--- title: Splunk SOAR (Security Orchestration, Automation and Response) Reviews meta\_title: 'Splunk SOAR (Security Orchestration, Automation and Response) Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 41 reviews by the users' company size, role or industry to find out how Splunk SOAR (Security Orchestration, Automation and Response) works for a business like yours. aggregate\_rating: rating\_value: 4.4 review\_count: 41 scale: '5' date\_modified: '2026-08-07' parent\_category: name: System Security url: https://www.g2.com/categories/system-security --- # Splunk SOAR (Security Orchestration, Automation and Response) Reviews & Product Details Claimed ###### Profile Status This profile is currently managed by Splunk SOAR (Security Orchestration, Automation and Response) but has limited features. Are you part of the Splunk SOAR (Security Orchestration, Automation and Response) team? [Upgrade your plan](https://sell.g2.com) to enhance your branding and engage with visitors to your profile! Splunk SOAR provides security orchestration, automation and response capabilities that allow security analysts to work smarter by automating repetitive tasks; respond to security incidents faster with automated detection, investigation, and response; increase productivity, efficiency and accuracy; and strengthen defenses by connecting and coordinating complex workflows across their team and tools. Splunk SOAR also supports a broad range of security operations center (SOC) functions including event and case management, integrated threat intelligence, collaboration tools and reporting. * * * Seller [Cisco](https://www.g2.com/sellers/cisco) Discussions [Splunk SOAR (Security Orchestration, Automation and Response) Community](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/discuss) Solution Type Best-of-Breed Overview by catalina radu Show More ## Value at a Glance Averages based on real user reviews. ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/pricing) ## Top-Rated Alternatives [ ![Tines](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Tines") Tines 4.7/5(406) ](https://www.g2.com/products/tines/reviews) [ ![Google Security Operations](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Google Security Operations") Google Security Operations 4.4/5(84) ](https://www.g2.com/products/google-security-operations/reviews) [ ![Torq AI SOC Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Torq AI SOC Platform") Torq AI SOC Platform 4.8/5(150) ](https://www.g2.com/products/torq-ai-soc-platform/reviews) [ View All Alternatives ](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/competitors/alternatives) ## User Insights Average based on 41 real user reviews. Perceived Cost $$$$$ [Log in to unlock pricing and user insights](/login) ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services") CF Verified User in Financial Services Small-Business (50 or fewer emp.) 7/1/2023 "Best Integrated end to end case solution from Splunk" 5/5 What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)? I liked the Incident management solution. Whenever an event occurs, it can integrate a Remediation solution automatically with such ease. I also appreciate the notification integrations with PagerDuty etc. are excellent add-on advantages. Review collected by and hosted on G2.com. What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)? i do not find much cons in the Framework offered by Splunk SOAR, its always going to improve from what we have now may even become powerful with the AI Review collected by and hosted on G2.com. What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you? Incident management & Auto Remidiations automation playbooks & Notifications Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite TP Tejas P. IT Manager Enterprise (\> 1000 emp.) 6/27/2023 "Review for Splunk" 5/5 What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)? The Security related Incidents, Events on the Dashboard Review collected by and hosted on G2.com. What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)? Nothing at this moment to dislike about this product Review collected by and hosted on G2.com. What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you? Security related Incident logging and immediate automated response Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking") UB Verified User in Banking Enterprise (\> 1000 emp.) 7/14/2023 "Splunk Soar is a great tool for modern SOCs" 5/5 What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)? Up to date with the zero day challenging threads. Review collected by and hosted on G2.com. What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)? Nothing as such, it is a great tool as of now. Review collected by and hosted on G2.com. What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you? Mainly incident response, blocking and notifying about attacks Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Shatavisa A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shatavisa A.") SA Shatavisa A. Assistant Consultant Mid-Market (51-1000 emp.) 5/2/2023 "Notifications" 3/5 What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)? Certificate expired notification and if any alerts Review collected by and hosted on G2.com. What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)? It supports REST api to configure automation Review collected by and hosted on G2.com. What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you? To automate incidents Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Manzar A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Manzar A.") MA Manzar A. Software Engineer Enterprise (\> 1000 emp.) 5/9/2022 "Splunk SOAR Review" 4/5 What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)? The Splunk SOAR is quite a capable SOAR platform from Splunk. What I liked most is the level of automation that can be achieved with Splunk SOAR. Also, this tool is good for both the users who know python and who do not. Most of the automation can be achieved without any coding effort but if SOAR engineer is having python knowledge a lot of custom automation can be achieved. Review collected by and hosted on G2.com. What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)? Integration is quite easy within the Splunk ecosystem but integration with other tools outside Splunk Ecospace is a little tedious job to do and also the documentation is not as reach as it should be. Review collected by and hosted on G2.com. Recommendations to others considering Splunk SOAR (Security Orchestration, Automation and Response): I would recommend to do POC with Splunk and Cortex XDR and then decide which one you want to use. Review collected by and hosted on G2.com. What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you? Automated investigation and Response. A lot of time consuming things can be automated and thus reducing the overall effort and time invested by the SOC Analysts. It improves the overall SLA and also reduce the cost of SOC as less number of SOC Analysts are required. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite AK Ajith K. Specialist programmer Mid-Market (51-1000 emp.) 9/14/2022 "Great tool with features to monitoring logs and resolving threats/issues" 5/5 What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)? Simple and Good UI for monitoring audit logs, identifying threats, and creating automated scripts for resolution. Features to create dashboards and pivots to visualise data collected. Review collected by and hosted on G2.com. What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)? The tool is expensive as the usage cost will be based on the number of log files it indexes and retrieves the data. Review collected by and hosted on G2.com. What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you? The tool solves problems in threat management, including monitoring and identifying threats, and resolves them with the help of automation by configuring predefined scripts. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") AI Verified User in Information Technology and Services Enterprise (\> 1000 emp.) 8/26/2022 "Splunk SOAR beginner review" 4/5 What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)? splunk useful tool to move the logs to single space and analyse digitalize like SOAR will provide seamless automation with logs and you can create a runbook Review collected by and hosted on G2.com. What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)? since I am beginner I cannot comment on this. However I am going to start evaluatioin on this on my free time becaus splunk is essential for us and it is alreay there so using SOAR I am trying to value add Review collected by and hosted on G2.com. What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you? Since I am staring to read about this i can understand it can provide automation on top of our logs Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Animesh R.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Animesh R.") AR Animesh R. Senior Manager Computer & Network Security Small-Business (50 or fewer emp.) 7/19/2022 "Splunk SOAR review" 5/5 What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)? the automated playbook makes the life little bit easier on job. Review collected by and hosted on G2.com. What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)? nothing so far, some plugins are still little complicated to configure Review collected by and hosted on G2.com. What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you? security automation, less human interaction for basic task monitoring Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Mohit G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Mohit G.") MG Mohit G. Asst. Vice President - Information Security Enterprise (\> 1000 emp.) 9/16/2021 "Easy Automation with no coding approach" 4.5/5 What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)? It is a flexible product with many essential and useful features, which along with outstanding customer support, brings the SOC environment to the next level. The no-code approach to integrations and the ease of setting up playbooks make it stand out. Review collected by and hosted on G2.com. What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)? Little expensive, and API and third-party applications integration have room to improve. Review collected by and hosted on G2.com. What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you? • Improve business process agility • Create internal/operational efficiencies • Improve business process outcomes • Enhance decision making • Reduce the time and effort of the analyst for making an informed decision on potential attacks. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Abhishek V.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Abhishek V.") AV Abhishek V. Associate Information Technology and Services Enterprise (\> 1000 emp.) 8/6/2019 "Turnaround to Business" 4.5/5 What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)? It holds nerve center of the security ecosystem, giving teams the insight to quickly detect and respond to internal and external attacks, simplify threat management minimizing risk, A great product to use for security any organization at any level. Review collected by and hosted on G2.com. What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)? Expensive, as it logs size based, more you index more money you have to spend, should be lower in price, there is less to dislike about this product, its all win win for us. Review collected by and hosted on G2.com. Recommendations to others considering Splunk SOAR (Security Orchestration, Automation and Response): Splunk Enterprise Security is the nerve center of the security ecosystem, giving teams the insight to quickly detect and respond to internal and external attacks, simplify threat management minimizing risk. Review collected by and hosted on G2.com. What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you? It Enable us process malware email alerts in seconds and more important to rectify the fake accounts and transactions on bank sites. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Seller invite ## Questions about Splunk SOAR (Security Orchestration, Automation and Response)? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Splunk SOAR (Security Orchestration, Automation and Response) ](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/discussions/new) GU Guest User What is Splunk SOAR (Security Orchestration, Automation and Response) used for? 0 Upvotes 0 [ Join the conversation ](https://www.g2.com/discussions/what-is-splunk-soar-security-orchestration-automation-and-response-used-for) [ View all Discussions ](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/discuss) ##### Pricing Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more. [ View More Pricing Information ](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/pricing) Splunk SOAR (Security Orchestration, Automation and Response) Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_8b3109519c061f3739371275d691098a/palo-alto-networks-cortex-xsoar.png "Product Avatar Image") Palo Alto Networks Cortex... 4.6/5(28) [ Compare Now ](https://www.g2.com/compare/palo-alto-networks-cortex-xsoar-vs-splunk-soar-security-orchestration-automation-and-response) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_36e663c5aef396250151ac398ce58e18/tines.png "Product Avatar Image") Tines 4.7/5(406) [ Compare Now ](https://www.g2.com/compare/splunk-soar-security-orchestration-automation-and-response-vs-tines) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_aeae116c52945fdecd7ed16d621cb315/google-security-operations.png "Product Avatar Image") Google Security Operations 4.4/5(84) [ Compare Now ](https://www.g2.com/compare/google-security-operations-vs-splunk-soar-security-orchestration-automation-and-response) ##### ##### Splunk SOAR (Security Orchestration, Automation and Response) Features Response System Isolation Alerting Performance Baselin Records Incident Logs Incident Reports Management Incident Alerts Automation Workflow Mapping Workflow Automation Automated Remediation [ View More Features ](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/features) ##### Categories on G2 [Incident Response](https://www.g2.com/categories/incident-response)[Security Orchestration, Automation, and Response (SOAR)](https://www.g2.com/categories/security-orchestration-automation-and-response-soar)[AI SOC Agents](https://www.g2.com/categories/ai-soc-agents) ##### Explore More [What local listing management system offers real-time update tracking?](https://www.g2.com/discussions/what-local-listing-management-system-offers-real-time-update-tracking)[Best PRM software recommendations](https://www.g2.com/discussions/recommendations-for-the-best-partner-relationship-management-prm-software)[What's the leading software for online business events](https://www.g2.com/discussions/what-s-the-leading-software-for-online-business-events) [Cerner Pharmacy vs Computer-Rx: which pharmacy management system has better insurance integration for pharmacy teams?](https://www.g2.com/discussions/cerner-pharmacy-vs-computer-rx-which-pharmacy-management-system-has-better-insurance-integration-for-pharmacy-teams)[Which communications governance vendors have the most intuitive policy configuration and minimal learning curve?](https://www.g2.com/discussions/which-communications-governance-vendors-have-the-most-intuitive-policy-configuration-and-minimal-learning-curve)[Pros and Cons Details](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)