Competitive

Question 1

AWS Differentiators

Answer 1

Better Together Positioning
1. Continuous compliance monitoring of 100+ AWS services
2. Vulnerability management and risk prioritization for all workloads
3. Attack path analysis and deep threat detection built on top of AWS services
4. Dedicated dashboard for Shift Left security (misconfigs)

Question 2

Best selling points of Orca

Answer 2

1. Easy integration and UI
2. Attack path feature is easy to understand
3. Dashboards can be split per Business unit (helpful for multi-DevOps teams)
4. Compliance guidance and readiness

Question 3

Aqua Differentiators

Answer 3

Aqua is Container Security evolving to address CNAPP cases
1. Aqua agentless can only support Linux VMs on AWS, limiting visibility
2. Aqua visibility and coverage is fragmented
3. Aqua compliance less mature with fewer frameworks and less telemetry

Question 4

CrowdStrike Differentiators

Answer 4

CrowdStrike is the best EDR solution out there in my opinion:
1. CrowdStrike requires agents and studies show almost over 50% of environment can’t have an agent on it
2. Orca has more advanced query capabilities with ability to look at every layer of the cloud tech stack
3. Orca compliance more mature with over 65 pre-built compliance frameworks

Question 5

CheckPoint CloudGuard Differentiators

Answer 5

CheckPoint is stitched together from acquisitions with little to no improvements to the tech
1. No agentless capabilities
2. Automation requires lots of manual efforts to enable

Question 6

Datadog Cloud Differentiators

Answer 6

Datadog is an observability platform for applications expanding into SCPM and CWPP with minimal additional engineering
1. No vulnerability scanning
2. No Attack Path analysis
3. No Shift Left security for CI/CD infrastructure and applications

Question 7

Ermetic Differentiators

Answer 7

Ermetic is a cloud identity security company expanding to CSPM and adjacent use cases
1. Focused on cloud identity
2. Orca has wider and deeper data covering misconfigs, vulnerabilities and other key risks
3. Orca compliance more mature with over 65 pre-built compliance frameworks
4. Agent based

Question 8

Lacework Differentiators

Answer 8

Lacework is a CSPM and WEPP that has combined capabilities into a loose UI.
1. Agent-based
2. Lacework is more siloed and fragmented lacking unified onboarding, compliance and other features based on architecture
3. Orca compliance more mature with over 65 pre-built compliance frameworks

Question 9

Lightspin Differentiators

Answer 9

Lightspin is a Cloud security startup following Orca’s approach
1. Lacks agentless coverage for Kubernetes
2. Gaps in cloud estate coverage, CDR is misssing
3. Orca compliance more mature with over 65 pre-built compliance frameworks

Question 10

Prisma Cloud Differentiators

Answer 10

Prisma is an acquisition by Palo from 6 different tools
1. Agent-based but working towards agentless approach
2. Prisma has separate data siloes due to loose integrations meaning difficult onboarding because you need to configure integrations multiple times
3. Orca compliance more mature with over 65 pre-built compliance frameworks
4. Can’t query all of the data across the “Suite”

Question 11

Rapid7 Differentiators

Answer 11

Rapid7 is a suite of products that provide different security controls across cloud infrastructure, VM’s and containers
1. Agent-based protection for workloads and Vuln management and compliance scanning ONLY available if you deploy agent or scanners
2. Data is spread across user interfaces with limited ability to access all cloud telemetry
3. Orca compliance more mature with over 65 pre-built compliance frameworks

Question 12

Tenable Differentiators

Answer 12

Tenable focuses on vulnerability assessment
1. Relies on network scanning - for “agentless”
2.