It's been two months since this profile received a new review

Splunk SOAR (Security Orchestration, Automation and Response) Reviews & Product Details

Splunk SOAR provides security orchestration, automation and response capabilities that allow security analysts to work smarter by automating repetitive tasks; respond to security incidents faster with automated detection, investigation, and response; increase productivity, efficiency and accuracy; and strengthen defenses by connecting and coordinating complex workflows across their team and tools. Splunk SOAR also supports a broad range of security operations center (SOC) functions including event and case management, integrated threat intelligence, collaboration tools and reporting.

Seller

Cisco

Discussions

Splunk SOAR (Security Orchestration, Automation and Response) Community

Product Description

Harness the full power of your existing security investments with security orchestration, automation and response. With Splunk Phantom, execute actions in seconds not hours.

Overview by

catalina radu

Value at a Glance

Averages based on real user reviews.

Perceived Cost

$$$$$

View More Pricing Information

Top-Rated Alternatives

Tines

4.8/5

(255)

Palo Alto Networks Cortex XSOAR

4.6/5

(27)

Google Security Operations

4.4/5

(40)

View All Alternatives

G2 reviews are authentic and verified.

Here's how.

Tejas P.

IT Manager

Enterprise (> 1000 emp.)

6/27/2023

"Review for Splunk"

5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

The Security related Incidents, Events on the Dashboard Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Nothing at this moment to dislike about this product Review collected by and hosted on G2.com.

Verified User in Banking

Enterprise (> 1000 emp.)

7/14/2023

"Splunk Soar is a great tool for modern SOCs"

5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Up to date with the zero day challenging threads. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Nothing as such, it is a great tool as of now. Review collected by and hosted on G2.com.

Shatavisa A.

Assistant Consultant

Mid-Market (51-1000 emp.)

5/2/2023

"Notifications"

3/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Certificate expired notification and if any alerts Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

It supports REST api to configure automation Review collected by and hosted on G2.com.

Manzar A.

Software Engineer

Enterprise (> 1000 emp.)

5/9/2022

"Splunk SOAR Review"

4/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

The Splunk SOAR is quite a capable SOAR platform from Splunk. What I liked most is the level of automation that can be achieved with Splunk SOAR. Also, this

tool is good for both the users who know python and who do not. Most of the automation can be achieved without any coding effort but if SOAR engineer is having python knowledge

a lot of custom automation can be achieved. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Integration is quite easy within the Splunk ecosystem but integration with other tools outside Splunk Ecospace is a little tedious job to do and also the documentation is not as reach as it should be. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk SOAR (Security Orchestration, Automation and Response):

I would recommend to do POC with Splunk and Cortex XDR and then decide which one you want to use. Review collected by and hosted on G2.com.

What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you?

Automated investigation and Response.

A lot of time consuming things can be automated and thus reducing the overall effort and time invested by the SOC Analysts.

It improves the overall SLA and also reduce the cost of SOC as less number of SOC Analysts are required. Review collected by and hosted on G2.com.

Ajith K.

Specialist programmer

Mid-Market (51-1000 emp.)

9/14/2022

"Great tool with features to monitoring logs and resolving threats/issues"

5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Simple and Good UI for monitoring audit logs, identifying threats, and creating automated scripts for resolution.

Features to create dashboards and pivots to visualise data collected. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

The tool is expensive as the usage cost will be based on the number of log files it indexes and retrieves the data. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

8/26/2022

"Splunk SOAR beginner review"

4/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

splunk useful tool to move the logs to single space and analyse digitalize like SOAR will provide seamless automation with logs and you can create a runbook Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

since I am beginner I cannot comment on this. However I am going to start evaluatioin on this on my free time becaus splunk is essential for us and it is alreay there so using SOAR I am trying to value add Review collected by and hosted on G2.com.

Animesh R.

Founder

Small-Business (50 or fewer emp.)

7/19/2022

"Splunk SOAR review"

5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

the automated playbook makes the life little bit easier on job. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

nothing so far, some plugins are still little complicated to configure Review collected by and hosted on G2.com.

Mohit G.

Asst. Vice President - Information Security

Enterprise (> 1000 emp.)

9/16/2021

"Easy Automation with no coding approach"

4.5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

It is a flexible product with many essential and useful features, which along with outstanding customer support, brings the SOC environment to the next level.

The no-code approach to integrations and the ease of setting up playbooks make it stand out. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Little expensive, and API and third-party applications integration have room to improve. Review collected by and hosted on G2.com.

What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you?

• Improve business process agility

• Create internal/operational efficiencies

• Improve business process outcomes

• Enhance decision making

• Reduce the time and effort of the analyst for making an informed decision on potential attacks. Review collected by and hosted on G2.com.

Abhishek V.

Associate

Information Technology and Services

Enterprise (> 1000 emp.)

8/6/2019

"Turnaround to Business"

4.5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

It holds nerve center of the security ecosystem, giving teams the insight to quickly detect

and respond to internal and external attacks, simplify threat management minimizing risk, A great product to use for security any organization at any level. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Expensive, as it logs size based, more you index more money you have to spend, should be lower in price, there is less to dislike about this product, its all win win for us. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk SOAR (Security Orchestration, Automation and Response):

Splunk Enterprise Security is the nerve center of the security ecosystem, giving teams the insight to quickly detect and respond to internal and external attacks, simplify threat management minimizing risk. Review collected by and hosted on G2.com.

What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you?

It Enable us process malware email alerts in seconds and more important to rectify the fake accounts and transactions on bank sites. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Small-Business (50 or fewer emp.)

8/9/2019

Business partner of the seller or seller's competitor, not included in G2 scores.

"Great product to orchestrate security related events and other"

4/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Easy to use GUI , you can have with you own add-ons, Many integrations in existing solutions and tools.It is a great orchestration toll which can be used for any kind of orchestration not only security. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

GUI logic not intuitive. You need to understand the logic before you can use it successfully. Sometime it is too security word focused. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk SOAR (Security Orchestration, Automation and Response):

automation and orchestration will be key for the future. Phantom is a great solution to get there. Review collected by and hosted on G2.com.

What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you?

Fast reaction to identified security events, automation of standard SIEM events and action handling, repeating actions based on events

improve time to resolution Review collected by and hosted on G2.com.