We performed a comparison between IBM Cloud Pak for Security and Splunk SOAR based on real PeerSpot user reviews.
Find out what your peers are saying about VMware, Cisco, Akamai and others in Cloud and Data Center Security."The interface is good and very user-friendly."
"I'm just a beginner on the solution and it's pretty easy for me to use."
"The customization continues to be excellent."
"Splunk SOAR's quick response to incidents is the most valuable part."
"Very flexible integration with other tools"
"The most valuable feature of Splunk SOAR is the automated playbooks, which saves analysts time."
"I like the way Splunk interacts with various systems via the API. The ability to integrate Splunk with our ticketing system has been an immense help because we can maintain our workflow while blending Splunk with our support desk and other ways that we track work."
"When you design a playbook, you can integrate multiple log sources and define rules... After that, the platform automatically compiles all these activities and, based on the results, the analyst only has to indicate whether the result is a true or false positive. That reduces the time and effort involved."
"The best feature is the integration and the custom Python code that we can write. Splunk SOAR provides us with both of these capabilities, allowing us to integrate different security solutions with Splunk SOAR and take remediation actions directly on those security tools."
"Lacks sufficient technical support."
"We want to see improvements made to the APIs such that we can connect to many different systems and data sources."
"It would be ideal if we could automate processes even more."
"In the beginning, we couldn't find any specific documents for every function. It wasn't easy to navigate to what we needed."
"The Splunk SOAR platform was not designed specifically for case management which is why this area needs improvement."
"I haven't used it fully, but based on my usage, I could not find simulation tools and features. It currently lacks simulation features, which are important for me for creating a playbook. It is also very expensive for my region."
"SOAR is probably the most unreliable product Splunk has and that's because most of it is content driven from what you put into it. There are certain parts of it that have a little bit of difficulty at volume too. It's always changing. There is new stuff coming out for it that's going to make it a little bit better, but it does have some drawbacks."
"And most of the challenges that I have faced with the solution can be found in the documentation itself."
"The scalability could be better."
IBM Cloud Pak for Security is ranked 21st in Cloud and Data Center Security with 1 review while Splunk SOAR is ranked 3rd in Security Orchestration Automation and Response (SOAR) with 30 reviews. IBM Cloud Pak for Security is rated 0.0, while Splunk SOAR is rated 8.0. The top reviewer of IBM Cloud Pak for Security writes "Great user-friendly interface; provides many functionalities and many free applications ". On the other hand, the top reviewer of Splunk SOAR writes "Takes most of the work away, but the time they take to implement new features is a little bit of concern". IBM Cloud Pak for Security is most compared with IBM Security QRadar and IBM Resilient, whereas Splunk SOAR is most compared with Palo Alto Networks Cortex XSOAR, Cortex XSIAM, ServiceNow Security Operations, Torq and Swimlane.
We monitor all Cloud and Data Center Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
