabilities classified as High and Critical by more than 90%, considering the 3 main market clouds. Thanks to this, we considerably increased the level of governance in our cloud environments. The product has many ready-made connectors, which greatly facilitates system integration, and also provides APIs for direct consumption of key information.
Automated Translation from Portuguese
It Security & Risk Management Associate
50M - 250M USD, Services (non-Government)
CRITICAL

“Immediate Visibility and Fast Deployment, But UI Lag and Alert Noise Reported”

3.0
Jan 30, 2026
Orca Security can be considered a potential cloud-based security platform yet there is room for growth. Its unified dashboard and context-aware risk management makes the job easier for admins. Given the user-friendly dashboard, understanding the threats and compromises in the environment is fast and simple. I would suggest this platform for teams that want quick onboarding and strong coverage.

About Company

Company Description

Updated 10th November 2023

Designed for organizations operating in the cloud who need complete, centralized visibility of their entire cloud estate and want more time and resources dedicated to remediating the actual risks that matter, Orca Security is an agentless cloud Security Platform that provides security teams with 100% coverage their entire cloud environment. Instead of layering multiple siloed tools together or deploying cumbersome agents, Orca combines two revolutionary approaches - SideScanning, that enables frictionless and complete coverage without the need to maintain agents, and the Unified Data Model, that allows centralized contextual analysis of your entire cloud estate. Together, Orca has created the most comprehensive cloud security platform available on the marketplace.

Company Details

Updated 26th February 2025
Company type
Private
Year Founded
2019
Head office location
Portland, United States
Number of employees
201 - 500
Website
https://orca.security

Do You Manage Peer Insights at Orca Security?

Access Vendor Portal to update and manage your profile.

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

Top Orca Security Alternatives

Logo of Wiz CNAPP
1. Wiz CNAPP
4.7
(575 Ratings)
Logo of CrowdStrike Falcon Cloud Security
2. CrowdStrike Falcon Cloud Security
4.7
(509 Ratings)
Logo of Cortex Cloud
3. Cortex Cloud
4.5
(480 Ratings)
View All Alternatives

Peer Discussions

Orca Security Reviews and Ratings

4.6

(239 Ratings)

Rating Distribution

5 Star
66%
4 Star
31%
3 Star
3%
2 Star
0%
1 Star
0%
Why ratings and reviews count differ?

Customer Experience

Evaluation & Contracting

4.6

Integration & Deployment

4.7

Service & Support

4.6

Product Capabilities

4.6

Filter Reviews
Sort By:
Most helpful
Last 12 Months
Star Rating
Reviewer Type
Reviewer's Company Size
Reviewer's Industry
Reviewer's Region
Reviewer's Job Function
  • IT Security & Risk Management Associate
    50M-1B USD
    Banking
    Review Source

    Significant reduction in critical and high-level vulnerabilities after the first year of use.

    5.0
    Feb 21, 2026
    The product is easy to use. The initial setup is very simple. In the first year of use, we managed to reduce vulnerabilities classified as High and Critical by more than 90%, considering the 3 main market clouds. Thanks to this, we considerably increased the level of governance in our cloud environments. The product has many ready-made connectors, which greatly facilitates system integration, and also provides APIs for direct consumption of key information.
    Automated Translation from Portuguese
  • Director, IT Security and Risk Management
    <50M USD
    Finance (non-banking)
    Review Source

    Agentless Architecture Enables Broad Cloud Security and Immediate Visibility Gains

    5.0
    May 13, 2026
    We have adopted Orca Security as our primary cloud security platform and it has become the backbone of our security posture across multiple domains. What started as as CSPM purchase has expanded into a unified platform covering application security, vulnerability management, container security, IaC scanning, secrets detection and software supply chain security. The agentless architecture was a game changer - zero deployment friction, no agents to maintain, and immediate visibility across our cloud estate. The platform continues to evolve rapidly and the Orca Security team is genuinely receptive to feedback. Our dedicated customer success team maintains a healthy feedback loop so gaps are followed through effectively and efficiently. Cloud security is a fast moving space and they have consistently kept pace with our needs.
  • It Security & Risk Management Associate
    50M-1B USD
    Services (non-Government)
    Review Source

    Immediate Visibility and Fast Deployment, But UI Lag and Alert Noise Reported

    3.0
    Jan 30, 2026
    Orca Security can be considered a potential cloud-based security platform yet there is room for growth. Its unified dashboard and context-aware risk management makes the job easier for admins. Given the user-friendly dashboard, understanding the threats and compromises in the environment is fast and simple. I would suggest this platform for teams that want quick onboarding and strong coverage.
  • Specialist Cloud Information Security En
    <50M USD
    Services (non-Government)
    Review Source

    Orca Security - Good tool with less friendly UI filters as compared to other CSPM tools in market

    4.0
    Dec 16, 2025
    Orca security is one of the best tools I have worked on. First, I will talk about the UI, which has many bugs, and is not that user friendly. After we purchased this product, we started to work on automations and integrations with Jira along with integration of all our cloud accounts. Overall experience is good from scanning resources to verify alerts, Jira ticket dynamic flow. Even manual creation of Jira ticket works with automation which is the best feature I have ever seen in any CSPM tool.
  • IT SECURITY & RISK MANAGEMENT ASSOCIATE
    1B-10B USD
    Retail
    Review Source

    Comprehensive Cloud Visibility Offered by Orca Security Amid Performance Concerns

    5.0
    Dec 12, 2025
    Orca Security is a tool that provided us with an overview of all our cloud environments in a consolidated view. We are able to centrally all the necessary information to take action and reduce our cloud-related risks
...
Showing Result 1-5 of 241

Recommended Gartner Insights

  • Market Guide for Cloud-Native Application Protection Platforms
Powered by Google TranslateThis service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

This site is protected by hCaptcha and its Privacy Policy and Terms of Use apply.


Software reviews and ratings for EMMS, BI, CRM, MDM, analytics, security and other platforms - Peer Insights by Gartner
Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQsPrivacyTerms of Use

©2026 Gartner, Inc. and/or its affiliates.

All rights reserved.

User Sentiment About Orca Security
Reviewer Insights for: Orca Security
Deciding Factors: Orca Security Vs. Market Average
Performance of Orca Security Across Market Features

Orca Security Likes & Dislikes

Like

The product stands out for the wealth of information it provides, as well as the accuracy and precision of that information, and also for the remediation strategies suggested for each case. It clearly explains where vulnerabilities can be found and how to resolve them.

Automated Translation from Portuguese
Like

I like the agentless architecture of this platform as it makes deployment faster and less complex. Maintenance is minimal and visibility is immediate. Orca provides comprehensive visibility into cloud configuration risks and vulnerabilities.

Like

1. Agentless SideScanning architecture 2. Breadth of the platform (CSPM, SAST, SCA, Secrets Detection, IaC Scanning, Container Security, CI/CD pipeline security) 3. Risk Prioritization and Context Aware Alerting 4. Easy to use platform.

Dislike

For initial product integration, it is indeed possible without using agents as the advertising claims, and the information provided is extremely rich and detailed. However, to achieve a similar level of information about what exists within a Kubernetes cluster, it is necessary to manually create a connector for each cluster, or plan for this creation in Terraform modules. The connector is not complex and is very performant; it works very well.

Automated Translation from Portuguese
Dislike

The UI can be laggy sometimes, especially if you are dealing with large datasets. Some of the dashboards and reporting customization feel more technical than strategic. You may get a lot of noise and alerts in the early stages of deployment that may create some frustration for the team.

Dislike

1. Dashboard customization could be stronger. 2. Third party ticketing flows require more manual configuration and field mapping than I would expect.