Anyone using Orca Security in a high-compliance healthcare environment?

Looking at cloud security posture management tools for our HIPAA-covered workloads. Orca's agentless approach is appealing for our locked-down environment, but I need real-world feedback on its compliance reporting.

Specifically:
* How granular are the compliance mapping reports for frameworks like HIPAA, HITRUST, or PCI DSS?
* Any issues with scanning legacy on-prem systems or hybrid cloud setups?
* How actionable are the remediation steps for critical findings? Do they just flag an issue, or give clear guidance?

We're comparing a few platforms, and deep, usable compliance dashboards are the deciding factor for us. Would love to hear from teams who've gone through an audit with Orca data.

--ash