AWS Security Hub vs Orca Security comparison

Read 27 Orca Security reviews

7,644 Views
5,045 Comparison Views

100% willing to recommend

AWS Security Hub

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Nov 2, 2025

Orca Security and AWS Security Hub compete in cloud security, with Orca having an edge due to its broader multi-cloud visibility and advanced scanning technology.

Features: Orca Security offers SideScanning for agentless visibility, prioritization of security tasks based on importance, and seamless container posture management. AWS Security Hub integrates natively with AWS services, provides real-time alerts, and focuses on compliance tracking within AWS infrastructures.

Room for Improvement: Orca Security could benefit from better automatic remediation and support expansion beyond cloud environments. Enhancing dashboard presentation and more frequent on-demand scans are needed. AWS Security Hub needs to improve integration with other cloud platforms and tools, as well as enhance real-time scanning and customization features.

Ease of Deployment and Customer Service: Orca Security ensures easy deployment through its agentless approach, excelling in user experience with rapid support and feedback integration. AWS Security Hub integrates well with AWS services but faces challenges in multi-cloud adaptation and lacks real-time support responsiveness.

Pricing and ROI: Orca Security, while costly upfront, justifies expenses with high ROI from overhead reduction and comprehensive coverage. AWS Security Hub offers a cost-effective pay-as-you-go model for AWS users but may not deliver the same ROI for complex multi-cloud needs.

To learn more, read our detailed AWS Security Hub vs. Orca Security Report (Updated: December 2025).

AWS Security Hub vs. Orca Security

December 2025

Download the complete report

Helped 881,707 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Security Hub

Ranking in Cloud Security Posture Management (CSPM)

15th

Average Rating

7.6

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Security Orchestration Automation and Response (SOAR) (7th)

Orca Security

Ranking in Cloud Security Posture Management (CSPM)

7th

Average Rating

8.8

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Vulnerability Management (10th), Container Security (10th), Cloud Workload Protection Platforms (CWPP) (5th), API Security (4th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (8th), Cloud Detection and Response (CDR) (3rd), AI Security (7th)

Mindshare comparison

As of February 2026, in the Cloud Security Posture Management (CSPM) category, the mindshare of AWS Security Hub is 3.6%, down from 4.5% compared to the previous year. The mindshare of Orca Security is 4.9%, down from 6.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM) Market Share Distribution
Product	Market Share (%)
Orca Security	4.9%
AWS Security Hub	3.6%
Other	91.5%

Cloud Security Posture Management (CSPM)

Featured Reviews

Karthik Ekambaram

Director at Scybers

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Read full review

reviewer2800203

Assistant Manager at a manufacturing company with 10,001+ employees

Cloud posture management has improved remediation and optimizes costs with contextual risk insights

Since I have not used Orca Security for 10 months, I am uncertain what areas still need improvement, as they may have rolled out features that addressed issues I faced in the past. However, I can say the tool is good. A few things could potentially be improved, particularly regarding false positives and the UI. What I observed is that they release updates to the platform without notifying the customer. Every time the UI is upgraded, they release something without notification. This could be a slight improvement. If they released some kind of notification to just inform the customer about UI changes, the customer would be aware of the changes that Orca Security is making in the backend.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of the solution stems from the fact that it is easy to manage...It is a scalable solution."

"Very good at detection and providing real-time alerts."

"Within AWS Security Hub, there is a feature for aggregating and prioritizing security findings which allows for better risk prioritization based on misconfiguration, as they know AWS thoroughly."

"The solution shows us our compliance score."

"AWS Security Hub can check your infrastructure against multiple compliance frameworks. You can turn on or off specific frameworks based on your needs."

"The best feature of AWS Security Hub is that you can get compliance or your cloud's current security posture."

"Easily integrates with third-party tools"

"Finding out if your infrastructure is secure is a valuable feature."

More AWS Security Hub pros

"Orca's SideScanning is the biggest feature. It's the 'wow' factor... With Orca's SideScanning, they just need permissions for your account and that makes it so simple."

"Orca Security has updated its interface, making it more user-friendly. I find it particularly useful as it allows me to easily navigate the dashboard and prioritize actions based on severity and criticality."

"Orca Security has patented technologies. It's an agentless solution, so you don't need to install an agent. Instead, it contacts your account provider and fetches metadata, eliminating the need for snapshots or reserved space to copy client infrastructure."

"I find Orca Security's CIEM feature invaluable, as it focuses on entitlement and posture management, identifying assets with older OS versions, and asset misconfiguration."

"One of the valuable features of Orca Security is its design and options that allow flexible filtering and user-friendly visualization."

"I would rate the quality of support as nine stars out of ten due to their quick and helpful responses."

"Orca gives you great visibility into your assets. It shows you the issues and the things that you need to attend to first, by prioritizing things. You can see a lot of information that is not always visible, even to DevOps, to help you know about the machines and their status. It's very easy to see everything in a single dashboard. That makes it a very useful tool."

"Another valuable feature with Orca, something that's not talked about enough, is its ability to rank your gaps and your tasks... You can get visibility with agents and there are a lot of ways to do that. But the ranking and the context across the entire environment, that is what is unique about Orca."

More Orca Security pros

Cons

"We need more granular-level customizations to enable or disable the rules in AWS Security Hub."

"AWS Security Hub's configuration and integration are areas where it lacks and needs to improve."

"Security needs to be measured based on their own criteria. We can't add custom criteria specific to our organization. For example, having an S3 bucket publicly available might be flagged as a critical alert, but it might not be critical in a sandbox environment. So, it gets flagged as critical, which becomes a false positive. So, customization options and creating custom dashboards would be areas for improvement."

"From an improvement perspective, there is a need to add more compliance since, right now, AWS Security Hub only provides four to five compliances to control the tool."

"It is not flexible for multi-cloud environments."

"I would like a more fine-grained capability for creating custom rules and a more user-friendly experience programmatically in writing queries and configuring custom security rules, making it quicker and easier."

"There is room for improvement in implementing AI capabilities."

"The solution lacks self-sufficiency."

More AWS Security Hub cons

"Orca Security can be improved as there should be some kind of central pane of glass. Similar to how cloud management works, Orca Security should have something comparable."

"They can expand a little bit in anti-malware detection. While we have pretty good confidence that it's going to detect some of the static malware, some of the detections are heuristics. There could be a growth in the library from where they're pulling their information, but we don't get a lot of those alerts based on the design of our products. In general, that might be an area that needs to be filled since they offer it as a service within it."

"The solution could improve by making the dashboards more elaborative and more descriptive."

"It's not all clouds that they are currently onboarded with. For instance, they are not yet with public cloud and many other private clouds."

"Orca Security could improve its ticket creation process."

"The documentation for Orca Security could be improved."

"I have concerns about OCI support. When I work with Orca Security, the support for OCI is limited, so I cannot effectively work with the OCI environment."

"I would like to see better customization options for security frameworks and better integration with reporting tools like Power BI or Grafana dashboards."

More Orca Security cons

Pricing and Cost Advice

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"There are multiple subscription models, like yearly, monthly, and packaged."

"The price of AWS Security Hub is average compared to other solutions."

"Security Hub is not an expensive solution."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"The price of the solution is not very competitive but it is reasonable."

"The pricing is fine. It is not an expensive tool."

"AWS Security Hub's pricing is pretty reasonable."

"The price is a bit expensive for smaller organizations."

"I think their pricing model is aligned with market demand. Of course, Orca could probably better align their pricing model with the needs of smaller businesses as well as some larger-scale enterprises with millions of assets. But in all fairness, I think the Orca sales team has been accommodating and ensured that we're happy with the pricing."

"Its license is a bit expensive."

"The most expensive solution is Palo Alto. They claim to be very robust. The next most expensive is Wiz, followed by Orca and all the rest."

"Orca is very competitive when compared to the alternatives and is not the most expensive in the market, that's for sure."

"The pricing depends on how many assets you have running in your cloud and how many environments you have. If you have a dev environment, test environment, and a production environment then it's really important that you have coverage for all of them."

"Orca Security charges are based on cloud workloads. So, it's based on workloads. If we look at one feature, it might be expensive."

"It is the cost of the visibility that you get. When you really sit down and think about what do you need to do to secure an environment with a low impact on the business, and you take a look out into the world, I think this tool is well justified around cost."

More Orca Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

881,707 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at a comms service provider with 10,001+ employees

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

11%

Financial Services Firm

11%

Manufacturing Company

10%

Government

Financial Services Firm

14%

Computer Software Company

13%

Manufacturing Company

10%

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	5
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	7
Large Enterprise	8

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...

What do you like most about AWS Security Hub?

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.

What needs improvement with AWS Security Hub?

What do you like most about Orca Security?

It's for protection. It's an agentless tool. We don't need to install anything at a customer's premises. We can just scan the entire assets in the cloud.

What needs improvement with Orca Security?

Identifying areas in Orca Security that have room for improvement is challenging, as there are multiple considerations including price, customization, AI, UI, and factors that could make it better ...

What is your primary use case for Orca Security?

My use case involves being in charge of the integration of this technology for over 100 clients in different environments.

Microsoft Sentinel vs AWS Security Hub

Comparisons

Compared 36% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 8% of the time

Wiz vs AWS Security Hub

Compared 7% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 5% of the time

Splunk Enterprise Security vs AWS Security Hub

Compared 2% of the time

More AWS Security Hub Competitors

Wiz vs Orca Security

Compared 20% of the time

Upwind vs Orca Security

Compared 7% of the time

Microsoft Defender for Cloud vs Orca Security

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Orca Security

Compared 4% of the time

Google Cloud Security Command Center vs Orca Security

Compared 2% of the time

More Orca Security Competitors

Product Reports

Download AWS Security Hub product report

AWS Security Hub

January 2026

Download Orca Security product report

January 2026

Also Known As

SQRRL

No data available

Overview

AWS Security Hub is a comprehensive security service that provides a centralized view of security alerts and compliance status across an AWS environment. It collects data from various AWS services, partner solutions, and AWS Marketplace products to provide a holistic view of security posture. With Security Hub, users can quickly identify and prioritize security issues, automate compliance checks, and streamline remediation efforts.

The service offers a range of features including continuous monitoring, threat intelligence integration, and customizable dashboards. It also provides automated insights and recommendations to help users improve their security posture. Security Hub integrates with other AWS services like Amazon GuardDuty, AWS Config, and AWS Macie to provide a unified security experience. Additionally, it supports integration with third-party security tools through its API, allowing users to leverage their existing security investments.

With its user-friendly interface and powerful capabilities, AWS Security Hub is a valuable tool for organizations looking to enhance their security and compliance posture in the cloud.

Amazon Web Services (AWS)

Orca Security provides comprehensive security management with agentless visibility and SideScanning technology, ensuring efficient threat detection without performance impact.

Orca Security offers agentless visibility across multi-cloud environments, streamlining security management with features like SideScanning technology and centralized security tools. It focuses on automation, vulnerability management, and compliance checks, enhancing a company's security posture with real-time alerts and integrated threat detection. Its intuitive interface prioritizes critical issues, making it suitable for managing DevSecOps processes efficiently.

What are the key features of Orca Security?

Agentless Visibility: Gain comprehensive insights into cloud environments without deploying agents.
SideScanning Technology: Detect threats and vulnerabilities efficiently across platforms.
Comprehensive Security Management: Centralizes security across AWS, GCP, and Azure with minimal setup effort.
CIEM Feature: Enhances security posture with integrated identity and access management.
Real-Time Alerts: Provide immediate awareness of security threats and vulnerabilities.
Automation and Compliance: Streamline processes with automated vulnerability management and compliance checks.

What benefits and ROI should companies look for in Orca Security?

Centralized Management: Simplifies security operations by consolidating tools across cloud environments.
Improved Security Posture: Reduces alerts and manages threats effectively with detailed insights.
Efficient Threat Detection: Enhances response capabilities with integrated threat detection and real-time alerts.
Easy Deployment and Setup: Facilitates quick implementation without complex configurations.
Enhanced Integration: Supports seamless integration with existing security frameworks and processes.

Companies in industries such as finance, healthcare, and technology leverage Orca Security for cloud security posture management, ensuring compliance with standards and securing applications and databases. Its agentless approach provides comprehensive visibility across AWS, GCP, and Azure, enhancing risk assessment and vulnerability management without impacting asset performance.

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com

BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino