

Orca Security and Qualys TotalCloud compete in cloud security, each offering distinct advantages. Orca Security excels with its agentless architecture and seamless CI/CD pipeline integration, while Qualys TotalCloud provides centralized security management and AI-driven risk prioritization.
Features: Orca Security uses an agentless architecture for effective visibility across multi-cloud environments without needing agents and integrates smoothly with CI/CD pipelines for enhanced security. Qualys TotalCloud provides centralized management, utilizing AI for prioritizing risks while offering comprehensive cloud security posture management and container security.
Room for Improvement: Orca Security can improve in dashboard customization, integration with more security tools, and alert management. Qualys TotalCloud could enhance the UI/UX experience, automate remediation, and better integrate with external platforms.
Ease of Deployment and Customer Service: Orca Security's agentless approach eases deployment and reduces operational overhead, although customer service experiences vary. Qualys TotalCloud is flexible in various cloud environments but could improve customer support response times and user interface friendliness.
Pricing and ROI: Orca Security's pricing is competitive given its features, yet may be costly for smaller entities, offering substantial ROI through integrations and workforce reduction. Qualys TotalCloud provides competitive pricing with valuable automation features but can be perceived as expensive. Both solutions enhance security visibility and efficiency, providing significant ROI.
Orca Security significantly improved our visibility from 30% to 100%, enabling better security posture improvements rather than just general cost savings.
This is because you do not need a team of five persons to install and update the agents in thousands of servers.
I see the benefits of Orca Security immediately because you can see the issues right after deployment, and you can correct the critical issues, so the proof of value is immediate.
We are able to scan all our assets with less human intervention and achieve overall effective outcomes.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
I would rate the quality of support as nine stars out of ten due to their quick and helpful responses.
The expertise levels could be improved.
The support team assists with issues and provides information on new updates.
On a scale from one to ten, I would rate customer support a ten.
A more efficient solution would be to provide instant call options with engineers, comparable to features offered by other tools.
The technical support from Qualys is excellent, always available 24/7 for any urgent needs.
Orca Security provides a highly scalable architecture for us.
The main limitation was that the findings were often siloed because they are different platforms.
When you onboard an organization, Orca will find new projects, folders, and resources without any additional effort required.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
I would rate its scalability a ten out of ten.
The scalability of Qualys TotalCloud is excellent, and I would rate it as ten out of ten.
When I need any support, it's very fast to get an answer from the support team.
The agentless part of it and the fact that it integrates directly with a cloud provider such as AWS helps to reduce operational overhead and potential points of failure that come with managing agents across multiple systems.
I personally have not encountered any bugs or issues with the console.
It has a lot of scanning mechanisms, which are agentless APIs, eBPF, and cloud agents, that are highly reliable.
It is a stable solution, which is why we chose it.
It offers 99.9 percent uptime.
Another improvement is in handling alerts for multiple files with the same CVE; it should provide an option to manage each file separately without affecting others.
Orca Security could improve in reporting OS package vulnerabilities, such as missing MS patches or Linux patches.
Security in today's age is important, and if a company can afford it, they should get it as it's the most valuable protection against threats.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
If we find a critical or high vulnerability on an IP or server, the remediation steps should be communicated clearly.
The initial price seemed high, however, after negotiation, the final price was ideal.
Orca Security's pricing is known to be a bit high.
Its license is a bit expensive.
In our case, replacing the tool will give us better functionalities without increasing the cost compared to what we pay today for the competitor.
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
Qualys TotalCloud offers good pricing that is affordable and competitive with the market.
Additionally, it covers a large scope of vulnerabilities, CVEs, malware, and misconfiguration.
It provided us with visibility from a central point, increasing our view from the previous thirty percent to a full one hundred percent of our cloud environment.
This technology allows for coverage of almost all cloud assets without interrupting their operations.
FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans.
This user-friendly platform provides a comprehensive inventory of all assets and allows for customized policy and control design.
Deploying a single agent provides comprehensive visibility across various cloud aspects, including workload protection, security posture management, and container security.
| Product | Mindshare (%) |
|---|---|
| Orca Security | 6.1% |
| Qualys TotalCloud | 2.4% |
| Other | 91.5% |

| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 9 |
| Large Enterprise | 16 |
| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 11 |
| Large Enterprise | 38 |
Orca Security provides comprehensive security management with agentless visibility and SideScanning technology, ensuring efficient threat detection without performance impact.
Orca Security offers agentless visibility across multi-cloud environments, streamlining security management with features like SideScanning technology and centralized security tools. It focuses on automation, vulnerability management, and compliance checks, enhancing a company's security posture with real-time alerts and integrated threat detection. Its intuitive interface prioritizes critical issues, making it suitable for managing DevSecOps processes efficiently.
What are the key features of Orca Security?
What benefits and ROI should companies look for in Orca Security?
Companies in industries such as finance, healthcare, and technology leverage Orca Security for cloud security posture management, ensuring compliance with standards and securing applications and databases. Its agentless approach provides comprehensive visibility across AWS, GCP, and Azure, enhancing risk assessment and vulnerability management without impacting asset performance.
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
We monitor all Cloud-Native Application Protection Platforms (CNAPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.