The complimentary security assessment involves a single, agentless deployment of the Orca
security platform. This assessment offers a comprehensive inventory of an organization’s cloud
assets, detecting potential issues such as misconfigurations, vulnerabilities, insecure
authentication, and malware. The results are compiled into an Executive Report by VividCloud,
including guidance for remediation.

Orca Security offers an agentless approach to cloud security and compliance, ensuring complete
visibility across cloud configurations and workloads. It identifies security risks at various layers,
including cloud infrastructure, operating system, applications, and data, eliminating the need for
multiple tools like Cloud Security Posture Management (CSPMs) and Cloud Workload Protection
Platforms (CWPPs).

The Orca platform solves several problems with current cloud security solutions:

• Cumbersome deployment: Installing and maintaining agents on every cloud workload
results in performance degradation, and high TCO.
• Coverage gaps: Partial deployment of agents causes blind spots. Less than 50% of assets
are covered by agent-based solutions
• Performance degradation: Cloud security solutions based on agents or network scanners
have a significant impact on application performance and system resources
• Alert fatigue: Security teams waste valuable time manually sifting through high volume, low-
risk alert data resulting in missed critical issues
• Multiple tools: Security teams face the complexity and burden of managing multiple point-
solution tools.

• Deep visibility: Deep packet inspection and vulnerability scanning to identify security risks
  across cloud workloads.
• Continuous monitoring: Continuous monitoring allows organizations to detect and
  respond to incidents in real-time.
• Compliance: Support for 100+ frameworks ensuring compliance with industry standards
  and regulations.
• Risk prioritization: Prioritize risks based on severity, allowing organizations to focus on the
  most critical issues first. In fact, Orca’s context-aware engine prioritizes the 1% of alerts
  that need immediate attention.
• Unified platform: Orca includes the core capabilities of CSPM and CWPP solutions,
  including vulnerability and compliance management, in a single platform.
• Scalability: Provides security solutions that adapt to changing workloads and
  environments.

Orca specializes in detecting and prioritizing various risks in cloud security, including
vulnerabilities, misconfigurations, malware, unprotected sensitive data, lateral movement risk, and
identity and access management (IAM) risk.

Orca provides comprehensive coverage for all cloud infrastructure assets, encompassing virtual
machines (VMs), containers, and serverless components. It extends to various cloud resources
such as storage buckets, security groups, Virtual Private Clouds (VPCs), Identity and Access
Management (IAM) roles and permissions, Key Management Service (KMS) keys, and more. Orca
goes beyond typical coverage by identifying and monitoring idle, paused, and stopped
workloads, as well as identifying orphaned systems and devices that cannot support agents.