Best Security Orchestration, Automation, and Response (SOAR) Software - Page 2

How Many Security Orchestration, Automation, and Response (SOAR) Software Products Does G2 Track?

Total Products under this Category: 101

Category Stats (Nov 2026)

  • Average Rating: 4.52/5 (↓0.01 vs Oct 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Singularity AI SIEM (+2.27%) - Among all products in this category, Singularity AI SIEM recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Security Orchestration, Automation, and Response (SOAR) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 3,800+ Authentic Reviews
  • 101+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Security Orchestration, Automation, and Response (SOAR) Software

G2 Grid® for Security Orchestration, Automation, and Response (SOAR) Software plotting products by satisfaction and market presence

Highlighted products: Tines Stories, Google Security Operations, Torq AI SOC Platform, n8n, KnowBe4 PhishER/PhishER Plus, Palo Alto Cortex XSIAM, ServiceNow Security Operations, and Microsoft Sentinel.

Underlying data: [Grid® JSON](https://www.g2.com/categories/security-orchestration-automation-and-response-soar/grids.json?focus%5B%5D=tines-stories&focus%5B%5D=google-security-operations&focus%5B%5D=torq-ai-soc-platform&focus%5B%5D=n8n&focus%5B%5D=knowbe4-phisher-phisher-plus&focus%5B%5D=palo-alto-cortex-xsiam&focus%5B%5D=servicenow-security-operations&focus%5B%5D=microsoft-sentinel)

Intezer

Intezer automates the entire alert triage process, like an extension of your team handling Tier 1 SOC tasks for every alert at machine-speed. Intezer monitors incoming incidents from endpoint, reported phishing pipelines, or SIEM tools, then autonomously collects evidence, investigates, makes triage decisions, and escalates only the serious threats to your team for human intervention. Power your SOC with artificial intelligence that makes sure every alert is deeply analyzed (including every single artifact like files, URLs, endpoint memory, etc.), detecting malicious code in memory and other evasive threats. Fast set up and integrations with your SOC team's workflows (EDR, SOAR, SIEM, etc.) means Intezer's AI can immediately start filtering out false positives, giving you detailed analysis about every threat, and speeding up your incident response time. With Intezer: • Reduce Tier 1 escalation, sending only 4% of alerts on average to your team for immediate action. • Identify up to 97% of false positive alerts without taking any time from your analysts. • Reduce average triage time to 5 minutes or less, while giving your analysts deep context about every alert to prioritize critical treats and respond faster.

Average Rating: 4.5/5.0

Total Reviews: 188

How Do G2 Users Rate Intezer?

  • Automated Remediation: 9.2/10 (Category avg: 8.7/10)
  • Quality of Support: 8.6/10 (Category avg: 9.0/10)
  • Ease of Admin: 8.8/10 (Category avg: 8.6/10)
  • Workflow Automation: 10.0/10 (Category avg: 8.7/10)

Who Is the Company Behind Intezer?

  • Seller: Intezer
  • Company Website:
  • Year Founded: 2015
  • HQ Location: New York
  • LinkedIn® Page: www.linkedin.com
    88 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Student
  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 54% Small, 24% Medium

What Do G2 Reviewers Say About Intezer?

AI-generated summary from verified user reviews

Pros
  • Users value the detection accuracy of Intezer, ensuring timely malware blocking and enhanced system security.
  • Users find Intezer to provide ease of use, enabling quick detection and proactive security measures for their systems.
  • Users appreciate the timely detection and blocking of malware by Intezer, enhancing their system security significantly.
  • Users value the effective malware detection of Intezer, ensuring timely security for their systems and peace of mind.
  • Users value the timely malware detection and blocking capabilities of Intezer, enhancing their overall system security.
Cons
  • Users report challenges due to the complex interface, which can hinder easy navigation and usability.
  • Users find the poor interface design of Intezer challenging, with small characters and various GUI issues.
  • Users find the UI challenging and difficult to read, noting small text and various GUI issues affecting usability.
  • Users find the lack of access control limits file visibility and can complicate collaborative efforts.
  • Users find it challenging to ensure data privacy, as file visibility control is limited in certain situations.

What Are Recent G2 Reviews of Intezer?

What Are G2 Users Discussing About Intezer?

IBM QRadar SOAR

IBM QRadar® SOAR is designed to help your security team respond to cyberthreats with confidence, automate with intelligence and collaborate with consistency. It guides your team in resolving incidents by codifying established incident response processes into dynamic playbooks. The open and agnostic platform helps accelerate and orchestrate their response by automating actions with intelligence and integrating with other security tools. IBM QRadar SOAR is available on AWS Marketplace.

Average Rating: 4.0/5.0

Total Reviews: 25

How Do G2 Users Rate IBM QRadar SOAR?

  • Automated Remediation: 7.5/10 (Category avg: 8.7/10)
  • Quality of Support: 7.9/10 (Category avg: 9.0/10)
  • Ease of Admin: 6.7/10 (Category avg: 8.6/10)
  • Workflow Automation: 7.4/10 (Category avg: 8.7/10)

Who Is the Company Behind IBM QRadar SOAR?

  • Seller: IBM
  • Year Founded: 1911
  • HQ Location: Armonk, New York, United States
  • LinkedIn® Page: www.linkedin.com
    344,328 employees on LinkedIn®
  • Ownership: SWX:IBM
  • Phone: 1-866-277-7488

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 72% Large, 21% Medium

What Do G2 Reviewers Say About IBM QRadar SOAR?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of IBM QRadar SOAR, benefiting from user-friendly features and rapid support.
  • Users value the effective automation capabilities of IBM QRadar SOAR, reducing manual workloads and enhancing security efficiency.
  • Users value the easy integrations with various tools, making security workflows and processes streamlined and efficient.
  • Users appreciate the seamless integration with security and ticketing tools, simplifying routine security operations greatly.
  • Users value the responsive customer support from IBM, ensuring quick resolutions and an easy-to-use console.
Cons
  • Users face integration issues with IBM QRadar SOAR, resulting in limited out-of-the-box capabilities and complex implementations.
  • Users find IBM QRadar SOAR to be complex to work on initially, which can hinder the learning curve and usability.
  • Users experience limited integration with IBM QRadar SOAR, hindering advanced transformations and making implementations challenging.
  • Users find that IBM QRadar SOAR has system limitations that hinder sophisticated transformations and practical implementations.
  • Users often face bug issues like workflow errors and occasional lagging, impacting their overall experience.

What Are Recent G2 Reviews of IBM QRadar SOAR?

Microsoft Security Copilot

Empower your defenders to detect hidden patterns, harden defenses, and respond to incidents faster with generative AI

Average Rating: 4.3/5.0

Total Reviews: 14

How Do G2 Users Rate Microsoft Security Copilot?

  • Quality of Support: 8.5/10 (Category avg: 9.0/10)
  • Ease of Admin: 7.8/10 (Category avg: 8.6/10)

Who Is the Company Behind Microsoft Security Copilot?

  • Seller: Microsoft
  • Year Founded: 1975
  • HQ Location: Redmond, Washington
  • LinkedIn® Page: www.linkedin.com
    232,750 employees on LinkedIn®
  • Ownership: MSFT
  • Phone: +1 (877) 276-2464

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 71% Large, 14% Medium

What Do G2 Reviewers Say About Microsoft Security Copilot?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of Microsoft Security Copilot, enhancing security management effortlessly with AI-driven support.
  • Users value the AI integration of Microsoft Security Copilot for quickly identifying and managing security threats effectively.
  • Users value the AI integration for threat detection in Microsoft Security Copilot, enhancing their security operations effectively.
  • Users appreciate the AI-driven threat detection of Microsoft Security Copilot, simplifying security operations and enhancing response times.
  • Users appreciate the automation features of Microsoft Security Copilot, significantly speeding up threat identification and response.
Cons
  • Users find the tool's complexity challenging, especially for inexperienced team members and varied user needs.
  • Users find the product expensive, suggesting a need for more cost-effective options for wider accessibility.
  • Users find the difficult learning curve of Microsoft Security Copilot challenging, especially for inexperienced team members.
  • Users face false positives that waste time, complicating workflows and necessitating double-checking of results.
  • Users express concern over the limited access to Microsoft Security Copilot, restricting usability for everyone.

What Are Recent G2 Reviews of Microsoft Security Copilot?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

DoControl

DoControl is a SaaS data security platform that helps organizations discover, understand, and protect sensitive data across business-critical applications like Google Workspace, Microsoft 365, Slack, Salesforce, and Box. DoControl gives security teams continuous visibility into where sensitive data lives, who and what has access to it, and how it’s being used - helping address risks from excessive permissions, external sharing, insider threats, third-party access, Shadow AI, and risky OAuth applications. Combining SaaS DLP, Data Access Governance, data classification, insider risk detection, and automated remediation, DoControl goes beyond alerting to actively reduce risk. Its agentless, API-driven platform uses identity and business context to detect risky activity and automatically enforce policies - revoking access, removing public sharing, quarantining sensitive data, and remediating exposure at scale - without proxies, endpoint agents, or disruption to users.

Average Rating: 4.7/5.0

Total Reviews: 65

How Do G2 Users Rate DoControl?

  • Quality of Support: 9.5/10 (Category avg: 9.0/10)

Who Is the Company Behind DoControl?

  • Seller: SpinAI
  • Year Founded: 2017
  • HQ Location: Palo Alto, California
  • LinkedIn® Page: www.linkedin.com
    91 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 50% Medium, 48% Large

What Do G2 Reviewers Say About DoControl?

AI-generated summary from verified user reviews

Pros
  • Users value the clear visibility into SaaS data, enhancing security and minimizing deployment complications.
  • Users value the clear visibility and continuous monitoring of DoControl for improved security insights across cloud applications.
  • Users value the real-time monitoring capabilities of DoControl, enhancing visibility and security across cloud applications.
  • Users value the enhanced security monitoring of DoControl, gaining insights into user activities and potential security flaws.
  • Users appreciate the powerful monitoring capabilities of DoControl, which help uncover previously unnoticed security flaws.
Cons
  • Users find complexity in configuring policies challenging, requiring time and effort to manage user access effectively.
  • Users find the difficult learning curve in onboarding and policy management a challenge when using DoControl.
  • Users find the policy management interface confusing, particularly when managing complex user access across groups and applications.
  • Users find the complex configuration process to be time-consuming and challenging, impacting their overall experience.
  • Users find configuration issues arise with limited pre-configured options and the complexity of applying custom settings.

What Are Recent G2 Reviews of DoControl?

SIRP

SIRP is an AI-native Autonomous SOC platform designed to evolve traditional Security Orchestration, Automation, and Response (SOAR) into governed, decision-driven security operations. Unlike legacy SOAR tools that rely on static playbooks and workflow automation, SIRP enables intelligent AI agents to analyze alerts, compute risk, execute response actions, and continuously learn from outcomes within defined policy boundaries. The platform combines contextual reasoning, real-time intelligence, and adaptive learning to reduce manual triage, minimize alert fatigue, and accelerate incident response while maintaining governance, auditability, and control. SIRP supports enterprise SOC teams and MSSPs seeking to operate at machine speed without sacrificing human oversight for high-impact decisions.

Average Rating: 4.7/5.0

Total Reviews: 22

How Do G2 Users Rate SIRP?

  • Automated Remediation: 9.2/10 (Category avg: 8.7/10)
  • Quality of Support: 9.8/10 (Category avg: 9.0/10)
  • Ease of Admin: 10.0/10 (Category avg: 8.6/10)
  • Workflow Automation: 8.3/10 (Category avg: 8.7/10)

Who Is the Company Behind SIRP?

  • Seller: SIRP
  • Year Founded: 2017
  • HQ Location: Bethesda, Maryland
  • LinkedIn® Page: www.linkedin.com
    55 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 41% Small, 37% Medium

What Do G2 Reviewers Say About SIRP?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the comprehensive automation features of SIRP, enhancing their security orchestration and incident management efficiency.
  • Users value the excellent customer support from SIRP, enhancing their overall experience with the product.
  • Users praise SIRP for its ease of use, making security automation and incident management seamless and efficient.
  • Users value the easy integrations offered by SIRP, enhancing their security automation and orchestration experience.
  • Users praise SIRP for its ease of use and excellent support, along with comprehensive security features and integrations.

What Are Recent G2 Reviews of SIRP?

Exabeam New-Scale Platform

The Exabeam New-Scale Security Operations Platform is built to help organizations detect, investigate, and respond to insider threats tied to both human users and non-human identities. It brings together behavioral analytics, automation, and AI-driven workflows to help security operations teams reduce risk and maintain operational integrity. The platform supports AI agent-powered threat detection, investigation, and response (TDIR) by automating high-friction tasks and applying behavioral context to every signal. By combining proactive risk identification with fast, guided response, the New-Scale Platform helps teams move from alert handling to informed decision-making. Designed for enterprise security operations teams, the New-Scale Platform supports organizations that need consistent visibility into internal risk without adding operational overhead. Analysts use behavioral analytics to understand what is normal for a user or agent, then quickly spot meaningful deviations. This approach is especially valuable in data-sensitive industries such as finance, healthcare, and technology, where internal misuse, compromised credentials, or agent misuse can create immediate business impact. At the core of the New-Scale Platform is advanced behavioral analytics. The platform analyzes activity patterns across identities, devices, and services to establish baselines of normal behavior. When activity deviates from those baselines, dynamic risk scoring helps security teams focus on the activity most likely to indicate misuse or compromise. This reduces alert noise and shortens the time it takes to understand what is happening and why. The New-Scale Platform also extends user and entity behavior analytics (UEBA) to non-human identities through Agent Behavior Analytics (ABA). ABA applies the same behavior-based approach as UEBA to service accounts, APIs, automation tools, and AI agents. By monitoring how agents typically interact with data and systems, the platform helps teams detect misuse, drift, or compromise that traditional controls often miss. Automation plays a central role in improving day-to-day operations. The New-Scale Platform automates investigation steps, enrichment, and response actions within TDIR workflows, allowing analysts to spend less time on repetitive tasks and more time validating risk and containing incidents. Behavioral context and AI-driven prioritization help teams address the most relevant threats first, improving response consistency without increasing workload. With the Exabeam New-Scale Platform, security teams can benchmark and prove the value of their security program against peers and measurable outcomes. Outcomes Navigator translates raw security data into business-relevant insights to demonstrate progress against the most strategic use cases, MITRE ATT&CK TTPs, and compliance initiatives. Together, user and entity behavior analytics (UEBA), Agent Behavior Analytics (ABA), and agent-powered automated TDIR workflows help security operations teams detect insider risk earlier, investigate faster, and respond with greater precision. The New-Scale Platform gives organizations a practical way to manage insider threats tied to people and agents, accelerate security operations, and prove security impact over time.

Average Rating: 4.6/5.0

Total Reviews: 15

How Do G2 Users Rate Exabeam New-Scale Platform?

  • Automated Remediation: 10.0/10 (Category avg: 8.7/10)
  • Quality of Support: 8.1/10 (Category avg: 9.0/10)
  • Ease of Admin: 8.8/10 (Category avg: 8.6/10)
  • Workflow Automation: 10.0/10 (Category avg: 8.7/10)

Who Is the Company Behind Exabeam New-Scale Platform?

  • Seller: Exabeam
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Broomfield, CO
  • LinkedIn® Page: www.linkedin.com
    785 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 59% Large, 29% Medium

What Do G2 Reviewers Say About Exabeam New-Scale Platform?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Exabeam New-Scale Platform, enjoying its seamless integration and functionality.
  • Users value the detection accuracy of Exabeam New-Scale Platform, enhancing threat identification and response effectiveness.
  • Users appreciate the ease of integration and robust security features of Exabeam New-Scale Platform for effective monitoring.
  • Users appreciate the world-class security features of Exabeam, valuing its comprehensive monitoring and ease of integration.
  • Users value the fully automated capabilities of Exabeam New-Scale Platform, enhancing efficiency in threat response and management.
Cons
  • Users find the platform's complexity challenging, requiring significant expertise for setup and configuration.
  • Users find the complex setup of Exabeam New-Scale Platform challenging, often requiring significant expertise to manage effectively.
  • Users find the difficult setup of Exabeam New-Scale Platform challenging, requiring significant expertise and manual configuration.
  • Users find parsing issues hinder effective use of Exabeam, requiring manual intervention and impacting overall user experience.
  • Users find the software complexity challenging, requiring expertise for setup and managing configurations effectively.

What Are Recent G2 Reviews of Exabeam New-Scale Platform?

What Are G2 Users Discussing About Exabeam New-Scale Platform?

CrowdSec

CrowdSec is an open-source security stack that detects aggressive behaviors and prevents them from accessing your systems. Its user-friendly design and ease of integration into your current security infrastructure offer a low technical entry barrier and a high-security gain. Once an unwanted behavior is detected, it is automatically blocked. The aggressive IP, scenario triggered and the timestamp is sent for curation, to avoid poisoning & false positives. If verified, this IP is then redistributed to all CrowdSec users running the same scenario. By sharing the threat they faced, all users are protecting each other.

Average Rating: 4.7/5.0

Total Reviews: 84

How Do G2 Users Rate CrowdSec?

  • Automated Remediation: 9.1/10 (Category avg: 8.7/10)
  • Quality of Support: 8.9/10 (Category avg: 9.0/10)
  • Ease of Admin: 8.8/10 (Category avg: 8.6/10)
  • Workflow Automation: 7.8/10 (Category avg: 8.7/10)

Who Is the Company Behind CrowdSec?

  • Seller: CrowdSec
  • Year Founded: 2020
  • HQ Location: Paris, FR
  • LinkedIn® Page: www.linkedin.com
    31 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO
  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 70% Small, 21% Medium

What Are Recent G2 Reviews of CrowdSec?

What Are G2 Users Discussing About CrowdSec?

Blumira Automated Detection & Response

Blumira is an integrated security operations platform built for growing teams and the partners supporting them to gain complete visibility into their environment, identify and address risk faster, and deliver advanced security and compliance. The platform includes: - Managed Detections for automated threat hunting to identify attacks early - AI Investigation with 98.5% accurate, human-in-the-loop triage validated against real cases - Rapid Response with automation and 1-click actions to contain and block threats immediately - One Year of Data Retention with unlimited log ingestion to satisfy compliance requirements - Advanced Reporting and dashboards for forensics and easy investigation - Endpoint & Identity Protection (EDR/ITDR) for real-time remediation across devices and users - 24/7 Security Operations support for critical priority issues

Average Rating: 4.6/5.0

Total Reviews: 122

How Do G2 Users Rate Blumira Automated Detection & Response?

  • Automated Remediation: 7.5/10 (Category avg: 8.7/10)
  • Quality of Support: 9.5/10 (Category avg: 9.0/10)
  • Ease of Admin: 9.0/10 (Category avg: 8.6/10)
  • Workflow Automation: 9.7/10 (Category avg: 8.7/10)

Who Is the Company Behind Blumira Automated Detection & Response?

  • Seller: Blumira
  • Company Website:
  • Year Founded: 2018
  • HQ Location: Ann Arbor, Michigan
  • LinkedIn® Page: www.linkedin.com
    55 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: IT Manager
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 51% Medium, 36% Small

What Do G2 Reviewers Say About Blumira Automated Detection & Response?

AI-generated summary from verified user reviews

Pros
  • Users commend the ease of use of Blumira, facilitating quick detection and monitoring of security incidents.
  • Users value the outstanding customer support of Blumira, highlighting swift assistance and a seamless onboarding experience.
  • Users appreciate the easy implementation of Blumira Automated Detection & Response, enabling quick and efficient setup processes.
  • Users value the real-time alerting feature of Blumira, enhancing their security awareness and incident management.
  • Users value the real-time alerting of Blumira, as it effectively tracks security events in their MS 365 environment.
Cons
  • Users feel that the limited customization options hinder the product's potential and integration capabilities with other tools.
  • Users find the alert system's customization lacking, highlighting a need for improved log source comparisons and SIEM functionality.
  • Users find the pricing model expensive and inflexible, not meeting their budget or needs effectively.
  • Users find the faulty detection limitations frustrating, especially around custom rules and log visibility.
  • Users find the inefficient alert system lacking essential user details, complicating response strategies and false positive management.

What Are Recent G2 Reviews of Blumira Automated Detection & Response?

What Are G2 Users Discussing About Blumira Automated Detection & Response?

Shuffle

Shuffle is an open source automation platform for security professionals (SOAR). Run it locally: https://github.com/frikky/shuffle Try it out here: https://shuffler.io/register Join the community: https://discord.gg/B2CBzUm

Average Rating: 4.8/5.0

Total Reviews: 15

How Do G2 Users Rate Shuffle?

  • Automated Remediation: 9.5/10 (Category avg: 8.7/10)
  • Quality of Support: 9.4/10 (Category avg: 9.0/10)
  • Ease of Admin: 9.4/10 (Category avg: 8.6/10)
  • Workflow Automation: 9.8/10 (Category avg: 8.7/10)

Who Is the Company Behind Shuffle?

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 67% Medium, 33% Small

What Are Recent G2 Reviews of Shuffle?

What Are G2 Users Discussing About Shuffle?

Swimlane

Swimlane automates the work security teams hate. As the leader in agentic AI security automation, Swimlane unifies operations across the SOC and beyond with its platform, Swimlane Turbine. The problem is real: over three million SecOps roles sit unfilled, and analysts drown in alerts while juggling 30+ disconnected tools, each with its own schema and quirks. Meanwhile, the average breach now costs $4.5 million. Swimlane closes that gap. Swimlane Hero AI, embedded within the Turbine platform, turns natural-language prompts into automated investigations and responses, cutting MTTR by 75%. Analysts trigger remediation with one click, backed by NIST-aligned case management. Turbine Canvas lets teams build playbooks and agents with no, low, or full code, so automation doesn't wait on a developer's calendar. The Swimlane Marketplace adds a growing library of agents, integrations, and playbooks, built on demand at no cost, ending vendor lock-in for good. Under the hood, Swimlane's Active Sensing Fabric ingests data at scale, pushing capability beyond traditional SOAR. Cloud-native architecture backs it up: one customer runs 25 million automated actions a day at 75,000 actions per minute. That's not a demo number. That's production. Analysts get customizable dashboards and AI-augmented reporting that turn raw activity into KPIs executives actually read, proving ROI without a translation layer. The market has taken notice. Independent evaluations against 15+ competitors all point the same direction: Swimlane leads. Inc. named it Best in Business. Customers at Northern Power, Toshiba, Weedmaps, and InComm Payments back that up, citing customizable playbooks, dashboards, and a professional services team that shows up when it counts. Swimlane doesn't just orchestrate security tasks. It gives every security function, from vulnerability management to compliance to business continuity, a way to move faster than the threats they're chasing.

Average Rating: 4.5/5.0

Total Reviews: 45

How Do G2 Users Rate Swimlane?

  • Automated Remediation: 9.2/10 (Category avg: 8.7/10)
  • Quality of Support: 9.1/10 (Category avg: 9.0/10)
  • Ease of Admin: 8.5/10 (Category avg: 8.6/10)
  • Workflow Automation: 9.3/10 (Category avg: 8.7/10)

Who Is the Company Behind Swimlane?

  • Seller: Swimlane
  • Year Founded: 2014
  • HQ Location: Boulder, US
  • LinkedIn® Page: www.linkedin.com
    271 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 60% Medium, 31% Small

What Do G2 Reviewers Say About Swimlane?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of Swimlane, appreciating its low-code automation and seamless integration capabilities.
  • Users appreciate the easy integrations of Swimlane, enhancing their playbooks with fast and robust connectivity options.
  • Users appreciate the personalization and robust integration features of Swimlane, enhancing usability and flexibility in security management.
  • Users value the seamless integrations of Swimlane, enhancing playbook creation and collaboration across various technologies.
  • Users value the flexibility of low-code automation in Swimlane, enabling extensive opportunities for security operations enhancements.
Cons
  • Users find Swimlane complex to set up and maintain, but support is timely and helpful in overcoming challenges.
  • Users find the learning curve steep initially with Swimlane, requiring time to become comfortable and proficient.
  • Users find the limited resources available for Swimlane challenging, particularly during initial deployment and playbook design.
  • Users report poor customer support, with slow responses and challenges in diagnosing upgrade issues.
  • Users find Swimlane's poor interface design cluttered and difficult to navigate, requiring a more modern refresh.

What Are Recent G2 Reviews of Swimlane?

What Are G2 Users Discussing About Swimlane?

Guardsix

Guardsix is the sovereign security platform for lean European teams, bringing log management and audit-ready compliance to regulated industries, critical national infrastructure operators, and the Managed Security Service Providers (MSSPs) that serve them throughout Europe and beyond. Headquartered in Copenhagen, Denmark, Guardsix delivers sovereign-by-design security for organisations that carry real operational responsibility. The company employs several hundred cyber security specialists and keeps every organisation it serves in full control of their data, deployment, and operations. Guardsix provides a unified Command Centre platform combining: • Security Information and Event Management (SIEM) • Network Detection and Response (NDR) • Security Orchestration, Automation and Response (SOAR) • Fleet for enabling multi-tenant management • Governance for Healthcare internal risk compliance monitoring The platform is built to support European data sovereignty, regulatory compliance and operational control, with predictable node-based pricing and deployment options spanning on-premises, air-gapped, hybrid and cloud environments. Guardsix solutions help organisations: • Simplify audit readiness for regulations such as NIS2, DORA, and GDPR. • Support lean security teams with efficient log management and simplified workflows. • Scale security operations without increased complexity or ingestion-led pricing surprises. • Keep security data under European jurisdiction and control — where it lives, who operates it, and under whose laws. • Deploy on their own terms, on-prem and in infrastructure they control, keeping migration a real option at every renewal. • See clearly across their whole environment, with SIEM, NDR, SOAR, Fleet, and Governance in one sovereign platform rather than a stack of point tools. Guardsix maintains SOC 2 Type II attestation and designs its solutions in accordance with European data protection requirements. With a strong partner-first model, Guardsix works closely with regional MSSPs and service providers, combining sovereign-by-design security technology with European integrity and deployment flexibility.

Average Rating: 4.3/5.0

Total Reviews: 105

How Do G2 Users Rate Guardsix?

  • Automated Remediation: 8.5/10 (Category avg: 8.7/10)
  • Quality of Support: 9.0/10 (Category avg: 9.0/10)
  • Ease of Admin: 8.0/10 (Category avg: 8.6/10)
  • Workflow Automation: 8.9/10 (Category avg: 8.7/10)

Who Is the Company Behind Guardsix?

  • Seller: guardsix
  • Company Website:
  • Year Founded: 2001
  • HQ Location: Copenhagen, Capital Region
  • LinkedIn® Page: linkedin.com
    180 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 44% Medium, 31% Small

What Do G2 Reviewers Say About Guardsix?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Guardsix, highlighting its simple interface and efficient incident management capabilities.
  • Users value the seamless integration and context-centric log management of Logpoint, enhancing efficiency and insights significantly.
  • Users commend the excellent customer support of Logpoint, ensuring quick resolutions and satisfaction throughout their experience.
  • Users highly value the easy integrations of Guardsix, enhancing their overall cybersecurity ecosystem and efficiency.
  • Users commend the efficiency of Logpoint, citing its seamless integration and rapid log normalization as major advantages.
Cons
  • Users find poor interface design frustrating, as it hinders usability and lacks essential features compared to competitors.
  • Users find the UX improvement necessary, citing slow interface and poor log presentation as major issues.
  • Users find the interface complexity challenging at first, but anticipate improvements in future updates.
  • Users find the confusing interface of Guardsix challenging, affecting their overall experience and efficiency.
  • Users note a lack of technical information with Guardsix, making it difficult to properly design and size their systems.

What Are Recent G2 Reviews of Guardsix?

What Are G2 Users Discussing About Guardsix?

D3 Security

D3 stands at the forefront of AI-powered security, providing real-time, autonomous SOC solutions that help organizations stay ahead of cyber threats. By merging autonomous investigation and triage with AI-guided remediation, D3 is delivering AI-powered, human-led cyber security solutions. Morpheus is D3 Security’s fully autonomous SOC solution that triages, investigates, and responds to every alert, 24/7. Morpheus covers 100% of your alerts — no exceptions — so your team never has to choose between chasing false positives or risking a breach. It triages 95% of alerts in under two minutes, integrating seamlessly with any SIEM, XDR, or security stack. Unlike traditional SOAR platforms, Morpheus doesn’t need endless playbook tuning; it can build response workflows on the fly, specific to your security stack. The result? Zero alert fatigue, fewer missed threats, and a dramatic boost in SOC efficiency, powered by a data privacy-friendly and SecOps-focused AI model.

Average Rating: 4.2/5.0

Total Reviews: 64

How Do G2 Users Rate D3 Security?

  • Automated Remediation: 8.3/10 (Category avg: 8.7/10)
  • Quality of Support: 9.0/10 (Category avg: 9.0/10)
  • Ease of Admin: 8.2/10 (Category avg: 8.6/10)
  • Workflow Automation: 6.7/10 (Category avg: 8.7/10)

Who Is the Company Behind D3 Security?

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 49% Large, 41% Medium

What Are Recent G2 Reviews of D3 Security?

IBM Cloud Pak for Security

IBM Cloud Pak for Security is a platform that helps you uncover hidden threats, make more informed risk-based decisions and prioritize your team’s time

Average Rating: 4.4/5.0

Total Reviews: 9

How Do G2 Users Rate IBM Cloud Pak for Security?

  • Automated Remediation: 8.9/10 (Category avg: 8.7/10)
  • Quality of Support: 9.2/10 (Category avg: 9.0/10)
  • Ease of Admin: 8.9/10 (Category avg: 8.6/10)
  • Workflow Automation: 8.9/10 (Category avg: 8.7/10)

Who Is the Company Behind IBM Cloud Pak for Security?

  • Seller: IBM
  • Year Founded: 1911
  • HQ Location: Armonk, New York, United States
  • LinkedIn® Page: www.linkedin.com
    344,328 employees on LinkedIn®
  • Ownership: SWX:IBM
  • Phone: 1-866-277-7488

Who Uses This Product?

  • Company Size: 40% Large, 30% Medium

What Are Recent G2 Reviews of IBM Cloud Pak for Security?

What Are G2 Users Discussing About IBM Cloud Pak for Security?

NetWitness Platform

NetWitness is a comprehensive threat detection, investigation and response platform that combines visibility, analytics, insight, and automation into a single solution. It collects and analyzes data across all capture points (logs, packets, netflow, endpoint and IoT) and computing platforms (physical, virtual and cloud), enriching data with threat intelligence and business context.

Average Rating: 3.9/5.0

Total Reviews: 23

How Do G2 Users Rate NetWitness Platform?

  • Automated Remediation: 9.2/10 (Category avg: 8.7/10)
  • Quality of Support: 7.6/10 (Category avg: 9.0/10)
  • Ease of Admin: 7.4/10 (Category avg: 8.6/10)
  • Workflow Automation: 9.2/10 (Category avg: 8.7/10)

Who Is the Company Behind NetWitness Platform?

Who Uses This Product?

  • Company Size: 54% Large, 33% Medium

What Do G2 Reviewers Say About NetWitness Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the network packet capture feature of NetWitness for effective forensic investigations and threat hunting.
  • Users appreciate the centralized threat detection capabilities of NetWitness Platform, enhancing efficiency in threat hunting across various data sources.
  • Users value the centralized view provided by NetWitness Platform, simplifying threat hunting across various data sources.
  • Users value the centralized threat hunting capabilities of NetWitness Platform, streamlining their cybersecurity efforts effectively.
  • Users value the full network packet capture capability of NetWitness, enhancing deep forensic investigation significantly.
Cons
  • Users find the complex implementation of NetWitness Platform challenging, needing extensive technical expertise for setup and upgrades.
  • Users find the complexity of initial deployment and upgrades challenging, requiring significant technical expertise and causing instability.
  • Users find the initial setup complex, often needing advanced expertise, which can hinder deployment and upgrades.
  • Users face complex deployment difficulties with the NetWitness Platform, needing substantial expertise for initial setup and upgrades.
  • Users face complex initial setup and deployment challenges, often needing significant expertise for effective use.

What Are Recent G2 Reviews of NetWitness Platform?

What Are G2 Users Discussing About NetWitness Platform?

Exaforce

At Exaforce, we are on a mission to 10x the productivity and efficacy of security and operations (SOC) teams using our transformative multi-model AI engine. Our Agentic SOC Platform combines AI agents (“Exabots”) with advanced data exploration to deliver real-time insights, proactive detection and response, in-depth investigations, and automated workflows. Backed by Khosla Ventures, Mayfield, Thomvest Ventures, Touring Capital, and others, Exaforce helps SOC teams respond to threats and breaches faster, with higher precision, greater consistency, and at lower total costs—redefining how SOC teams function.

Average Rating: 4.9/5.0

Total Reviews: 7

How Do G2 Users Rate Exaforce?

  • Automated Remediation: 10.0/10 (Category avg: 8.7/10)
  • Quality of Support: 10.0/10 (Category avg: 9.0/10)
  • Ease of Admin: 10.0/10 (Category avg: 8.6/10)
  • Workflow Automation: 10.0/10 (Category avg: 8.7/10)

Who Is the Company Behind Exaforce?

  • Seller: Exaforce
  • Company Website:
  • Year Founded: 2023
  • HQ Location: San Jose, US
  • LinkedIn® Page: www.linkedin.com
    135 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 57% Medium, 29% Large

What Do G2 Reviewers Say About Exaforce?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the strong security features of Exaforce, enhancing their ability to manage and investigate alerts effectively.
  • Users praise the excellent customer support of Exaforce, finding them responsive and helpful with troubleshooting and feature requests.
  • Users value the efficient alerting system of Exaforce, enhancing focus on critical findings and streamlining investigation processes.
  • Users praise the fantastic customer support from Exaforce, assisting effectively with troubleshooting and feature requests.
  • Users find Exaforce to have exceptional ease of use, streamlining workflows and enhancing focus on critical findings.
Cons
  • Users experience slow loading times and query failures with Exaforce, impacting their overall effectiveness and productivity.
  • Users report slow performance with the Exaforce interface, especially when handling complex queries or large datasets.
  • Users experience slow interface loading, making complex queries and large datasets challenging to manage effectively.

What Are Recent G2 Reviews of Exaforce?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024