PeerSpot’s crowdsourced user review platform helps technology decision-makers around the world to better connect with peers and other independent experts who provide advice without vendor bias.
Our users have ranked these solutions according to their valuable features, and discuss which features they like most and why.
You can read user reviews for the Security Orchestration Automation and Response (SOAR) Solutions to help you decide which solution is best for you.
Users compare and give feedback on Security Orchestration Automation and Response (SOAR) Solutions that they’ve used — based on product reviews, ratings, and comparisons.
#1 Palo Alto Networks Cortex XSOAR
Palo Alto Networks Cortex XSOAR is ranked as PeerSpot’s #1 Security Orchestration Automation and Response (SOAR) Solution. Our users give Palo Alto Networks Cortex XSOAR an average rating of 8 out of 10.
A Networking and E-Mail Security Architect, Engineer and Guru at a healthcare company, says, “It is very easy to use. It has an extensive list of integrations that are available out of the box which makes it easy to start.”
A Tech Lead at a tech services company mentions, “The solution has very good integration capabilities. It's really the best at integration. Inside every integration, there are certain commands which we can call upon, which makes it very useful as a product.
The automation is excellent. The product is very robust. With this solution, we can do dynamic remediation. It's a product that is constantly upgrading and improving. It's a user-friendly solution. Technical support is very helpful and responsive.”
A Vice President Global Technology Infrastructure Automation at a financial services firm comments, “The solution is very reliable. The performance is great. The scalability of the solution is excellent. We find the solution to be very robust. Palo Alto has been in the industry a long time and the solution reflects that. The initial setup is very straightforward. It's not hard to deploy.”
#2 CRITICALSTART
CRITICALSTART is ranked as PeerSpot’s #2 Security Orchestration Automation and Response (SOAR) Solution. Our users give CRITICALSTART an average rating of 10 out of 10.
A Cyber Security Manager at an energy/utilities company says, “The ability to review and close out tickets or alerts through our mobile phone and being able to interact with engineers on their side via the app are the most valuable features. That's been one of the more beneficial components. So far, the mobile app has been great. We've been able to reply and interact with them through it. The collaboration is very cohesive.”
David S., IT Manager at a manufacturing company, explains that the most valuable aspect of the solution is, “The 24/7 SOC security. There is a team of people who monitor our traffic and processes 24/7, so if anything raises a flag or alert, it will escalate back to me right away. That's the most incredible part: Humans working behind the scenes 24/7 to monitor our networks.” He also adds, “The intuitiveness and responsiveness of the updated service's user interface is pretty cool, especially the dark theme, which I like. It is easy on the eyes. It's not like a traditional portal. It looks very futuristic, but I think it's more accessible and less crowded. The new interface is definitely an improvement.”
A CISO at a hospitality company states, “It's very easy to use and very convenient to be able to respond to alerts wherever you are. I love the app. You can respond and communicate, per ticket, with their SOC in near real-time. The response is very quick."
#3 Splunk Phantom
Splunk Phantom is ranked as PeerSpot’s #3 Security Orchestration Automation and Response (SOAR) Solution. Our users give Splunk Phantom an average rating of 8 out of 10.
PeerSpot user Hari H., Technical Analyst at a tech vendor, says, “The product is very easy to use and has a very good user experience. The solution is very stable. The initial setup is pretty straightforward. We've found the written documentation to be excellent. The performance is very good. We've found the solution has recently improved its UI. The customization continues to be excellent.”
Another reviewer, Abhinav R., Senior Data Analyst at a financial services firm, expresses, “The interface is very easy to use. The GUI is great. The features in the Phantom playbook are all very good. The solution is great for automating redundant work.”
A Cyber Security Solution Architect at a tech services company mentions, "I like the integration capabilities of Phantom. It has a lot of integrations with other products. Its searching methodologies are also good. It is also easy to understand and easy to create playbooks."
#4 Exabeam Fusion SIEM
Exabeam Fusion SIEM is ranked as PeerSpot’s #4 Security Orchestration Automation and Response (SOAR) Solution. Our users give Exabeam Fusion SIEM an average rating of 8 out of 10.
George S., Strategic Account Specialist at FITS Consulting, says, “The solution has great technology. It's a very user-friendly product and it's a very comprehensive technology. The security on offer is very good. Cost-wise, compared to other technology, it's affordable. The solution has a lot of great premium features on offer.”
A Senior Solutions Architect at a tech services company mentions, “I have customers that like the EUBA functionality of it. The solution has the ability to build a session, basically. It pulls a lot of information together, for example, everything a user does in a specific timeframe. It's quite helpful.”
A COO at a computer software company explains, “The solution is easy to use and on a whole, it is pretty valuable. The way it can connect with AWS is very useful, and the integrations are pretty good. The incident response functionality is good.”
#5 McAfee ePolicy Orchestrator
McAfee ePolicy Orchestrator is ranked as PeerSpot’s #5 Security Orchestration Automation and Response (SOAR) Solution. Our users give McAfee ePolicy Orchestrator an average rating of 8 out of 10.
A cybersecurity specialist at a mining and metals company comments, "The feature that I have found most valuable is its general purpose of protecting our endpoints from infections, malicious files, and all those kinds of things. The fact that there are organized policies and policy inheritance. And, the general management."
Sambhaji B., Network Security Consultant at a tech services company, says, "The most valuable features of McAfee ePolicy Orchestrator are the easy-to-use console, and lots of reports, such as customized reports and inventory reports. Additionally, overall the centralized management is very good where you can see the compliance levels and inventory."
A Chief Information Security Officer at a venture capital & private equity firm expresses, “The general endpoint protection is valuable, and it is easy to manage.”
I noticed that you mentioned a few SOAR vendors in the list, however, I would like to bring to your attention that Critical Start, Exabeam Fusion, and McAfee ePolicy are not SOAR providers.