--- title: Splunk SOAR (Security Orchestration, Automation and Response) Reviews meta_title: 'Splunk SOAR (Security Orchestration, Automation and Response) Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 40 reviews by the users' company size, role or industry to find out how Splunk SOAR (Security Orchestration, Automation and Response) works for a business like yours. aggregate_rating: rating_value: 4.4 review_count: 40 scale: '5' date_modified: '2026-09-23' parent_category: name: System Security url: https://www.g2.com/categories/system-security ---

Splunk SOAR (Security Orchestration, Automation and Response) Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users appreciate the automation capabilities of Splunk SOAR, enabling efficient threat detection and response with minimal human error. (16 mentions)
Users value the end-to-end security management of Splunk SOAR, enhancing incident response and threat detection efficiency. (13 mentions)
Users appreciate the flexibility and integration capabilities of Splunk SOAR for tailoring security workflows to their needs. (9 mentions)
Users commend the easy threat detection and analysis capabilities, enhancing security response with flexible workflows. (8 mentions)
Users appreciate the ease of use in Splunk SOAR, benefiting from a user-friendly interface and seamless integrations. (7 mentions)
Users find Splunk SOAR expensive, making it difficult for normal users to afford and implement effectively. (16 mentions)
Users find the learning curve steep for Splunk SOAR, requiring extensive knowledge and training for effective use. (7 mentions)
Users find the difficult learning curve of Splunk SOAR challenging, especially for beginners and new users of automation tools. (6 mentions)
Users find the software's complexity challenging to navigate, particularly for beginners needing extensive training. (5 mentions)
Users find the poor interface design of Splunk SOAR challenging, particularly for beginners navigating its features. (4 mentions)

5 Pros or Advantages of Splunk SOAR (Security Orchestration, Automation and Response)

5 Cons or Disadvantages of Splunk SOAR (Security Orchestration, Automation and Response)

Splunk SOAR (Security Orchestration, Automation and Response) Reviews (40)

Reviews

Splunk SOAR (Security Orchestration, Automation and Response) Reviews (40)

4.4
40 reviews
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
TP
Tejas P.
IT Manager
Enterprise (> 1000 emp.)
"Review for Splunk"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

The Security related Incidents, Events on the Dashboard Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Nothing at this moment to dislike about this product Review collected by and hosted on G2.com.

Verified User in Banking
UB
Verified User in Banking
Enterprise (> 1000 emp.)
"Splunk Soar is a great tool for modern SOCs"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Up to date with the zero day challenging threads. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Nothing as such, it is a great tool as of now. Review collected by and hosted on G2.com.

Shatavisa A.
SA
Shatavisa A.
Assistant Consultant
Mid-Market (51-1000 emp.)
"Notifications"
3/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Certificate expired notification and if any alerts Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

It supports REST api to configure automation Review collected by and hosted on G2.com.

Manzar A.
MA
Manzar A.
Software Engineer
Enterprise (> 1000 emp.)
"Splunk SOAR Review"
4/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

The Splunk SOAR is quite a capable SOAR platform from Splunk. What I liked most is the level of automation that can be achieved with Splunk SOAR. Also, this tool is good for both the users who know python and who do not. Most of the automation can be achieved without any coding effort but if SOAR engineer is having python knowledge a lot of custom automation can be achieved. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Integration is quite easy within the Splunk ecosystem but integration with other tools outside Splunk Ecospace is a little tedious job to do and also the documentation is not as reach as it should be. Review collected by and hosted on G2.com.

AK
Ajith K.
Specialist programmer
Mid-Market (51-1000 emp.)
"Great tool with features to monitoring logs and resolving threats/issues"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Simple and Good UI for monitoring audit logs, identifying threats, and creating automated scripts for resolution. Features to create dashboards and pivots to visualise data collected. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

The tool is expensive as the usage cost will be based on the number of log files it indexes and retrieves the data. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
AI
Verified User in Information Technology and Services
Enterprise (> 1000 emp.)
"Splunk SOAR beginner review"
4/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk is a useful tool to consolidate logs into a single space and analyze them. Digitalization with SOAR provides seamless automation with logs, and you can create a runbook. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Since I am a beginner, I cannot comment on this. However, I am going to start evaluating it in my free time because Splunk is essential for us and it is already there, so using SOAR I am trying to add value. Review collected by and hosted on G2.com.

Animesh R.
AR
Animesh R.
Senior Manager
Computer & Network Security
Small-Business (50 or fewer emp.)
"Splunk SOAR review"
5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

the automated playbook makes the life little bit easier on job. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

nothing so far, some plugins are still little complicated to configure Review collected by and hosted on G2.com.

Mohit G.
MG
Mohit G.
Asst. Vice President - Information Security
Enterprise (> 1000 emp.)
"Easy Automation with no coding approach"
4.5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

It is a flexible product with many essential and useful features, which along with outstanding customer support, brings the SOC environment to the next level. The no-code approach to integrations and the ease of setting up playbooks make it stand out. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Little expensive, and API and third-party applications integration have room to improve. Review collected by and hosted on G2.com.

Abhishek V.
AV
Abhishek V.
Associate
Information Technology and Services
Enterprise (> 1000 emp.)
"Turnaround to Business"
4.5/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

It holds nerve center of the security ecosystem, giving teams the insight to quickly detect and respond to internal and external attacks, simplify threat management minimizing risk, A great product to use for security any organization at any level. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Expensive, as it logs size based, more you index more money you have to spend, should be lower in price, there is less to dislike about this product, its all win win for us. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
CI
Verified User in Information Technology and Services
Small-Business (50 or fewer emp.)
Business partner of the seller or seller's competitor, not included in G2 scores.
"Great product to orchestrate security related events and other"
4/5
What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Easy to use GUI, you can have with your own add-ons, Many integrations in existing solutions and tools. It is a great orchestration tool which can be used for any kind of orchestration not only security. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

GUI logic not intuitive. You need to understand the logic before you can use it successfully. Sometimes it is too security word focused. Review collected by and hosted on G2.com.