Try our new research platform with insights from 80,000+ expert users

Orca Security vs Veracode comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
1.0
Orca Security provides cost savings and efficiency through agentless design, simplifying cloud security and enhancing security posture immediately.
Sentiment score
6.5
Veracode optimizes development by automating vulnerability detection, reducing costs, improving security, compliance, and enhancing software reliability.
Orca Security significantly improved our visibility from 30% to 100%, enabling better security posture improvements rather than just general cost savings.
Cloud Security Automation Engineer at a financial services firm with 10,001+ employees
The scanners of Veracode bring status of the weaknesses in the current infrastructure. It scans and provides reports regarding the servers, the network, and the applications running on those servers.
Senior Solutions Architect at IDS Comercial
Regarding price, the evaluation should focus on how efficiently they will recover their investment, considering the time saved through the use of Veracode Fix, for example, and the ability to fix code at dev time compared to the problems faced when fixing after the product is already deployed.
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
We did see a return on investment with Veracode, as we segregated our remediation efforts, which reduced our time to delivery as well as the number of engineers needed to help us in delivering a secure solution.
DevSecOps Engineer at a tech services company with 11-50 employees
 

Customer Service

Sentiment score
7.1
Orca Security's customer service is praised for its responsiveness and efficiency, though some note inconsistencies in technical expertise.
Sentiment score
7.2
Veracode's support is praised for responsiveness and expertise, though some experience delays with complex issues.
I would rate the quality of support as nine stars out of ten due to their quick and helpful responses.
Senior Information Security Engineer at a computer software company with 10,001+ employees
The expertise levels could be improved.
Cloud Security Automation Engineer at a financial services firm with 10,001+ employees
The support team assists with issues and provides information on new updates.
Vulnerability Assessment Analyst at a computer software company with 501-1,000 employees
Access to the engineering team is crucial for faster feedback on the product fix process.
Principal Architect at a consultancy with 11-50 employees
I have communicated with the technical support of Veracode a couple of times, and this was a really great experience because these professionals know their material.
Application Security Specialist at Herrenknecht
They share detailed information via email, including screenshots or further clarification about the issue.
DevSecOps Engineer at a tech services company with 1,001-5,000 employees
 

Scalability Issues

Sentiment score
8.2
Orca Security excels in scalable, agentless management across major cloud platforms, praised for adaptability despite minor Kubernetes challenges.
Sentiment score
7.4
Veracode offers efficient scalability with cloud architecture, supporting diverse applications and user roles across industries despite minor scan delays.
When you onboard an organization, Orca will find new projects, folders, and resources without any additional effort required.
Senior Information Security Engineer at a computer software company with 10,001+ employees
The seamless integration allows us to automatically reflect any connected project from our cloud into the console.
Vulnerability Assessment Analyst at a computer software company with 501-1,000 employees
I believe Orca Security is scalable and can handle small and medium-enterprise businesses effectively.
CTO /Director at OPLIUM
Cloud solutions are easier to scale than on-premise solutions.
Senior Solutions Architect at IDS Comercial
It has a good capacity to scale effectively.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
Implementing these features into our normal CI/CD was good, so I can say that scalability is really good.
Application Security Specialist at Herrenknecht
 

Stability Issues

Sentiment score
8.3
Orca Security is rated as highly stable, with minor downtime and quick resolution of any issues by support.
Sentiment score
7.8
Veracode is praised for stability and performance despite minor glitches, with continuous improvements ensuring reliability and minimal downtime.
I personally have not encountered any bugs or issues with the console.
Vulnerability Assessment Analyst at a computer software company with 501-1,000 employees
I have experienced very little downtime.
Works at Ultraviolet Cyber
I do not experience downtime, bugs, or glitches.
CTO /Director at OPLIUM
If the Veracode server is down, we experience many issues during the scan.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
I have observed that it is not that reliable in terms of security because Veracode was not able to find some security threats in our application that existed since the product was developed.
Software Development Engineer II at Rocket Software
It's not that easy to onboard, but once they have been onboarded on the platform, and the pipeline configured alongside the product configured, it works effectively.
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
 

Room For Improvement

Orca Security needs UI simplification, better integration, enhanced features, and performance improvements to meet user expectations and industry standards.
Veracode requires improvements in reducing false positives, enhancing speed, improving integration, flexibility, support, UI, and customer service.
Another improvement is in handling alerts for multiple files with the same CVE; it should provide an option to manage each file separately without affecting others.
Senior Information Security Engineer at a computer software company with 10,001+ employees
Orca Security could improve in reporting OS package vulnerabilities, such as missing MS patches or Linux patches.
Vulnerability Assessment Analyst at a computer software company with 501-1,000 employees
Security in today's age is important, and if a company can afford it, they should get it as it's the most valuable protection against threats.
Software Developer at a tech vendor with 1,001-5,000 employees
If it could be integrated directly with code repositories such as Bitbucket or GitHub, without the need to create a pipeline to upload and decode code, it would simplify the code scan process significantly.
We had issues with scanning large applications. Scanning took a lot of time, so we kept it outside the DevOps pipeline to avoid delaying deployments.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
A nice addition would be if it could be extended for scenarios with custom cleansers.
IT App Security Senior Analyst at a transportation company with 10,001+ employees
 

Setup Cost

Orca Security offers competitive cloud workload pricing with comprehensive features and flexible, negotiable options for enterprise deployments.
Veracode's higher pricing offers comprehensive security for enterprises, posing challenges for smaller businesses, with negotiable licensing options.
The initial price seemed high, however, after negotiation, the final price was ideal.
Senior Information Security Engineer at a computer software company with 10,001+ employees
Orca Security's pricing is known to be a bit high.
Works at Ultraviolet Cyber
Its license is a bit expensive.
enterprise architect at a tech services company with 1-10 employees
It's not the most expensive solution.
Senior Solutions Architect at IDS Comercial
Overall, Veracode's pricing is lower and more scalable than many alternatives in the market.
DevSecOps Engineer at a tech services company with 1,001-5,000 employees
If there's a security gap, you'll never know the cost or effect.
 

Valuable Features

Orca Security enhances cloud security with agentless SideScanning, prioritizing risks and offering integration, automation, and real-time insights.
Veracode offers comprehensive code analysis, seamless integration, and efficient vulnerability detection, improving security and development speed with minimal manual effort.
Additionally, it covers a large scope of vulnerabilities, CVEs, malware, and misconfiguration.
Senior Information Security Engineer at a computer software company with 10,001+ employees
It provided us with visibility from a central point, increasing our view from the previous thirty percent to a full one hundred percent of our cloud environment.
Cloud Security Automation Engineer at a financial services firm with 10,001+ employees
This technology allows for coverage of almost all cloud assets without interrupting their operations.
Vulnerability Assessment Analyst at a computer software company with 501-1,000 employees
It offers confidence by preventing exposure to vulnerabilities and helps ensure that we are not deploying vulnerable code into production.
Site Leader (India) at Industrial Scientific
The best features in Veracode include static analysis and the early detection of vulnerable libraries; it integrates with tools such as Jenkins.
It fixes issues directly in the IDE while you're doing it.
IT App Security Senior Analyst at a transportation company with 10,001+ employees
 

Categories and Ranking

Orca Security
Ranking in Container Security
18th
Average Rating
9.0
Reviews Sentiment
6.9
Number of Reviews
23
Ranking in other categories
Vulnerability Management (17th), Cloud Workload Protection Platforms (CWPP) (10th), API Security (8th), Cloud Security Posture Management (CSPM) (11th), Cloud-Native Application Protection Platforms (CNAPP) (8th), Data Security Posture Management (DSPM) (9th), Cloud Detection and Response (CDR) (3rd), AI Security (8th)
Veracode
Ranking in Container Security
8th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
208
Ranking in other categories
Application Security Tools (2nd), Static Application Security Testing (SAST) (2nd), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)
 

Mindshare comparison

As of January 2026, in the Container Security category, the mindshare of Orca Security is 4.3%, down from 4.8% compared to the previous year. The mindshare of Veracode is 3.1%, down from 4.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Market Share Distribution
ProductMarket Share (%)
Veracode3.1%
Orca Security4.3%
Other92.6%
Container Security
 

Featured Reviews

Evgeny Shulga - PeerSpot reviewer
CTO /Director at OPLIUM
Cloud security has improved visibility and automated deep risk investigations across clients
Identifying areas in Orca Security that have room for improvement is challenging, as there are multiple considerations including price, customization, AI, UI, and factors that could make it better or easier to use. I must consult with someone in the field because I cannot provide this information at this time since I am not operating the solution directly. What would make it a ten for me as an integrator is difficult to determine. I believe they need more time developing this solution, which means they need to be more comprehensive and extended in their approach. I think this represents the opinion of the majority.
reviewer2703864 - PeerSpot reviewer
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
Onboarding developers successfully while improving code security through IDE integration
Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
13%
Manufacturing Company
10%
Healthcare Company
5%
Financial Services Firm
17%
Computer Software Company
13%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise8
Large Enterprise6
By reviewers
Company SizeCount
Small Business69
Midsize Enterprise44
Large Enterprise115
 

Questions from the Community

What do you like most about Orca Security?
It's for protection. It's an agentless tool. We don't need to install anything at a customer's premises. We can just scan the entire assets in the cloud.
What needs improvement with Orca Security?
I experienced some problems with custom tags in Orca Security where I tried to separate the environment for business units so I could ask the tech lead responsible for that vulnerability to fix the...
What is your primary use case for Orca Security?
We wanted to understand our cloud environment better, so we had a demo of Orca Security and then signed a deal to access the full platform and identify our most vulnerable areas. I started to sched...
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
What do you like most about Veracode Static Analysis?
I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.
What is your experience regarding pricing and costs for Veracode Static Analysis?
My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.
 

Also Known As

No data available
Crashtest Security , Veracode Detect
 

Overview

 

Sample Customers

BeyondTrust, Postman, Digital Turbine, Solarisbank, Lemonade, C6 Bank, Docebo, Vercel, and Vivino
Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.
Find out what your peers are saying about Orca Security vs. Veracode and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.