Master Orca Security with our step-by-step tutorial, detailed feature walkthrough, and expert tips.
Sign up for an enterprise demo at orca.security and complete the security assessment questionnaire Connect your cloud accounts (AWS, Azure, GCP) by configuring read
only API permissions using Orca's CloudFormation/ARM templates Complete the initial asset discovery scan which typically takes 2
4 hours to map your entire cloud environment Review the automated risk prioritization dashboard and configure alert thresholds for your security team Set up integrations with your existing SIEM, ticketing, and notification systems using Orca's API or webhooks
💡 Quick Start: Follow these 3 steps in order to get up and running with Orca Security quickly.
Orca is granted a read-only role in your cloud account and uses cloud-provider APIs to take point-in-time snapshots of workload block storage and metadata. It analyzes these snapshots out-of-band in Orca's environment, extracting OS packages, installed software, vulnerabilities, malware, secrets, sensitive data, and configuration details — without installing agents, sending network traffic through proxies, or impacting workload performance.
Wiz is Orca's closest competitor and uses a similar agentless, graph-based CNAPP approach; the two differ primarily in data model, UX, and depth in specific modules like DSPM and AI-SPM. CrowdStrike is agent-first and stronger for runtime endpoint/EDR use cases. Snyk is developer-first and focused on code, open-source, and container image scanning rather than full cloud posture. Orca's sweet spot is unified, agentless coverage across the entire cloud estate with prioritized attack paths.
Yes. Orca's AI-SPM module inventories AI services and models across Amazon Bedrock, Azure OpenAI, Google Vertex AI, SageMaker, and self-hosted models, detects shadow AI usage, flags training-data and model-file exposures, and checks misconfigurations against emerging AI security frameworks.
Orca ships with continuous checks for CIS Benchmarks, PCI-DSS, HIPAA, HITRUST, SOC 2, NIST 800-53, NIST CSF, ISO 27001, GDPR, FedRAMP, and cloud-provider-specific frameworks (AWS Well-Architected, CIS AWS/Azure/GCP). Custom frameworks can be authored by combining built-in controls.
Most customers connect their first cloud account in under 30 minutes using a CloudFormation template, Terraform module, or native role. Initial scan results — including critical vulnerabilities and misconfigurations — typically appear within a few hours, with full asset inventory and attack-path analysis available within 24 hours.
Now that you know how to use Orca Security, it's time to put this knowledge into practice.
Sign up and follow the tutorial steps
Check pros, cons, and user feedback
See how it stacks against alternatives
Follow our tutorial and master this powerful enterprise agents tool in minutes.
Tutorial updated March 2026