--- title: Splunk SOAR (Security Orchestration, Automation and Response) Reviews meta_title: 'Splunk SOAR (Security Orchestration, Automation and Response) Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 40 reviews by the users' company size, role or industry to find out how Splunk SOAR (Security Orchestration, Automation and Response) works for a business like yours. aggregate_rating: rating_value: 4.4 review_count: 40 scale: '5' date_modified: '2026-09-23' parent_category: name: System Security url: https://www.g2.com/categories/system-security ---

Splunk SOAR (Security Orchestration, Automation and Response) Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users appreciate the automation capabilities of Splunk SOAR, enabling efficient threat detection and response with minimal human error. (16 mentions)
Users value the end-to-end security management of Splunk SOAR, enhancing incident response and threat detection efficiency. (13 mentions)
Users appreciate the flexibility and integration capabilities of Splunk SOAR for tailoring security workflows to their needs. (9 mentions)
Users commend the easy threat detection and analysis capabilities, enhancing security response with flexible workflows. (8 mentions)
Users appreciate the ease of use in Splunk SOAR, benefiting from a user-friendly interface and seamless integrations. (7 mentions)
Users find Splunk SOAR expensive, making it difficult for normal users to afford and implement effectively. (16 mentions)
Users find the learning curve steep for Splunk SOAR, requiring extensive knowledge and training for effective use. (7 mentions)
Users find the difficult learning curve of Splunk SOAR challenging, especially for beginners and new users of automation tools. (6 mentions)
Users find the software's complexity challenging to navigate, particularly for beginners needing extensive training. (5 mentions)
Users find the poor interface design of Splunk SOAR challenging, particularly for beginners navigating its features. (4 mentions)

5 Pros or Advantages of Splunk SOAR (Security Orchestration, Automation and Response)

1. Automation
Users appreciate the automation capabilities of Splunk SOAR, enabling efficient threat detection and response with minimal human error.
See 16 mentions

See Related User Reviews

Dheeraj T.
DT

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

The platform is packed with features and once you get used to it, building and deploying playbooks becomes a regular part of our workflow. We use it d

Noor Z.
NZ

Noor Z.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is an awesome automation and security software"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such a tool that has features and options that will make everyone's work life as easier as mine with its security, automation features,

2. Security
Users value the end-to-end security management of Splunk SOAR, enhancing incident response and threat detection efficiency.
See 13 mentions

See Related User Reviews

Noor Z.
NZ

Noor Z.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is an awesome automation and security software"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such a tool that has features and options that will make everyone's work life as easier as mine with its security, automation features,

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

-Easy to analyse and detect security threats -Flexibility in orchestrating workflows and integrating with other security tools. _Easy to customi

3. Features
Users appreciate the flexibility and integration capabilities of Splunk SOAR for tailoring security workflows to their needs.
See 9 mentions

See Related User Reviews

Dheeraj T.
DT

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

The platform is packed with features and once you get used to it, building and deploying playbooks becomes a regular part of our workflow. We use it d

Noor Z.
NZ

Noor Z.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is an awesome automation and security software"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such a tool that has features and options that will make everyone's work life as easier as mine with its security, automation features,

4. Threat Detection
Users commend the easy threat detection and analysis capabilities, enhancing security response with flexible workflows.
See 8 mentions

See Related User Reviews

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

-Easy to analyse and detect security threats -Flexibility in orchestrating workflows and integrating with other security tools. _Easy to customi

JP

jigar p.

Mid-Market (51-1000 emp.)

5.0/5

"Best security tool I have ever seen"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

I like its real-time responsiveness and real-time data alert and threat alert which is most accurate. And threat visualization is the best because I a

5. Ease of Use
Users appreciate the ease of use in Splunk SOAR, benefiting from a user-friendly interface and seamless integrations.
See 7 mentions

See Related User Reviews

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

-Easy to analyse and detect security threats -Flexibility in orchestrating workflows and integrating with other security tools. _Easy to customi

Eshan R.
ER

Eshan R.

Enterprise (> 1000 emp.)

3.0/5

"Making work more efficient but needs some minor upgrades!"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

I has helped in automation and simplification of repetitive security tasks thereby saving time on manual tasks. Easy to understand and implement compa

5 Cons or Disadvantages of Splunk SOAR (Security Orchestration, Automation and Response)

1. Expensive
Users find Splunk SOAR expensive, making it difficult for normal users to afford and implement effectively.
See 16 mentions

See Related User Reviews

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Its complex to learn when new to the software and its very costly for small business enterprise but the support team is very responsive.

Prakash Gupta K.
PK

Prakash Gupta K.

Enterprise (> 1000 emp.)

4.0/5

"Great tool with automation capabilities"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

The cost is high. However, it has the required capabilities. I still feel the cost need to be modified.

2. Learning Curve
Users find the learning curve steep for Splunk SOAR, requiring extensive knowledge and training for effective use.
See 7 mentions

See Related User Reviews

Dheeraj T.
DT

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Getting started wasn’t the easiest—there’s a bit of a learning curve at the beginning, especially if you're new to automation platforms. Some parts of

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Its complex to learn when new to the software and its very costly for small business enterprise but the support team is very responsive.

3. Difficult Learning
Users find the difficult learning curve of Splunk SOAR challenging, especially for beginners and new users of automation tools.
See 6 mentions

See Related User Reviews

Dheeraj T.
DT

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Getting started wasn’t the easiest—there’s a bit of a learning curve at the beginning, especially if you're new to automation platforms. Some parts of

Verified User
U

Verified User

Mid-Market (51-1000 emp.)

4.0/5

"Great automation and response actions"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

It's quite complex for the non splunkler person. They have to understand the workflow and the all the configurations in order to use it at its best. I

4. Complexity
Users find the software's complexity challenging to navigate, particularly for beginners needing extensive training.
See 5 mentions

See Related User Reviews

Josephine C.
JC

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Its complex to learn when new to the software and its very costly for small business enterprise but the support team is very responsive.

Verified User
U

Verified User

Mid-Market (51-1000 emp.)

4.0/5

"Great automation and response actions"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

It's quite complex for the non splunkler person. They have to understand the workflow and the all the configurations in order to use it at its best. I

5. Poor Interface Design
Users find the poor interface design of Splunk SOAR challenging, particularly for beginners navigating its features.
See 4 mentions

See Related User Reviews

Dheeraj T.
DT

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Getting started wasn’t the easiest—there’s a bit of a learning curve at the beginning, especially if you're new to automation platforms. Some parts of

Jay P.
JP

Jay P.

Mid-Market (51-1000 emp.)

4.5/5

"splunk Soar is best tool for industry to secure the network infrastructure."

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

there are some disadvantages of Splunk which have been mentioned below 1. it required a lot of knowledge to operate this tool 2. cost is too high 3.

Top-Rated Alternatives

Tines Stories
Tines Stories
4.7/5(430)
Google Security Operations
Google Security Operations
4.4/5(171)
Torq AI SOC Platform
Torq AI SOC Platform
4.8/5(155)

Splunk SOAR (Security Orchestration, Automation and Response) Reviews (40)

Reviews

Splunk SOAR (Security Orchestration, Automation and Response) Reviews (40)

4.4
40 reviews
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Here's how.
NS
Niladree S.
Consulting
Small-Business (50 or fewer emp.)
"Best SOAR security in market"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Automation and response strategy, detection and prevention, SOAR extra features like others solution in the market, simplest architecture, strong recommendation. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Need more custom policy for detection prevention in security, UI should be simple to user performance. Review collected by and hosted on G2.com.

Prakash Gupta K.
PK
Prakash Gupta K.
Manager
Enterprise (> 1000 emp.)
"Great tool with automation capabilities"
4/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Great tool with the finest automation capabilities and the potentially required monitoring capabilities, which is essential for every industry. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

The cost is high. However, it has the required capabilities. I still feel the cost need to be modified. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
UI
Verified User in Information Technology and Services
Enterprise (> 1000 emp.)
"Security automation using Splunk SOAR"
4.5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR helps in automating the repetitive tasks, investigate and respond to security incidents in seconds. This helps in increasing the productivity of security management. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

As such there are no flaws in using this but the cost of the product is quite high in which small organisations think twice while rendering the service. Review collected by and hosted on G2.com.

BB
Bala B.
Software engineer
Enterprise (> 1000 emp.)
"Great Security Orchestration Tool!"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

One of the best product to automate the IT security processes. It will find the security threats effectivity and automate the security incidents, which is the best part. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Cost is the most significant fact. Other than that, I don't have any dislikes. Review collected by and hosted on G2.com.

Charan Raj Y.
CY
Charan Raj Y.
QA Automation Engineer
Enterprise (> 1000 emp.)
"Best of security action and monitoring tool in the market"
4.5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

It is one of the easy and standard rule tool to set task to trigger agents across the systems at once. Can send the multiple events of security tasks at once and can preview/analyze the triggered events. It doesn't need coding to setting up Easy of UI access and actions Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

It is costly compared to other ones in the market It would be great if they share more tutorial of tool Review collected by and hosted on G2.com.

Verified User in Consulting
UC
Verified User in Consulting
Enterprise (> 1000 emp.)
"Okayish"
2.5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Easy to search through the logs that help a lot in debugging Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

The UI could be improved, to show the most frequently used things Review collected by and hosted on G2.com.

Selvamuthukumar L.
SL
Selvamuthukumar L.
Senior Technical Consultant
Mid-Market (51-1000 emp.)
"AWASOME Experience"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Easy to use and very informative and give most accurate solution Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

May get complicate answers.ans yes it's not realizer with some solutions Review collected by and hosted on G2.com.

EN
Eduardo N.
Technical Support Engineer
Small-Business (50 or fewer emp.)
"Great Platform! Great Automation"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

I like the automative tasks and how easily we can investigate and respond to security vulnerabilities Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

At first, a little confusing to use but after a bit of practice I personally recommend it Review collected by and hosted on G2.com.

Boga Venkatesh N.
BN
Boga Venkatesh N.
Mid-Market (51-1000 emp.)
"Seamless Product"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

It's a very robust product and has multiple features to enhance user experience Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Nothing as of now. Everything in the product is up to the mark Review collected by and hosted on G2.com.

Verified User in Financial Services
CF
Verified User in Financial Services
Small-Business (50 or fewer emp.)
"Best Integrated end to end case solution from Splunk"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

I liked the Incident management solution. Whenever an event occurs, it can integrate a Remediation solution automatically with such ease. I also appreciate the notification integrations with PagerDuty etc. are excellent add-on advantages. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

I do not find much cons in the Framework offered by Splunk SOAR, it's always going to improve from what we have now may even become powerful with the AI Review collected by and hosted on G2.com.
Categories on G2
Explore More