Orca Security

““The ability to categorize vulnerabilities into P0, P1, P2 based on exploitability stood out,””

“Where the product continues to move forward, we are really impressed and enjoy testing new features. Between the Shift Left capabilities and offering an agent for runtime security needs, we like where things are headed.”

“By offering a seamless scan with the agentless functionality, the solution is transparent. We can scan our managed resources like containers in Kubernetes, and Orca gives us suggested improvements for roles and identity management. The list continues on for what agentless does for us.”

“All our MSSP partner has to do is go to our Orca dashboard to see alerts, and to see them according to criticality. When we have a new CVE that needs to be addressed right away, we know immediately.”

“They love it. All they have to do is go to our Orca dashboard to see alerts, and to see them according to criticality. When we have a new CVE that needs to be addressed right away, we know it immediately,”

“When we implemented Orca, it was like ‘Wow, there are many risks to review.’ The visibility we gained into what was going on in our environment was clear, precise, and most importantly, actionable.”

“When I talk to colleagues about Orca, I tell them it gives us insight across all our cloud environments—not only AWS, but also Azure and GCP. The more accounts we have, the more value we get because now we know what our people are running,”

“Orca makes it easier for us to show that we’re scanning for vulnerabilities and mitigating as appropriate. This puts merchants at ease about our security posture and helps establish trust with them.”

“Orca helped us catch it in time to nip it in the bud.”

“I appreciate being able to do that without depending on an agent for every instance,”

“We couldn’t have done that so quickly any other way.”

“There’s no excuse for overlooking problems when they’re presented right there for you. When the Orca dashboard displays ‘imminent compromise,’ it doesn’t get any clearer than that.”

“After years of dealing with agents, then seeing how easy it is to install and use Orca, I knew that its agentless approach was both a major innovation and a game changer.”

“Kohanski agrees, “And customer support too. I’ve put in a few support tickets and get responses within a few hours for someone that’s actually responding to an email chain that we can go back and forth on to resolve issues.””

“According to Pedroncelli, “I have enjoyed working with another organization that is focused on building and maintaining a good product. We have had good interactions with all the teams at Orca that we’ve connected with so far.””

““This integration improves overall security maturity while enabling a more proactive security stance,” says Pedroncelli. “For example, we can not only flag a malware alert as a critical risk, but we can view that risk within the context of the entire attack path that needs to be understood.””

““When I talk about natural data carving, I am referring to the ability to use the deep data Orca offers to dive into a specific risk scenario,” says Pedroncelli. “For example, I can investigate critical risks that are exploitable, but also have known vendor fixes. I can also add configurations such as the risk is internet-facing. In this instance, I can quickly carve from 10,000 total vulnerabilities to a specific 560 or so.””

“According to Pedroncelli, “I give the Orca Platform a 10 out of 10 on UI/UX. I like how Orca gives us clear buttons and directions to understand our data.””

““The AI query tool has probably been my most used feature so far,” says Kohanski. “It allows me to easily understand what’s deployed across environments and understand risks using natural language. I didn’t have to learn a special language or syntax.””

““Zero complaints,” says Stuart. “It’s been wonderful.””

““It’s given us the confidence that we can move really quickly,” Stuart says. “Product velocity. That’s been tremendous.””

““Orca is our mission control center. It gives us a bird’s-eye view of our security posture in minutes.””

““The answers we get from Orca get straight to the point,” Ham says. “They tell you exactly what the issue is and exactly how to remediate it. Orca has probably paid for itself in the man-hours we’ve spent securing our own environment.””

“Orca’s compliance view tells the auditors that we did the best we could to secure our environment. We can filter to show where PII is stored and it’s all documented. We can show the evidence that auditors ask for with ease.”

“We can easily filter to show where PII is stored. Since it’s all documented, we can show the evidence that auditors ask for with ease,”