Number of Seats/Users: Orca Security offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows Orca Security that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from Orca Security. Orca Security reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: Orca Security offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from Orca Security. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: Orca Security often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Here at Spendbase our internal data shows that Orca Security is generally loved by our clients, especially those running complex multi-cloud stacks who want strong coverage without operational overhead.

From what we see most often:

Strengths our Spendbase clients highlight
– Agentless deployment
– Setup in minutes, often under 30 minutes for multiple accounts
– No agents to roll out, no performance hit, no kernel/OS dependency
– Works across AWS, Azure, GCP, containers, and Kubernetes
– Deep visibility & context
– Single pane of glass for:
– Vulnerabilities and malware
– Misconfigurations and open ingress
– Compliance posture and asset inventory (including ephemeral assets)
– Attack paths and contextual risk (e.g., exposed servers holding PII)
– Operational efficiency
– Strong Jira and ticketing integrations
– MSP‑friendly partner portal
– Rich API that many security teams prefer over the UI for automation
– Vendor experience
– Very fast, knowledgeable support
– Product roadmap moving quickly and responsive to enhancement requests

Common pain points Spendbase clients report
– Not real-time
– Snapshot-based side scanning means:
– No true xDR / live scanner
– “Near real-time” only, depending on scan frequency
– UI and usability
– Interface can feel complex or clunky at first
– Alert creation and navigation can be awkward
– Large environments can feel overwhelming until tuned
– Coverage gaps and limitations
– Some limitations due to agentless design (especially certain container/Kubernetes and on‑prem use cases)
– Desire for deeper AWS RDS, networking (VPC, security groups), and better Teams integration
– Noise and alert lifecycle
– Too many lingering alerts from already patched or retired assets
– Need for stronger auto-deduping and auto-dismissal logic
– Cost
– Consistently described as “best in class,” but also “expensive”
– Highest value seen where cloud security is a top business risk and multi‑cloud visibility is critical

From a Spendbase discount perspective, our internal benchmarks suggest Orca delivers its best ROI for:
– Organizations with many cloud accounts and fast-changing workloads
– Teams who want to avoid managing agents and focus on remediation work
– Companies where compliance, audit readiness, and attack-path visibility justify a premium tool

For more cost-sensitive teams with simpler cloud footprints, it may be worth negotiating scope and feature usage carefully to align price with the modules that drive real value.