--- title: Splunk SOAR Reviews meta_title: 'Splunk SOAR Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter reviews by the users' company size, role or industry to find out how Splunk SOAR works for a business like yours. aggregate_rating: rating_value: 4.0 review_count: 1 scale: '5' date_modified: '2026-10-02' parent_category: name: System Security url: https://www.g2.com/categories/system-security ---

Splunk SOAR Reviews & Product Details

Splunk SOAR Reviews (1)

Reviews

Splunk SOAR Reviews (1)

4.0
1 reviews
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Ankur G.
AG
Ankur G.
Sr. Manager
Information Technology and Services
Small-Business (50 or fewer emp.)
"Intuitive Visual Playbooks with Powerful Integrations and Custom Python Flexibility"
4/5
What do you like best about Splunk SOAR?

The visual playbook editor makes designing complex incident response workflows intuitive while still allowing custom Python scripts when we need deeper customization. Having hundreds of pre-built integrations lets us instantly connect our SIEM, firewalls, and EDR tools to automate repetitive containment steps and drastically cut down our MTTR. Review collected by and hosted on G2.com.

What do you dislike about Splunk SOAR?

The initial setup and licensing costs are quite steep, and there is a noticeably sharp learning curve for junior analysts when mastering custom playbooks. Debugging complex, multi-action workflows can also feel clunky, as the troubleshooting logs and error reporting aren't always clear when a specific third-party API call fails. Review collected by and hosted on G2.com.

There are not enough reviews of Splunk SOAR for G2 to provide buying insight. Below are some alternatives with more reviews:

1
KnowBe4 PhishER/PhishER Plus Logo
KnowBe4 PhishER/PhishER Plus
4.5
(577)
KnowBe4 PhishER is the key ingredient of an essential security workstream. It's your lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate your threat response and manage the high volume of potentially malicious email messages reported by your users. And, with automatic prioritization of emails, PhishER helps your InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.
2
Tines Stories Logo
Tines Stories
4.7
(431)
Tines Stories is an intelligent workflow platform that powers the world’s most important workflows. IT and security teams of all sizes, from Fortune 50 to startups, trust Tines for everything from phishing response, vulnerability and patch management, software lifecycle management, employee lifecycle management, and everything in between. Leaders across a wide array of industries –including Canva, Databricks, Elastic, Kayak, Intercom, and McKesson– use Tines AI-powered workflows to operate more effectively, mitigate risk, reduce tech debt, and do the work that matters most. Our workflow platform gives teams of any skillset (the most technical to your least technical) the tools to orchestrate, automate, and integrate your people, processes, and technology.
3
Sumo Logic Logo
Sumo Logic
4.4
(424)
Sumo Logic enables enterprises to build analytical power that transforms daily operations into intelligent business decisions
4
n8n Logo
n8n
4.7
(325)
Free node based Workflow Automation Tool. Easily automate tasks across different services. It can be easily extended and self-hosted.
5
Microsoft Sentinel Logo
Microsoft Sentinel
4.4
(299)
Microsoft Azure Sentinel is a cloud-native SIEM that provides intelligent security analytics for your entire enterprise, powered by AI.
6
Intezer Logo
Intezer
4.5
(194)
Automate your malware analysis. Get answers quickly about any suspicious file, URL, endpoint or memory dump.
7
Torq AI SOC Platform Logo
Torq AI SOC Platform
4.8
(168)
Torq is the AI SOC platform that combines agentic insights and automation so that enterprises can triage, investigate, and respond to actual risks, faster. Torq streamlines every step from alert through resolution. The platform analyzes your risk context to identify your biggest threats. Working alongside your SecOps staff, the Torq platform integrates with your security stack to facilitate containment and remediation workflows.
8
Google Security Operations Logo
Google Security Operations
4.4
(144)
Google Security Operations is a modern, cloud-native SecOps platform that empowers security teams to better defend against today’s and tomorrow’s threats. It’s designed to serve as the workbench for security operations (SOC) teams tasked with detecting, investigating and responding to cyber threats across their hybrid environment.
9
Blumira Automated Detection & Response Logo
Blumira Automated Detection & Response
4.6
(124)
Blumira's Automated SIEM enables organizations to detect and respond effectively to cybersecurity threats without having a dedicated in-house security operations center or security expertise.
10
Palo Alto Cortex XSIAM Logo
Palo Alto Cortex XSIAM
4.4
(122)
Product Description: Palo Alto Networks' Cortex XSIAM is an AI-driven security operations platform designed to transform traditional Security Operations Centers by integrating and automating key functions such as data centralization, threat detection, and incident response. By leveraging machine learning and automation, it enables organizations to detect and respond to threats more efficiently, reducing manual workloads and improving overall security posture. Key Features and Functionality: - Data Centralization: Aggregates data from various sources into a unified platform, providing comprehensive visibility across the enterprise. - AI-Powered Threat Detection: Utilizes machine learning algorithms to identify anomalies and potential threats in real-time. - Automated Incident Response: Streamlines response processes through automation, enabling rapid mitigation of security incidents. - Integrated SOC Capabilities: Combines functions such as Extended Detection and Response , Security Orchestration, Automation, and Response , Attack Surface Management , and Security Information and Event Management into a cohesive platform, eliminating the need for multiple disparate tools. - Scalability: Designed to handle large volumes of data and adapt to the evolving needs of modern enterprises. Primary Value and Problem Solved: Cortex XSIAM addresses the challenges of disjointed data, weak threat defense, and heavy reliance on manual work in traditional SOCs. By centralizing data and automating security operations, it simplifies processes, enhances threat detection accuracy, and accelerates incident response times. This transformation enables organizations to proactively outpace threats, reduce operational costs, and achieve a more robust security posture.
Show More
Pricing

Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more.