Platform profile · Rank 1 of 9
Orca Security review: agentless coverage across six clouds
Short answer
Orca Security reads workloads from block storage with no agent and names seven of our eight environments, tied with Aqua for the most: AWS, Azure, Google Cloud, Oracle, Alibaba and Tencent, plus on-premises for its sensor. It scores 9.09 and ranks 1 of 9 on our coverage weights. It scores lower than others on runtime depth, integrations, risk context and pricing visibility; it publishes no price on its own site, and AWS Marketplace lists workload tiers.
Desk research from public vendor pages read in September 2026, updated 2026-10-11. Editorial assessment; we did not run the products.
Coverage score
Rank 1 of 9 on default weights. Change the weights in the coverage calculator
Which environments does Orca name?
The platform page names AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud and Tencent Cloud. The Orca Sensor page names public cloud, private cloud and on-premises.
Source: Orca Security platform overview · Read 27 Sep 2026
- Named on the vendor's pages we reviewed
- Not named on the pages we reviewed (this does not mean unsupported)
Learn more: what a vendor's list of named clouds tells you
How does Orca see workloads?
- Coverage model
- Agentless SideScanning reads each workload's runtime block storage and rebuilds its file system in a read-only view, covering Linux and Windows VMs, containers and images, and serverless.
Source: Orca agentless SideScanning · Read 27 Sep 2026
- Runtime layer
- Orca Sensor, eBPF-based, for Linux, Kubernetes and Windows; can be configured to terminate processes and shows which vulnerable packages actually execute. Optional.
Source: Orca Sensor (runtime) · Read 27 Sep 2026
- Path to first findings
- Agentless connection to each cloud account; Orca states SideScanning "deploys in minutes". No agent rollout is needed for the first inventory.
Source: Orca agentless SideScanning · Read 27 Sep 2026
What does Orca claim?
What does Orca cost?
AWS Marketplace lists four contract tiers by concurrent EC2 workloads: Small (up to 100) $7,000.00, Small-Medium (300) $12,000.00, Medium (500) $17,000.00, Large (1,000) $30,000.00. The listing has 1-month and 12-month tabs; we did not capture which term these figures belong to, so confirm the term on the listing. No price on Orca's own site.
Source: AWS Marketplace: Orca Security CNAPP Cloud Security Platform · Read 11 Oct 2026
How does Orca score on each criterion?
| Criterion | Weight | Score | Why |
|---|---|---|---|
| Clouds and environments named | 20% | 10.0tied highest in set | Names six public clouds, including Oracle, Alibaba and Tencent, plus on-premises and private cloud for its sensor. |
| Agentless workload depth | 25% | 9.8highest in set | SideScanning reads block storage out of band and covers Linux and Windows VMs, containers and images, and serverless with no agent. |
| Path to first findings | 15% | 9.0highest in set | No agent before the first inventory, and Orca states SideScanning deploys in minutes (vendor claim). |
| Risk context from day one | 15% | 9.6 | Risk scoring and attack path analysis run on one data model built from the full agentless read. |
| Runtime layer when you need it | 10% | 7.6lowest in set | The eBPF Orca Sensor adds detections and can terminate processes, but it is an optional layer and less proven than runtime-first rivals. |
| Integrations and reach | 7% | 8.2 | Covers GitHub, GitLab, Azure DevOps, Jenkins, Bitbucket and CircleCI, but the partner and market footprint is smaller than Wiz's or the platform vendors'. |
| Cost visibility before purchase | 8% | 6.5 | AWS Marketplace lists four tiers by concurrent EC2 workloads ($7,000.00 to $30,000.00); the contract term was not captured in our read, and Orca's own site has no price. |
- Clouds:
Source: Orca Security platform overview · Read 27 Sep 2026
- Agentless:
Source: Orca agentless SideScanning · Read 27 Sep 2026
- Setup:
Source: Orca agentless SideScanning · Read 27 Sep 2026
- Context:
Source: Orca Security platform overview · Read 27 Sep 2026
- Runtime:
Source: Orca Sensor (runtime) · Read 27 Sep 2026
- Integrations:
Source: Orca application security · Read 27 Sep 2026
- Pricing:
Source: AWS Marketplace: Orca Security CNAPP Cloud Security Platform · Read 11 Oct 2026
Briefings about Orca
- Which Clouds Each CNAPP Names: Nine Platforms, Eight Environments
- Agentless Reach by Workload Type: VMs, Containers, Serverless, PaaS
- Cloud Security Coverage News, September 2026: What Changed and Why It Matters
- Why Pricing Visibility Counts in a Cloud Coverage Ranking, and Why Only 8%
- Air-Gapped and Private Cloud Coverage: Where Cloud-Hosted CNAPPs Stop
- Minutes, 30 Seconds, 15 Seconds: How to Read CNAPP Speed Claims
- Orca Security or Wiz for Multi-Cloud Coverage? Where Each Scores Higher
Where does it lead, and where does it fall short?
Leads
- Highest or tied highest in set on clouds and environments named, agentless workload depth and path to first findings.
- Names seven of our eight environments, tied with Aqua for the most: six public clouds plus on-premises for its sensor.
- SideScanning reads VMs, containers and serverless from block storage with no agent, so first coverage does not wait on a rollout.
Falls short
- Lowest or tied lowest in set on runtime layer when you need it.
- Scores below 3 platforms on pricing.
- The runtime sensor is an optional layer and shallower than runtime-first platforms on the pages reviewed.
- No price on its own site (AWS Marketplace lists workload tiers), and a smaller partner and integration footprint than Wiz or the large platform vendors.
Key facts
| Ownership | Standalone vendor |
|---|---|
| Open-source project | None named |
| Best fit | Teams with workloads across several clouds, including Oracle, Alibaba or Tencent, who need a full agentless inventory before any agent rollout |
| FedRAMP | FedRAMP authorized at the Moderate impact level, per Orca Source: Orca glossary: FedRAMP · Read 11 Oct 2026 |
| Compliance frameworks | Not in our sources |
| Website | orca.security |
How does Orca compare head to head?
- Orca 9.09 v Wiz 9.03 · Orca scores higherHead to head
- Orca 9.09 v CrowdStrike 7.94 · Orca scores higherHead to head
- Orca 9.09 v Defender for Cloud 7.86 · Orca scores higherHead to head
- Orca 9.09 v Cortex Cloud 7.75 · Orca scores higherHead to head
- Orca 9.09 v Sysdig 7.67 · Orca scores higherHead to head
- Orca 9.09 v Upwind 7.63 · Orca scores higherHead to head
- Orca 9.09 v SentinelOne 7.49 · Orca scores higherHead to head
- Orca 9.09 v Aqua 7.45 · Orca scores higherHead to head
Frequently asked questions
How does Orca Security score for multi-cloud coverage?
9.09 out of 10, rank 1 of 9 on our default weights. Its highest score is on Clouds and environments named (10.0) and its lowest on Cost visibility before purchase (6.5).
Which clouds does Orca Security name?
On the pages we reviewed: AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud, Tencent Cloud and On-premises or private cloud. The platform page names AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud and Tencent Cloud. The Orca Sensor page names public cloud, private cloud and on-premises.
What does Orca Security cost?
AWS Marketplace lists four contract tiers by concurrent EC2 workloads: Small (up to 100) $7,000.00, Small-Medium (300) $12,000.00, Medium (500) $17,000.00, Large (1,000) $30,000.00. The listing has 1-month and 12-month tabs; we did not capture which term these figures belong to, so confirm the term on the listing. No price on Orca's own site.