Splunk SOAR (Security Orchestration, Automation and Response) Pros and Cons

Splunk SOAR (Security Orchestration, Automation and Response) Pros and Cons: Top Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users value the flexibility and ease of integration with Splunk SOAR, streamlining security workflows effectively. (3 mentions)

Users value the automation features of Splunk SOAR, enhancing their workflow by streamlining security tasks seamlessly. (2 mentions)

Users value the high detection accuracy of Splunk SOAR, making threat analysis and response more effective. (2 mentions)

Users value the flexibility in integrating with other security tools, enhancing their workflow orchestration and security analysis. (2 mentions)

Users value the ease of threat analysis and flexible workflows provided by Splunk SOAR for enhanced security. (2 mentions)

Users value the ease of use of Splunk SOAR, allowing seamless integration and automation of security workflows. (1 mentions)

Users find the implementation ease of Splunk SOAR beneficial, enhancing daily workflows and automating security tasks seamlessly. (1 mentions)

Users find a steep learning curve when starting with Splunk SOAR, especially if new to automation tools. (2 mentions)

Users find it complex to learn Splunk SOAR, which can be challenging for newcomers and costly for small businesses. (1 mentions)

Users find the difficult learning curve challenging initially, especially for those new to automation platforms. (1 mentions)

Users find Splunk SOAR to be expensive, making it challenging for small businesses to adopt effectively. (1 mentions)

Users find the platform has a steep learning curve, as the UI could be more intuitive for new users. (1 mentions)

Users find the poor customer support of Splunk SOAR frustrating, especially when seeking guidance for complex issues. (1 mentions)

Top Pros or Advantages of Splunk SOAR (Security Orchestration, Automation and Response)

1. Features

Users value the flexibility and ease of integration with Splunk SOAR, streamlining security workflows effectively.

See 3 mentions

See Related User Reviews

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

The platform is packed with features and once you get used to it, building and deploying playbooks becomes a regular part of our workflow. We use it d

Noor Z.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is an awesome automation and security software"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such a tool that has features and options that will make everyone's work life as easier as mine with its security, automation features,

2. Automation

Users value the automation features of Splunk SOAR, enhancing their workflow by streamlining security tasks seamlessly.

See 2 mentions

See Related User Reviews

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

The platform is packed with features and once you get used to it, building and deploying playbooks becomes a regular part of our workflow. We use it d

Noor Z.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is an awesome automation and security software"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such a tool that has features and options that will make everyone's work life as easier as mine with its security, automation features,

3. Detection Accuracy

Users value the high detection accuracy of Splunk SOAR, making threat analysis and response more effective.

See 2 mentions

See Related User Reviews

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

The platform is packed with features and once you get used to it, building and deploying playbooks becomes a regular part of our workflow. We use it d

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

-Easy to analyse and detect security threats -Flexibility in orchestrating workflows and integrating with other security tools. _Easy to customi

4. Integrations

Users value the flexibility in integrating with other security tools, enhancing their workflow orchestration and security analysis.

See 2 mentions

See Related User Reviews

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

The platform is packed with features and once you get used to it, building and deploying playbooks becomes a regular part of our workflow. We use it d

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

-Easy to analyse and detect security threats -Flexibility in orchestrating workflows and integrating with other security tools. _Easy to customi

5. Security

Users value the ease of threat analysis and flexible workflows provided by Splunk SOAR for enhanced security.

See 2 mentions

See Related User Reviews

Noor Z.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is an awesome automation and security software"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such a tool that has features and options that will make everyone's work life as easier as mine with its security, automation features,

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

-Easy to analyse and detect security threats -Flexibility in orchestrating workflows and integrating with other security tools. _Easy to customi

6. Ease of Use

Users value the ease of use of Splunk SOAR, allowing seamless integration and automation of security workflows.

See 1 mentions

See Related User Reviews

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

-Easy to analyse and detect security threats -Flexibility in orchestrating workflows and integrating with other security tools. _Easy to customi

7. Implementation Ease

Users find the implementation ease of Splunk SOAR beneficial, enhancing daily workflows and automating security tasks seamlessly.

See 1 mentions

See Related User Reviews

Noor Z.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is an awesome automation and security software"

What do you like about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such a tool that has features and options that will make everyone's work life as easier as mine with its security, automation features,

Top Cons or Disadvantages of Splunk SOAR (Security Orchestration, Automation and Response)

1. Learning Curve

Users find a steep learning curve when starting with Splunk SOAR, especially if new to automation tools.

See 2 mentions

See Related User Reviews

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Getting started wasn’t the easiest—there’s a bit of a learning curve at the beginning, especially if you're new to automation platforms. Some parts of

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Its complex to learn when new to the software and its very costly for small business enterprise but the support team is very responsive.

2. Complexity

Users find it complex to learn Splunk SOAR, which can be challenging for newcomers and costly for small businesses.

See 1 mentions

See Related User Reviews

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Its complex to learn when new to the software and its very costly for small business enterprise but the support team is very responsive.

3. Difficult Learning

Users find the difficult learning curve challenging initially, especially for those new to automation platforms.

See 1 mentions

See Related User Reviews

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Getting started wasn’t the easiest—there’s a bit of a learning curve at the beginning, especially if you're new to automation platforms. Some parts of

4. Expensive

Users find Splunk SOAR to be expensive, making it challenging for small businesses to adopt effectively.

See 1 mentions

See Related User Reviews

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Its complex to learn when new to the software and its very costly for small business enterprise but the support team is very responsive.

5. Not Intuitive

Users find the platform has a steep learning curve, as the UI could be more intuitive for new users.

See 1 mentions

See Related User Reviews

Dheeraj T.

Mid-Market (51-1000 emp.)

5.0/5

"Splunk SOAR is a good software for automation"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Getting started wasn’t the easiest—there’s a bit of a learning curve at the beginning, especially if you're new to automation platforms. Some parts of

6. Poor Customer Support

Users find the poor customer support of Splunk SOAR frustrating, especially when seeking guidance for complex issues.

See 1 mentions

See Related User Reviews

Josephine C.

Small-Business (50 or fewer emp.)

4.5/5

"A great tool to orchestrate, automate and respond to security threats"

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Its complex to learn when new to the software and its very costly for small business enterprise but the support team is very responsive.

Top-Rated Alternatives

Tines

4.8/5

(255)

Palo Alto Networks Cortex XSOAR

4.6/5

(27)

Google Security Operations

4.4/5

(40)

View All Alternatives

G2 reviews are authentic and verified.

Here's how.

Dheeraj T.

Risk Analyst

Mid-Market (51-1000 emp.)

7/25/2024

"Splunk SOAR is a good software for automation"

5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

The platform is packed with features and once you get used to it, building and deploying playbooks becomes a regular part of our workflow. We use it daily to automate repetitive security tasks, and it integrates smoothly with our existing tools. Support has also been helpful during onboarding and when we had questions early on. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Getting started wasn’t the easiest—there’s a bit of a learning curve at the beginning, especially if you're new to automation platforms. Some parts of the UI could be more intuitive, and while the features are powerful, it takes time to fully understand and implement them. Review collected by and hosted on G2.com.

Noor Z.

icicibank

Mid-Market (51-1000 emp.)

7/25/2024

"Splunk SOAR is an awesome automation and security software"

5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such a tool that has features and options that will make everyone's work life as easier as mine with its security, automation features, and many good implementations. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Splunk SOAR is such an implimentation and easy-to-use tool that no one can ever dislike... Review collected by and hosted on G2.com.

Josephine C.

IT Coordinator

Small-Business (50 or fewer emp.)

7/18/2024

"A great tool to orchestrate, automate and respond to security threats"

4.5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

-Easy to analyse and detect security threats

-Flexibility in orchestrating workflows and integrating with other security tools.

_Easy to customize and fit our business security needs. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Its complex to learn when new to the software and its very costly for small business enterprise but the support team is very responsive. Review collected by and hosted on G2.com.

Srinivas G.

Sr security engineer

Mid-Market (51-1000 emp.)

7/19/2023

"Leading log management tool"

4/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

Automated playbooks. Splunk allows you to automate security and IT actions at machine speed. This can save security analysts a lot of time and effort, and it can also help to improve the accuracy and consistency of incident response.

Integration with other tools. Splunk can integrate with a wide range of other security tools, which can help to streamline your security operations. This can make it easier to get a complete view of an incident, and it can also help to automate tasks that would otherwise be manual.

Visual playbook editor is the best feature Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

The current documenation avilable is not enough and the cost is also expensive Review collected by and hosted on G2.com.

Anakshi C.

Technical Lead

Enterprise (> 1000 emp.)

7/21/2023

"Interesting and excellent way to hunt threats using automated actions"

4.5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

The visual playbook editor feature is the most appealing and the fact that various security technologies can be integrated into SOAR and build actions all from these under one roof. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

The user interface has a lot of information that is difficult to understand and process for a beginner. Also the cost often becomes a significant point to consider while purchasing for projects, smaller projects usually prefer inexpensive solutions. Review collected by and hosted on G2.com.

What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you?

Automating the workflows saves time and enables quick actions on threats.

Use of Python makes it easier for a technical person and hence one can build from existing python knowledge.

Features like input playbooks allow for a lot of customizations to existing playbooks and workflows and thus effectively automate threat handling and response.

Detailed monitoring and analysis of suspicious events is provided which makes the job easier for analysts. Review collected by and hosted on G2.com.

marenyane m.

Web Developer

Mid-Market (51-1000 emp.)

6/29/2023

"Are you struggling with automation in your team work? Try Splunk SOAR the best tool"

4/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

I like the fact that I am able to track all the repeatable tasks and alerts on a schedule.

It makes it easy to engage with my teammates

I am able to respond to any threats that may notify me while connecting with my team Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

I think they should at least allow us a period of 2 months to try it out. It is then that I can say that I have tried fully. I wouldn't say I like things that offer a short trial period. The ends without fully realizing the capability of a product Review collected by and hosted on G2.com.

What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you?

Team management

Dealing with online threats to phish for information

It helps me to deal with incidents that used to happen at my workplace. I was able to manage such incidents easily

It helped to do our team work faster because of easy management capability Review collected by and hosted on G2.com.

Diane D.

Mid-Market (51-1000 emp.)

5/23/2023

"Enhanced our ability to respond to threats"

4.5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

It has reduced human error in response and remediation efforts, we are able to respond more accurately to threats in our environment.

The playbooks are easy to understand and use.

It provides continuous and real time threats response 24/7.

I like that it has flexible deployment options, we are able to deploy on site and to our cloud resources.

The customer support is very knowledgeable, responsive and very helytere Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

It's a very high prices product, well much like eveyother splunk product. I also don't like that it's not possible to scale automation features . Review collected by and hosted on G2.com.

What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you?

It has enhanced our ability to respond to threats accurately and in real time.

It has also improved our capabilities and capacity to respond to any threats or attack

It has helped us reduce our MTTR, we are able to respond, repair fix any issue in much shorter time. Review collected by and hosted on G2.com.

Jay P.

Cyber Security Intern

Mid-Market (51-1000 emp.)

7/31/2023

"Splunk SOAR review"

4.5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

In my opinion,Splunk is the best netwok monitoring tool which is really helpfull for me to manage my infrastucture network and security and realtime analysis. nest for my company. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

there are some several reason why i dislike this. the points is mentioned below

1. Cost is major problem because it is too high. for normal user cannot afford it.

2.complexity to use . beacuse it required full course to learn for beginners. Review collected by and hosted on G2.com.

Yashasvi J.

Cloud and DevOps Trainee

Small-Business (50 or fewer emp.)

8/1/2023

"Great tool for IT management, Data retrieved was pretty precise."

4/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

It's less complex provided it's scalability and it's usage as a cloud application is one of the most attractive features that would make it an interesting tool as it is pretty compatible with any platform. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

Not many, maybe the price if considered as a flaw. But in terms of it's application didn't find many disadvantages. Review collected by and hosted on G2.com.

What problems is Splunk SOAR (Security Orchestration, Automation and Response) solving and how is that benefiting you?

It makes it easy to orchestrate my Ansible playbooks as I have been developing in them for a while now. Helps me scale my Containers in a very easy manner. So far Splunk SOAR has been a really effective tool with the experience I have with DevOps and Related technologies. Review collected by and hosted on G2.com.

Manthan G.

DevOps Engineer

Small-Business (50 or fewer emp.)

8/1/2023

"Splunk SOAR Review"

5/5

What do you like best about Splunk SOAR (Security Orchestration, Automation and Response)?

I have used Splunk in my carrier to solve the purpose of security and automation detection which helped me to fulfill my requirement as compared to the other tools available in the market. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR (Security Orchestration, Automation and Response)?

It is having a quite high pricing as compared to the tools available in the market also it having quite complex but the features are mostly useful so it great thing. Review collected by and hosted on G2.com.