# Splunk SOAR (Security Orchestration, Automation and Response) vs Wazuh Comparison

| | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Star Rating** | 4.4 out of 5 | 4.5 out of 5 | 
| **Total Reviews** | 40 | 69 | 
| **Largest Market Segment** | Mid-Market (41.0% of reviews) | Small-Business (49.3% of reviews) | 
| **Entry Level Price** | No pricing available | No pricing available | 

---
## Top Pros & Cons

### Splunk SOAR (Security Orchestration, Automation and Response)

Pros:
- Automation (16 reviews)
- Security (13 reviews)

Cons:
- Expensive (16 reviews)
- Learning Curve (7 reviews)

### Wazuh

Pros:
- Ease of Use (3 reviews)
- Affordable (2 reviews)

Cons:
- Complex Interface (2 reviews)
- Not User-Friendly (2 reviews)

---
## Ratings Comparison
| Rating | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
  | **Meets Requirements** | 8.7 (36 reviews) | 8.7 (52 reviews) | 
  | **Ease of Use** | 8.2 (36 reviews) | 8.6 (52 reviews) | 
  | **Ease of Setup** | 7.9 (17 reviews) | 8.0 (33 reviews) | 
  | **Ease of Admin** | 8.1 (13 reviews) | 8.6 (28 reviews) | 
  | **Quality of Support** | 8.8 (35 reviews) | 8.3 (50 reviews) | 
  | **Has the product been a good partner in doing business?** | 8.3 (13 reviews) | 8.5 (23 reviews) | 
  | **Product Direction (% positive)** | 8.7 (37 reviews) | 9.0 (48 reviews) | 

---
## Pricing

### Splunk SOAR (Security Orchestration, Automation and Response)

#### Entry-Level Pricing

No pricing available

#### Free Trial

No information available

### Wazuh

#### Entry-Level Pricing

No pricing available

#### Free Trial

No information available

---
## Features Comparison By Category

### Endpoint Detection &amp; Response (EDR)

| Product | Score | Reviews |
|---|---|---|
| **Splunk SOAR (Security Orchestration, Automation and Response)** | N/A | N/A |
| **Wazuh** | N/A | N/A |

#### Services - Endpoint Detection &amp; Response (EDR) 

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Managed Services** | Not enough data | Not enough data | 

### AI SOC Agents

| Product | Score | Reviews |
|---|---|---|
| **Splunk SOAR (Security Orchestration, Automation and Response)** | N/A | N/A |
| **Wazuh** | N/A | N/A |

#### Threat Detection &amp; Triage - AI SOC Agents

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Anomaly Detection &amp; Correlation** | Not enough data | Not enough data | 
| **False‑Positive Suppression** | Not enough data | Not enough data | 
| **AI‑Driven Alert Triage** | Not enough data | Not enough data | 

#### Investigation &amp; Enrichment - AI SOC Agents

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Autonomous Case Investigation** | Not enough data | Not enough data | 
| **Contextual Enrichment from Multiple Sources** | Not enough data | Not enough data | 
| **Attack Path Mapping** | Not enough data | Not enough data | 

#### Response &amp; Remediation - AI SOC Agents

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Mean Time Reduction Metrics** | Not enough data | Not enough data | 
| **Playbook‑Free Dynamic Workflows** | Not enough data | Not enough data | 
| **Automated Response Execution** | Not enough data | Not enough data | 

#### InfoSec Experience &amp; Governance - AI SOC Agents

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Conversational Analyst Interface** | Not enough data | Not enough data | 
| **Manual Feedback Learning Loop** | Not enough data | Not enough data | 
| **Explainability &amp; Audit Trail** | Not enough data | Not enough data | 

### Incident Response

| Product | Score | Reviews |
|---|---|---|
| **Splunk SOAR (Security Orchestration, Automation and Response)** | 8.6/10 | 18 |
| **Wazuh** | 8.0/10 | 31 |

#### Response

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Resolution Automation** | 8.6 (17 reviews) | 7.9 (25 reviews) | 
| **Resolution Guidance** | 8.5 (17 reviews) | 7.9 (23 reviews) | 
| **System Isolation** | 8.2 (18 reviews) | 7.9 (23 reviews) | 
| **Threat Intelligence** | 8.8 (17 reviews) | 8.5 (27 reviews) | 
| **Incident Investigation** | Not enough data | Not enough data | 

#### Records

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Incident Logs** | 8.9 (18 reviews) | 9.1 (28 reviews) | 
| **Incident Reports** | 9.0 (17 reviews) | 8.3 (27 reviews) | 

#### Management

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Incident Alerts** | 8.8 (18 reviews) | 8.8 (27 reviews) | 
| **Incident Case Management** | 8.0 (16 reviews) | 7.7 (22 reviews) | 
| **Workflow Management** | 8.4 (17 reviews) | 8.0 (22 reviews) | 

#### Generative AI

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **AI Text Generation** | Not enough data | 7.0 (10 reviews) | 
| **AI Text Summarization** | Not enough data | 6.7 (10 reviews) | 

### Endpoint Protection

| Product | Score | Reviews |
|---|---|---|
| **Splunk SOAR (Security Orchestration, Automation and Response)** | N/A | N/A |
| **Wazuh** | N/A | N/A |

#### System Control

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Device Control** | Not enough data | Not enough data | 
| **Web Control** | Not enough data | Not enough data | 
| **Application Control** | Not enough data | Not enough data | 
| **Asset Management** | Not enough data | Not enough data | 
| **System Isolation** | Not enough data | Not enough data | 

#### Vulnerability Prevention

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Endpoint Intelligence** | Not enough data | Not enough data | 
| **Firewall** | Not enough data | Not enough data | 
| **Malware Detection** | Not enough data | Not enough data | 

#### Security Management

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Incident Reports** | Not enough data | Not enough data | 
| **Security Validation** | Not enough data | Not enough data | 
| **Compliance ** | Not enough data | Not enough data | 

### Security Orchestration, Automation, and Response (SOAR)

| Product | Score | Reviews |
|---|---|---|
| **Splunk SOAR (Security Orchestration, Automation and Response)** | 8.8/10 | 22 |
| **Wazuh** | N/A | N/A |

#### Automation

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Workflow Mapping** | 8.5 (20 reviews) | Not enough data | 
| **Workflow Automation** | 8.7 (22 reviews) | Not enough data | 
| **Automated Remediation** | 8.6 (20 reviews) | Not enough data | 
| **Log Monitoring** | 9.3 (20 reviews) | Not enough data | 

#### Orchestration

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Security Orchestration** | 8.8 (20 reviews) | Not enough data | 
| **Data Collection** | 8.9 (21 reviews) | Not enough data | 
| **Threat Intelligence** | 8.8 (20 reviews) | Not enough data | 
| **Data Visualization** | 8.7 (20 reviews) | Not enough data | 

#### Response

| Feature | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Alerting** | 8.8 (21 reviews) | Not enough data | 
| **Performance Baselin** | 8.8 (20 reviews) | Not enough data | 
| **High Availability/Disaster Recovery** | 8.9 (19 reviews) | Not enough data | 

---
## Categories
**Shared Categories (1):** [Incident Response Software](https://www.g2.com/categories/incident-response)

**Unique to Splunk SOAR (Security Orchestration, Automation and Response) (2):** [Security Orchestration, Automation, and Response (SOAR) Software](https://www.g2.com/categories/security-orchestration-automation-and-response-soar), [AI SOC Agents](https://www.g2.com/categories/ai-soc-agents)

**Unique to Wazuh (1):** [Endpoint Detection &amp; Response (EDR) Software](https://www.g2.com/categories/endpoint-detection-response-edr)


---
## Reviewer Demographics

### By Company Size

| Segment | Splunk SOAR (Security Orchestration, Automation and Response) | Wazuh | 
|---|---|---|
| **Small-Business** | 23.1% | 49.3% | 
| **Mid-Market** | 41.0% | 37.3% | 
| **Enterprise** | 35.9% | 13.4% | 

### By Industry

#### Splunk SOAR (Security Orchestration, Automation and Response)

- **Information Technology and Services:** 33.3%
- **Consulting:** 12.8%
- **Financial Services:** 7.7%
- **Computer Software:** 7.7%
- **Computer &amp; Network Security:** 7.7%
- **Banking:** 7.7%
- **Telecommunications:** 2.6%
- **Security and Investigations:** 2.6%
- **Oil &amp; Energy:** 2.6%
- **Management Consulting:** 2.6%
- **Other:** 12.8%

#### Wazuh

- **Information Technology and Services:** 35.8%
- **Computer &amp; Network Security:** 23.9%
- **Computer Software:** 10.4%
- **Security and Investigations:** 4.5%
- **Hospital &amp; Health Care:** 4.5%
- **Financial Services:** 3.0%
- **Apparel &amp; Fashion:** 3.0%
- **Accounting:** 3.0%
- **Utilities:** 1.5%
- **Military:** 1.5%
- **Other:** 9.0%

---
## Alternatives

### Alternatives to Splunk SOAR (Security Orchestration, Automation and Response)

- [Tines](https://www.g2.com/products/tines/reviews) — 4.7/5 stars (401 reviews)
- [Google Security Operations](https://www.g2.com/products/google-security-operations/reviews) — 4.4/5 stars (57 reviews)
- [Torq AI SOC Platform](https://www.g2.com/products/torq-ai-soc-platform/reviews) — 4.8/5 stars (150 reviews)
- [Palo Alto Networks Cortex XSOAR](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews) — 4.6/5 stars (28 reviews)
- [KnowBe4 PhishER/PhishER Plus](https://www.g2.com/products/knowbe4-phisher-phisher-plus/reviews) — 4.5/5 stars (571 reviews)
- [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) — 4.4/5 stars (296 reviews)
- [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (403 reviews)
- [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) — 4.6/5 stars (440 reviews)
- [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) — 4.4/5 stars (337 reviews)
- [IBM QRadar SOAR](https://www.g2.com/products/ibm-qradar-soar/reviews) — 4.0/5 stars (29 reviews)

### Alternatives to Wazuh

- [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) — 4.6/5 stars (440 reviews)
- [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews) — 4.7/5 stars (201 reviews)
- [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) — 4.4/5 stars (337 reviews)
- [CrowdSec](https://www.g2.com/products/crowdsec/reviews) — 4.7/5 stars (88 reviews)
- [Carbon Black EDR](https://www.g2.com/products/carbon-black-edr/reviews) — 4.4/5 stars (86 reviews)
- [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) — 4.8/5 stars (890 reviews)
- [Cortex XDR](https://www.g2.com/products/palo-alto-networks-cortex-xdr/reviews) — 4.6/5 stars (57 reviews)
- [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) — 4.4/5 stars (312 reviews)
- [Cynet](https://www.g2.com/products/cynet/reviews) — 4.7/5 stars (257 reviews)
- [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) — 4.7/5 stars (834 reviews)

---
## Top Discussions

### Splunk SOAR (Security Orchestration, Automation and Response)

No discussions available for this product.

### Wazuh

- Title: [What is Wazuh - The Open Source Security Platform used for?](https://www.g2.com/discussions/what-is-wazuh-the-open-source-security-platform-used-for) — 1 comment
  > **Top comment:** "We use wazuh in Amazon AWS to monitor virtual machines and cloud instances.
Apart from it it can be used for endpoint security, we just need to install an..."

---
**Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/splunk-soar-security-orchestration-automation-and-response-vs-wazuh)

