Try our new research platform with insights from 80,000+ expert users

McAfee ePolicy Orchestrator vs Splunk SOAR comparison

McAfee and Splunk are both solutions in the Security Orchestration Automation and Response (SOAR) category. McAfee is ranked #15 with an average rating of 8.8, while Splunk is ranked #3 with an average rating of 8.3. McAfee holds a 0.7% mindshare in SOAR, compared to Splunk’s 7.8% mindshare. Additionally, 81% of McAfee users are willing to recommend the solution, compared to 86% of Splunk users who would recommend it.
McAfee ePolicy Orchestrator
Read 42 McAfee ePolicy Orchestrator reviews
  • 1,301 Views
  • 768 Comparison Views
81% willing to recommend
Splunk SOAR
Read 46 Splunk SOAR reviews
  • 5,266 Views
  • 4,002 Comparison Views
86% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Jun 15, 2025

McAfee ePolicy Orchestrator and Splunk SOAR compete in cybersecurity, each with unique advantages. McAfee ePolicy Orchestrator is favored for its cost-effectiveness and outstanding support, while Splunk SOAR is distinguished by its powerful automation features, which many find worth the higher price.

Features: McAfee ePolicy Orchestrator offers centralized management, comprehensive endpoint security integrations, and effective configuration capabilities from a single interface. It provides automatic patch updates and virus signature reporting. Splunk SOAR has superior playbook automation, extensive integration capabilities, and customizable playbooks for detailed investigative processes, enhancing efficiency and adaptability.

Room for Improvement: McAfee ePolicy Orchestrator could improve its user interface complexity, expand integration with third-party systems, and enhance real-time threat intelligence. Splunk SOAR might focus on simplifying deployment processes, reducing its hardware demands, and enhancing its documentation, making it more accessible to newer users.

Ease of Deployment and Customer Service: McAfee ePolicy Orchestrator facilitates straightforward deployment and offers notable support, making integration into environments seamless. In contrast, Splunk SOAR's deployment involves complexities due to its advanced features, but its responsive support helps ensure successful transitions.

Pricing and ROI: McAfee ePolicy Orchestrator is a cost-effective solution aligning well with budget-conscious implementations, ensuring greater value for security investments. Splunk SOAR, though requiring a higher initial investment, provides significant ROI through advanced automation and efficiency, appealing to those seeking long-term advantages.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed McAfee ePolicy Orchestrator vs. Splunk SOAR Report (Updated: July 2025).
Buyer's Guide
McAfee ePolicy Orchestrator vs. Splunk SOAR
July 2025
Download the complete report
Helped 864,053 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

McAfee ePolicy Orchestrator
Ranking in Security Orchestration Automation and Response (SOAR)
15th
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
42
Ranking in other categories
No ranking in other categories
Splunk SOAR
Ranking in Security Orchestration Automation and Response (SOAR)
3rd
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
46
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2025, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of McAfee ePolicy Orchestrator is 0.7%, down from 0.7% compared to the previous year. The mindshare of Splunk SOAR is 7.8%, down from 8.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

Binu Haneef - PeerSpot reviewer
Comprehensive security management enabled through efficient integration and automation
McAfee ePolicy Orchestrator helps automate routine security tasks. We created customized automation. For example, when we did not have an EDR or XDR solution, we created tasks exclusively for detection and response automation and automatic segregation of infected PCs. The ability to customize the dashboard in McAfee ePolicy Orchestrator helps us significantly. The main feature is automation for auto-segmentation and segregation. As we are in an AI era, McAfee can focus on AI tools. Instead of putting manual effort into each security-related task, it can implement more advanced automation using AI. This enhancement could improve cybersecurity significantly. Regarding the reporting area in McAfee ePolicy Orchestrator, we are satisfied with what we currently have. Our cybersecurity team needs customized reports beyond the default ones. We have more than 20 separate reports for identifying threats, managing, and understanding the security posture of our company and assets.
Read full review
Hamada Elewa - PeerSpot reviewer
Playbook complexity challenges integration but customization enables professional operation
We work with Splunk SOAR from a security perspective, focusing on User Behavior Analytics (UBA) and Security Orchestration, Automation, and Response (SOAR) The customization of the playbook in Splunk SOAR is very beneficial. After building the playbook, it operates professionally. There is an AI…
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a scalable solution...I rate its scalability a nine out of ten."
"The DLP feature in McAfee ePolicy Orchestrator is good."
"The valuable feature of the McAfee ePolicy Orchestrator is the management of the policies."
"The central management console is the solution's most valuable aspect."
"Their support is really good. I would rate it a nine out of ten. I have never any issues with their support. They always reply and follow our queries on time."
"It is a highly scalable solution. Scalability-wise, I rate the solution a ten out of ten."
"The feature that I have found most valuable is its general purpose of protecting our endpoints from infections, malicious files, and all those kinds of things. The fact that there are organized policies and policy inheritance. The general management."
"McAfee ePolicy Orchestrator's performance is good."
More McAfee ePolicy Orchestrator pros
"It has definitely saved a decent amount of time for our analysts so they can focus on other tasks."
"The most valuable feature of Splunk SOAR is the automated playbooks, which saves analysts time."
"Before its use, analyzing each email would take at least 15 to 20 minutes, with some complex cases taking up to 30 minutes...With the automation provided by Splunk Phantom, we could significantly reduce the amount of time and human effort required to complete this task."
"The most valuable feature of Splunk SOAR that stands out is it has a great SOAR. The automation and orchestration module is highly mature. A lot of use cases are on user entity and behavioral analytics (UEBA), which is artificial intelligence and machine learning-based (AIML)."
"It helps increase efficiency and productivity."
"The best feature is the integration and the custom Python code that we can write. Splunk SOAR provides us with both of these capabilities, allowing us to integrate different security solutions with Splunk SOAR and take remediation actions directly on those security tools."
"I like the integration capabilities of Phantom. It has a lot of integrations with other products. Its searching methodologies are also good. It is also easy to understand and easy to create playbooks."
"The customization of the playbook in Splunk SOAR is very beneficial."
More Splunk SOAR pros
 

Cons

"There should be more insights and completeness into the cyber kill chain, similar to CrowdStrike and SentinelOne. It just seems a little outdated in being 100% signature-based without all of the insights and protections that come with CrowdStrike and SentinelOne. Overall, they've got some catching up to do if they plan to compete in the comprehensive EDR space."
"The detection aspect should be improved so that signatures are updated more quickly."
"Lacks a single plug-in for multiple uses."
"McAfee ePolicy Orchestrator should improve its integration with other tools."
"There are some issues relating to the automation of reports. That's why I wanted the DLP reports. There are some problems in this area. Sometimes it does not work even though all the configuration words are right. There are also some problems with automatic updates."
"I would like to see McAfee reduce the amount of manual work required."
"There are some issues we are having with updating our Windows server. So we need to contact support or access our support portal."
"McAfee ePolicy Orchestrator needs to upgrade the technology; it's like their area function is not quite as good as compared to other market vendors."
More McAfee ePolicy Orchestrator cons
"The creation of playbooks is complex in Splunk SOAR, and the number of integrations needs enhancement. Although it enhances alert handling, it still has a journey to compete with Palo Alto SOAR and FortiSOAR."
"have put a number of ideas on the ideas.splunk.com site for feature requests for the Splunk SOAR product. I posted one of them about three years ago, which finally got implemented in the latest release that just got announced, so the time to implement new features and things like that is a little bit concerning."
"Some of the training materials are on a basic level."
"The number of playbooks on offer should be increased."
"I haven't used it fully, but based on my usage, I could not find simulation tools and features. It currently lacks simulation features, which are important for me for creating a playbook. It is also very expensive for my region."
"There are areas in Splunk SOAR that have room for improvement. To make Splunk SOAR a better solution, there could be better built-in debugging tools, smarter playbook suggestions, and enhanced lifecycle management."
"Providing Splunk app developers and playbook developers Python Stub files so that way when they create custom code through their IDE, they can have IntelliCode suggestions."
"Splunk SOAR has room to improve its offering for small-sized customers. The price is not fair for smaller-sized customers."
More Splunk SOAR cons
 

Pricing and Cost Advice

"For large enterprise companies, the price should be alright, but for small businesses, the uptake might be slow because, for these clients, the price doesn't look very attractive."
"Compared to other Antivirus products, the cost of this solution is a bit high."
"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing a three out of ten."
"McAfee tries to package different things into different products, then sell them as different products with different licenses. They just split everything up into multiple things. That's just their sales pitch and how they do it."
"It's an expensive solution"
"It is attractively priced. It is a fraction of what we're going to pay for CrowdStrike or SentinelOne, but it only has a fraction of the capabilities as well."
"There is a license required to use this solution. If we use the additional components, such as DLP encryption, there is an additional cost. However, it is similar to a separate product altogether. If you want to use that or not, it is optional, but when you use it, it will cost you additional pricing."
"This solution is priced in the mid-range."
More McAfee ePolicy Orchestrator pricing and cost advice
"While I can't confirm the exact pricing, some colleagues have mentioned that Splunk SOAR may be on the costlier side."
"The cost is high and the licensing is on an annual basis."
"Splunk SOAR is moderately priced, neither cheap nor overly expensive."
"I don't know the exact price, but for my region, it is very expensive."
"Splunk SOAR is an expensive solution for an organization of our size."
"Splunk SOAR is more expensive compared to other options for SOAR."
"We renewed it this year. This year was the first time there was a dramatic increase in the price. It was kind of non-negotiable. It was just a high increase. We had internal communications, and it was definitely a surprise to us. In a short time frame, we renewed it this year. Prices are going up everywhere, but they are not always justifiable, at least not to our eyes. The pricing this year was definitely a big shock."
"The tool is not cheap."
More Splunk SOAR pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
See recommendations
864,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
11%
Financial Services Firm
9%
Government
8%
Energy/Utilities Company
8%
Computer Software Company
14%
Financial Services Firm
12%
Manufacturing Company
11%
University
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is better - Mcafee's MVision ePO or ePolicy Orchestrator?
Our organization ran comparison tests to determine whether Mcafee's MVision ePO or ePolicy Orchestrator network security software was the better fit for us. We decided to go with Mcafee's ePolicy O...
See all answers
What do you like most about McAfee MVISION ePO?
McAfee ePolicy Orchestrator's performance is good.
See all answers
What is your experience regarding pricing and costs for McAfee MVISION ePO?
It's an expensive solution.
See all answers
What do you like most about Splunk Phantom?
Splunk SOAR's quick response to incidents is the most valuable part.
See all answers
What is your experience regarding pricing and costs for Splunk Phantom?
Splunk SOAR is moderately priced, neither cheap nor overly expensive.
See all answers
What needs improvement with Splunk Phantom?
There are areas in Splunk SOAR that have room for improvement. To make Splunk SOAR a better solution, there could be better built-in debugging tools, smarter playbook suggestions, and enhanced life...
See all answers
 

Comparisons

Symantec Data Loss Prevention vs McAfee ePolicy Orchestrator Logo
Symantec Data Loss Prevention vs McAfee ePolicy Orchestrator
Compared 35% of the time
Forcepoint Data Loss Prevention vs McAfee ePolicy Orchestrator Logo
Forcepoint Data Loss Prevention vs McAfee ePolicy Orchestrator
Compared 35% of the time
More McAfee ePolicy Orchestrator Competitors
Palo Alto Networks Cortex XSOAR vs Splunk SOAR Logo
Palo Alto Networks Cortex XSOAR vs Splunk SOAR
Compared 18% of the time
Cortex XSIAM vs Splunk SOAR Logo
Cortex XSIAM vs Splunk SOAR
Compared 13% of the time
Fortinet FortiSOAR vs Splunk SOAR Logo
Fortinet FortiSOAR vs Splunk SOAR
Compared 11% of the time
ServiceNow Security Operations vs Splunk SOAR Logo
ServiceNow Security Operations vs Splunk SOAR
Compared 10% of the time
More Splunk SOAR Competitors
 

Product Reports

Buyer's Guide
McAfee ePolicy Orchestrator
July 2025
McAfee ePolicy Orchestrator reportDownload McAfee ePolicy Orchestrator product report
Buyer's Guide
Splunk SOAR
July 2025
Splunk SOAR reportDownload Splunk SOAR product report
 

Also Known As

McAfee ePO, ePolicy Orchestrator, Intel Security ePolicy Orchestrator, McAfee MVISION ePO
Phantom
 

Overview

McAfee ePolicy Orchestrator (McAfee ePO) is the most advanced, extensible, and scalable centralized security management software in the industry. Unifying security management through an open platform, McAfee ePO makes risk and compliance management simpler and more successful for organizations of all sizes.
McAfee

Splunk SOAR offers features like automation and orchestration of manual tasks, speeding up work, detection and response to advanced and emerging threats. 

Go from overwhelmed to in-control

Automate manual tasks. Address every alert, every day. Establish repeatable procedures that allow security analysts to stop being reactive and focus on mission-critical objectives to protect your business.

Force multiply your team

Orchestrate and automate repetitive tasks, investigation and response to increase efficiency and productivity, and do more with the people you already have. Make a team of three feel like a team of 10.

From 30 minutes to 30 seconds

Work faster with Splunk SOAR. Respond to threats in seconds. Lower your mean time to respond (MTTR) by automating security tasks and workflows across all of your security tools.

End-to-end security operations made easy

Take advantage of Splunk Enterprise Security and Splunk SOAR joining forces to provide a seamless and intuitive SecOps platform to prevent, detect and respond to advanced and emerging threats.

Splunk
 

Sample Customers

Brelje & Race, Cognizant, Sutherland Global Services, Eagle Rock Energy, Arab National Bank, Bank Central Asia, Kleberg Bank, Leading Mexican Bank, SF Police Credit Union, Macquarie Telecom, Seagate Technology, Blackburn & Darwen Council, California Department of Corrections & Rehabilitation, IRCEP, Major U.S. State Government, State of Alaska, State of Colorado, Cemex, Deutsche Edelstahlwerke
Recorded Future, Blackstone
Buyer's Guide
McAfee ePolicy Orchestrator vs. Splunk SOAR
July 2025
Free Report: McAfee ePolicy Orchestrator vs. Splunk SOAR
Find out what your peers are saying about McAfee ePolicy Orchestrator vs. Splunk SOAR and other solutions. Updated: July 2025.
DOWNLOAD NOW
864,053 professionals have used our research since 2012.
See our McAfee ePolicy Orchestrator vs. Splunk SOAR report.

We monitor all Security Orchestration Automation and Response (SOAR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.