Splunk SOAR offers features like automation and orchestration of manual tasks, speeding up work, detection and response to advanced and emerging threats.
| Product | Market Share (%) |
|---|---|
| Splunk SOAR | 7.8% |
| Microsoft Sentinel | 16.9% |
| Palo Alto Networks Cortex XSOAR | 10.1% |
| Other | 65.2% |
| Type | Title | Date | |
|---|---|---|---|
| Category | Security Orchestration Automation and Response (SOAR) | Aug 25, 2025 | Download |
| Product | Reviews, tips, and advice from real users | Aug 25, 2025 | Download |
| Comparison | Splunk SOAR vs Microsoft Sentinel | Aug 25, 2025 | Download |
| Comparison | Splunk SOAR vs Palo Alto Networks Cortex XSOAR | Aug 25, 2025 | Download |
| Comparison | Splunk SOAR vs IBM Security QRadar | Aug 25, 2025 | Download |
| Title | Rating | Mindshare | Recommending | |
|---|---|---|---|---|
| Microsoft Sentinel | 4.1 | 16.9% | 93% | 98 interviewsAdd to research |
| IBM Security QRadar | 4.0 | 7.2% | 91% | 209 interviewsAdd to research |
| Company Size | Count |
|---|---|
| Small Business | 11 |
| Midsize Enterprise | 7 |
| Large Enterprise | 24 |
| Company Size | Count |
|---|---|
| Small Business | 214 |
| Midsize Enterprise | 129 |
| Large Enterprise | 540 |
Automate manual tasks. Address every alert, every day. Establish repeatable procedures that allow security analysts to stop being reactive and focus on mission-critical objectives to protect your business.
Orchestrate and automate repetitive tasks, investigation and response to increase efficiency and productivity, and do more with the people you already have. Make a team of three feel like a team of 10.
Work faster with Splunk SOAR. Respond to threats in seconds. Lower your mean time to respond (MTTR) by automating security tasks and workflows across all of your security tools.
Take advantage of Splunk Enterprise Security and Splunk SOAR joining forces to provide a seamless and intuitive SecOps platform to prevent, detect and respond to advanced and emerging threats.
Splunk SOAR was previously known as Phantom.
Recorded Future, Blackstone
| Author info | Rating | Review Summary |
|---|---|---|
| Splunk/SOAR Engineer | 4.0 | My focus with Splunk SOAR is on data deployment, configuration, and integration with various platforms. The visual Playbook Editor is a standout feature. Improvements could include better debugging tools and collaboration features. It's more flexible than other SOAR solutions I've used. |
| System Engineer - Security Presales at Raya Integration | 2.5 | I work with Splunk SOAR for security, notably user behavior analytics and orchestration. Its playbook customization is beneficial, despite being hardware-intensive and complex. While Splunk enhances alerts, it needs better integrations to rival Palo Alto SOAR and FortiSOAR. |
| Information Security Analyst at a healthcare company with 1,001-5,000 employees | 4.0 | I use Splunk to detect and analyze threats, benefiting from its vast data collection and visualization features. While it's expensive and challenging for beginners, its integration capabilities and effectiveness surpass previous solutions like Wazoo, though the dashboard could improve. |
| Senior Principal Site Reliability Engineer at a tech vendor with 10,001+ employees | 4.5 | Splunk SOAR is a versatile automation platform that excels in security and general tasks. It integrates with various technologies and offers customizable playbooks. While user-friendly and comprehensive, improvements in log review and AI assistance could enhance its development efficiency. |
| Information Security Architect at UMMS | 4.0 | We've used Splunk SOAR with Mission Control for a year, improving alert handling and efficiency. Integration with Enterprise Security is key, setup was easy, and while minor issues exist, overall performance and ROI have been very positive. |
| SOAR Engineer at Accenture Federal Services | 4.0 | As an MSSP focused on detection and response, we use Splunk SOAR for alert processing and playbook automation to minimize manual SOC tasks, although case management could improve. We chose it for integration with our existing Splunk ecosystem. |
| SOC analyst at Bkav Corp. | 4.5 | I use Splunk SOAR primarily for incident investigations due to its effective Playbook feature and automation, which significantly reduces investigation time. Its integration with various tools enhances security, and customers prefer it over IBM for its usability and reputation. |
| Consultant at HCL Technologies | 4.0 | I use Splunk SOAR for incident response and automation, effectively reducing false positives and improving resolution times with seamless integration of tools like VirusTotal and ServiceNow, though I see room for AIOps enhancement to boost predictability. |
