Listing Thumbnail

    Orca Security CNAPP Cloud Security Platform

     Info
    Free Trial
    Vendor Insights
    Quick Launch
    Agentless Cloud Security in a Single, Complete Platform with 100% Coverage
    Listing Thumbnail

    Orca Security CNAPP Cloud Security Platform

     Info

    Overview

    Play video

    Orca Security is the true Cloud Native Application Protection Platform (CNAPP) that identifies, prioritizes, and remediates risks and compliance issues across all of your workloads, configurations, and identities on AWS. Orca offers the industrys most comprehensive cloud security solution in a single platform, eliminating the need to deploy and maintain multiple point solutions.

    FAST TIME TO VALUE: The Orca CNAPP Platform is agentless first, and connects to your environment in minutes using patented SideScanning™ technology that provides deep and wide visibility into your cloud environment, without requiring agents. In addition, Orca offers a lightweight agent for organizations that require real-time protection for critical workloads.

    RISK PRIORITIZATION: Orca effectively prioritizes risks by applying a granular risk score to each alert, and recognizes when seemingly unrelated issues can be combined to create dangerous attack paths straight to your crown jewels.

    FULL SDLC SECURITY: The Orca platform shifts security left by seamlessly integrating into the CI/CD process so that applications can be secured from code to cloud and back.

    AI-POWERED: Orca is at the forefront of leveraging Generative AI for simplified investigations and accelerated remediation, reducing required skill levels and saving cloud security, DevOps, and development teams time and effort, while significantly improving security outcomes.

    PURPOSE-BUILT CNAPP: Orca unifies many different point solutions in one platform, including CSPM, CWPP, CIEM, DSPM, Container security, API security, AI-SPM, and much more.

    Sign up for a demo to uplevel your cloud security and get the fastest time to value available in the industry: https://orca.security/demo/ 

    Additional platform licensing options are not shown in this listing but are available via Private Offer. Please email aws@orca.security .

    Highlights

    • Visibility to all your IAAS and PAAS assets including EC2, Containers, S3 buckets using account level read only permissions
    • Detect compromises, vulnerabilities and risky configuration within minutes
    • No impact on your assets, grows automatically with your cloud account

    Details

    Delivery method

    Features and programs

    Vendor Insights

     Info
    Skip the manual risk assessment. Get verified and regularly updated security info on this product with Vendor Insights.
    Security credentials achieved
    (3)

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Quick Launch

    Leverage AWS CloudFormation templates to reduce the time and resources required to configure, deploy, and launch your software.

    Pricing

    Free trial

    Try this product free according to the free trial terms set by the vendor.

    Orca Security CNAPP Cloud Security Platform

     Info
    Pricing is based on contract duration. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.

    1-month contract (4)

     Info
    Dimension
    Description
    Cost/month
    Small
    Small starter pack of concurrent workloads (EC2) per month
    $7,000.00
    Small-Medium
    Small-Medium starter pack of concurrent workloads (EC2) per month
    $12,000.00
    Medium
    Medium starter pack of concurrent workloads (EC2) per month
    $17,000.00
    Large
    large starter pack of concurrent workloads (EC2) per month
    $30,000.00

    Vendor refund policy

    Contact us

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Support

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    0 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    0%
    0%
    0%
    0%
    0%
    0 AWS reviews
    |
    196 external reviews
    External reviews are sourced from G2  and are not included in the star rating for this product.
    Education Management

    I have been supporting and learning the Orca product to deploy the VM alerting.

    Reviewed on Nov 19, 2024
    Review provided by G2
    What do you like best about the product?
    The Orca Alerts Dashboard is very useful in the sense that it contains a ton of features, ease of integration and use as far as creating new customized dashboards.
    Orca has already pre-selected the best practice alerts for your company to focus on, by pulling them in from all of the most pertienent compliance frameworks enabling you meet understand and meet your compliance needs.
    What do you dislike about the product?
    I will say that my organization has been involved with assisting in beta groups to test and validate data and feature functionality. Orca has many new releases planned for 2025 and I'm hoping the new Compliance service will be released ASAP.
    What problems is the product solving and how is that benefiting you?
    Orca Security is enabling my Cloud Security team a hollistic view into our overall cloud posture management across all three of our cloud service providers from one tool.
    Automotive

    Orca CNAPP

    Reviewed on Nov 14, 2024
    Review provided by G2
    What do you like best about the product?
    What I like best is its agentless architecture; there's no need to install agents on each workload, which significantly reduces friction and speeds up deployment across our cloud estate.

    Orca's compliance reporting and automated inventory give us excellent insights across our assets, which is invaluable for audit preparation.

    The contextual alerting and prioritization features in Orca are also standout advantages. It cuts through the noise by correlating security issues to highlight the most critical risks in the environment, saving time and reducing alert fatigue.

    Excellent customer support from our account team.
    What do you dislike about the product?
    Limited reporting capabilities, we had to create custom reporting platforms to track alert statistics over time.
    What problems is the product solving and how is that benefiting you?
    Orca solves the issue of being able to scan lambda and kubernetes workloads in our production environmenets and in our pipelines.
    Insurance

    IT Security Input

    Reviewed on Nov 14, 2024
    Review provided by G2
    What do you like best about the product?
    While I am a pretty casual user, Orca's API is quite simple to Operate, and I did not encounter any issues using it.
    The remediations are quite easy to use, even for a non Cloud expert like me.
    The dashboards look clean and informational.
    What do you dislike about the product?
    The API capabilities are not profound enough (I used it for visibility dashboards in other platform).
    The alerts window can get quite chaotic.
    What problems is the product solving and how is that benefiting you?
    Helps us stay compliant and provides protection and visibilty in everything that relates to Cloud.
    Nilay A.

    In-Depth Cloud Security Monitoring and Vulnerability Detection

    Reviewed on Nov 14, 2024
    Review provided by G2
    What do you like best about the product?
    The platform offers clear visibility into vulnerabilities and compliance risks, helping us prioritize and resolve issues effectively.
    What do you dislike about the product?
    The dashboard can sometimes feel cluttered with information, making it a bit overwhelming for newer users to navigate efficiently.
    What problems is the product solving and how is that benefiting you?
    Orca Security has greatly improved our cloud visibility by giving us agentless monitoring across all assets, which traditional tools often miss. It simplifies our security operations by consolidating vulnerability management, compliance, and threat detection into one platform. The risk prioritization feature is a huge benefit, allowing us to focus on the most critical issues first, saving time and resources.
    Steven B.

    Fantastic, powerful tool for cloud security

    Reviewed on Nov 13, 2024
    Review provided by G2
    What do you like best about the product?
    Orca provides top-tier dashboards and easy dashboard customization which quickly surfaces critical risks.
    Orca support replies rapidly and consistently works to resolve issues.
    Orca installation in 2/3 of our main cloud environments was a smooth process, and the last environment took just an extra hour of work. Overall, a very smooth onboarding process, and great training resources were provided.
    Orca provides incredibly rich, useful data about the risks it detects, with very low/none false positives.
    What do you dislike about the product?
    The compliance modules currently load extremely slowly, lack CIS critical controls v8.1, and waiting for the promised module rewrite next year sucks.
    Orca knowledgebase documentation is tied to your Orca login. To faciliate non-technical staff (or folks who don't need console access) working with the tool, it would be great if they were decoupled.
    Exporting risk data to CSV from Orca often requires selecting which of 119-250+ columns I want, at least once, unless you like getting a 1 GB CSV file (wow!)
    Exporting to CSV frequently hangs (probably due to the default enormous CSV size), requiring the usage of scheduled reports, which is less convenient.
    What problems is the product solving and how is that benefiting you?
    Orca is an incredibly powerful tool. We're using it to detect vulnerabilities in virtual machines, misconfigured serverless functions, excessive IAM policies, unhardened virtual machines, VMs missing critical protective software, VMs under attack, and so much more, and that's just the tip of what Orca can do.
    View all reviews