--- title: Splunk SOAR (Security Orchestration, Automation and Response) Reviews meta_title: 'Splunk SOAR (Security Orchestration, Automation and Response) Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 40 reviews by the users' company size, role or industry to find out how Splunk SOAR (Security Orchestration, Automation and Response) works for a business like yours. aggregate_rating: rating_value: 4.4 review_count: 40 scale: '5' date_modified: '2026-09-23' parent_category: name: System Security url: https://www.g2.com/categories/system-security ---

Splunk SOAR (Security Orchestration, Automation and Response) Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users appreciate the automation capabilities of Splunk SOAR, enabling efficient threat detection and response with minimal human error. (16 mentions)
Users value the end-to-end security management of Splunk SOAR, enhancing incident response and threat detection efficiency. (13 mentions)
Users appreciate the flexibility and integration capabilities of Splunk SOAR for tailoring security workflows to their needs. (9 mentions)
Users commend the easy threat detection and analysis capabilities, enhancing security response with flexible workflows. (8 mentions)
Users appreciate the ease of use in Splunk SOAR, benefiting from a user-friendly interface and seamless integrations. (7 mentions)
Users find Splunk SOAR expensive, making it difficult for normal users to afford and implement effectively. (16 mentions)
Users find the learning curve steep for Splunk SOAR, requiring extensive knowledge and training for effective use. (7 mentions)
Users find the difficult learning curve of Splunk SOAR challenging, especially for beginners and new users of automation tools. (6 mentions)
Users find the software's complexity challenging to navigate, particularly for beginners needing extensive training. (5 mentions)
Users find the poor interface design of Splunk SOAR challenging, particularly for beginners navigating its features. (4 mentions)

5 Pros or Advantages of Splunk SOAR (Security Orchestration, Automation and Response)

1. Automation
Users appreciate the automation capabilities of Splunk SOAR, enabling efficient threat detection and response with minimal human error.
See 16 mentions

See Related User Reviews

Dheeraj T.
DT

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

The platform is packed with features and once you get used to it, building and deploying playbooks becomes a regular part of our workflow. We use it d

Noor Z.
NZ

Noor Z.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is an awesome automation and security software"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such a tool that has features and options that will make everyone's work life as easier as mine with its security, automation features,

2. Security
Users value the end-to-end security management of Splunk SOAR, enhancing incident response and threat detection efficiency.
See 13 mentions

See Related User Reviews

Noor Z.
NZ

Noor Z.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is an awesome automation and security software"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such a tool that has features and options that will make everyone's work life as easier as mine with its security, automation features,

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

-Easy to analyse and detect security threats -Flexibility in orchestrating workflows and integrating with other security tools. _Easy to customi

3. Features
Users appreciate the flexibility and integration capabilities of Splunk SOAR for tailoring security workflows to their needs.
See 9 mentions

See Related User Reviews

Dheeraj T.
DT

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

The platform is packed with features and once you get used to it, building and deploying playbooks becomes a regular part of our workflow. We use it d

Noor Z.
NZ

Noor Z.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is an awesome automation and security software"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such a tool that has features and options that will make everyone's work life as easier as mine with its security, automation features,

4. Threat Detection
Users commend the easy threat detection and analysis capabilities, enhancing security response with flexible workflows.
See 8 mentions

See Related User Reviews

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

-Easy to analyse and detect security threats -Flexibility in orchestrating workflows and integrating with other security tools. _Easy to customi

JP

jigar p.

Mid-Market (51-1000 emp.)

5.0/5

"Best security tool I have ever seen"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

I like its real-time responsiveness and real-time data alert and threat alert which is most accurate. And threat visualization is the best because I a

5. Ease of Use
Users appreciate the ease of use in Splunk SOAR, benefiting from a user-friendly interface and seamless integrations.
See 7 mentions

See Related User Reviews

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

-Easy to analyse and detect security threats -Flexibility in orchestrating workflows and integrating with other security tools. _Easy to customi

Eshan R.
ER

Eshan R.

Enterprise (> 1000 emp.)

3.0/5

"Making work more efficient but needs some minor upgrades!"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

I has helped in automation and simplification of repetitive security tasks thereby saving time on manual tasks. Easy to understand and implement compa

5 Cons or Disadvantages of Splunk SOAR (Security Orchestration, Automation and Response)

1. Expensive
Users find Splunk SOAR expensive, making it difficult for normal users to afford and implement effectively.
See 16 mentions

See Related User Reviews

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Its complex to learn when new to the software and its very costly for small business enterprise but the support team is very responsive.

Prakash Gupta K.
PK

Prakash Gupta K.

Enterprise (> 1000 emp.)

4.0/5

"Great tool with automation capabilities"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

The cost is high. However, it has the required capabilities. I still feel the cost need to be modified.

2. Learning Curve
Users find the learning curve steep for Splunk SOAR, requiring extensive knowledge and training for effective use.
See 7 mentions

See Related User Reviews

Dheeraj T.
DT

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Getting started wasn’t the easiest—there’s a bit of a learning curve at the beginning, especially if you're new to automation platforms. Some parts of

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Its complex to learn when new to the software and its very costly for small business enterprise but the support team is very responsive.

3. Difficult Learning
Users find the difficult learning curve of Splunk SOAR challenging, especially for beginners and new users of automation tools.
See 6 mentions

See Related User Reviews

Dheeraj T.
DT

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Getting started wasn’t the easiest—there’s a bit of a learning curve at the beginning, especially if you're new to automation platforms. Some parts of

Verified User
U

Verified User

Mid-Market (51-1000 emp.)

4.0/5

"Great automation and response actions"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

It's quite complex for the non splunkler person. They have to understand the workflow and the all the configurations in order to use it at its best. I

4. Complexity
Users find the software's complexity challenging to navigate, particularly for beginners needing extensive training.
See 5 mentions

See Related User Reviews

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Its complex to learn when new to the software and its very costly for small business enterprise but the support team is very responsive.

Verified User
U

Verified User

Mid-Market (51-1000 emp.)

4.0/5

"Great automation and response actions"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

It's quite complex for the non splunkler person. They have to understand the workflow and the all the configurations in order to use it at its best. I

5. Poor Interface Design
Users find the poor interface design of Splunk SOAR challenging, particularly for beginners navigating its features.
See 4 mentions

See Related User Reviews

Dheeraj T.
DT

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Getting started wasn’t the easiest—there’s a bit of a learning curve at the beginning, especially if you're new to automation platforms. Some parts of

Jay P.
JP

Jay P.

Mid-Market (51-1000 emp.)

4.5/5

"splunk Soar is best tool for industry to secure the network infrastructure."

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

there are some disadvantages of Splunk which have been mentioned below 1. it required a lot of knowledge to operate this tool 2. cost is too high 3.

Top-Rated Alternatives

Tines Stories
Tines Stories
4.7/5(430)
Google Security Operations
Google Security Operations
4.4/5(171)
Torq AI SOC Platform
Torq AI SOC Platform
4.8/5(155)

Splunk SOAR (Security Orchestration, Automation and Response) Reviews (40)

Reviews

Splunk SOAR (Security Orchestration, Automation and Response) Reviews (40)

4.4
40 reviews
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Here's how.
Jay P.
JP
Jay P.
Cyber Security Intern
Mid-Market (51-1000 emp.)
"splunk Soar is best tool for industry to secure the network infrastructure."
4.5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

I like automating and handling real-time data and getting threat alerts instate which is I wanted the most. moreover, it ends to end security resolution in one tool. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

there are some disadvantages of Splunk which have been mentioned below

1. it required a lot of knowledge to operate this tool

2. cost is too high

3. dashboard and UI is not beginner friendly Review collected by and hosted on G2.com.

JP
jigar p.
DevOps Engineer
Information Technology and Services
Mid-Market (51-1000 emp.)
"Best security tool I have ever seen"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

I like its real-time responsiveness and real-time data alert and threat alert which is most accurate. And threat visualization is the best because I am able to visualize all vulnerabilities. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

So in my opinion there is nothing to dislike but it requires some knowledge to operate it. Review collected by and hosted on G2.com.

Verified User in Education Management
UE
Verified User in Education Management
Small-Business (50 or fewer emp.)
"Useful but costly tool to use and integrate"
4/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

The main benefits of using Splunk are the array of tools along with SOAR that it offers along with the support for integration with various third party service providers. It provides automation of simple tasks with important tasks Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

The one thing that does not fit well in the overall scheme of things is the costing of the tool for integration into internal systems and also there is no local support for implementation Review collected by and hosted on G2.com.

Eshan R.
ER
Eshan R.
Lead AVP
Enterprise (> 1000 emp.)
"Making work more efficient but needs some minor upgrades!"
3/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

I has helped in automation and simplification of repetitive security tasks thereby saving time on manual tasks. Easy to understand and implement compared to other tools and programming languages. Captures all incidents and provides quick resolution. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Some plugins get stuck and it is difficult to get a quick solution without a dedicated support team. Review collected by and hosted on G2.com.

Bhavesh N.
BN
Bhavesh N.
Senior DevOps Engineer
Mid-Market (51-1000 emp.)
"Splunk soar"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Centralized security management and accident report management, we can customize feature according to requirement that's the best feature and we can migrate our security tools with it. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

According to me for new user it's bit complex to setup playbook and integration, sometime false positive security reports so it's sometime difficult to identify Review collected by and hosted on G2.com.

Verified User in Banking
EB
Verified User in Banking
Enterprise (> 1000 emp.)
"Good SIEM product but one of complex one"
2.5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

It is good product for enterprises and large scale organizations, solution has the capability to meet the different use cases and it has ability to integrate with most of the technology and security stack. Queries can be customized. Dashboard is good and effective for security analyst. Less false positive alerts as compared to other siem tools. Different workflows can be created. Works well with different security playbooks Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Product very expensive. Not easy to implement. Complex security architecture. Skills shortage of staff. Not many partners in India who can provide support for this siem tool. Review collected by and hosted on G2.com.

Vishal G.
VG
Vishal G.
DevOps Engineer
Mid-Market (51-1000 emp.)
"Good for monitoring"
4.5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

This helps security teams manage and respond to incidents more effectively. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

the cost of the platform and the resources required for maintenance considered as potential drawbacks. Review collected by and hosted on G2.com.

Jhonny C.
JC
Jhonny C.
Systems Engineer
Computer Software
Small-Business (50 or fewer emp.)
"Review for the people"
4.5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Definitely the most I like is the automation capabilities of Splunk, a wide range of tasks can be automated. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

SOAR is a bit expensive for me, not many organizations can pay for it, also, if you are not familiar with Splunk products you could have a bad start using this app. Review collected by and hosted on G2.com.

Kaviraj R.
KR
Kaviraj R.
System Administrator
Mid-Market (51-1000 emp.)
"Splunk SOAR Review"
4/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR provides real-time insight and analytics, security measures, it's support on multiple platforms. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is a complex and time-consuming process. software cost is expensive. it also required infrastructure for manage. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security
UC
Verified User in Computer & Network Security
Mid-Market (51-1000 emp.)
"Great automation and response actions"
4/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

The best thing that I like is their response actions. It provides many natively supported actions. Also, It provides the ability to implement the custom actions as per your requirements. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

It's quite complex for the non splunkler person. They have to understand the workflow and the all the configurations in order to use it at its best. It might need help of others for understanding. Review collected by and hosted on G2.com.
Categories on G2
Explore More