Try our new research platform with insights from 80,000+ expert users

ServiceNow Security Operations vs Splunk Security Essentials comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ServiceNow Security Operations
Ranking in Security Incident Response
2nd
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
20
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (8th), Risk-Based Vulnerability Management (10th)
Splunk Security Essentials
Ranking in Security Incident Response
11th
Average Rating
8.0
Reviews Sentiment
8.1
Number of Reviews
2
Ranking in other categories
Data Visualization (20th), IT Alerting and Incident Management (14th)
 

Mindshare comparison

As of May 2025, in the Security Incident Response category, the mindshare of ServiceNow Security Operations is 18.2%, up from 13.8% compared to the previous year. The mindshare of Splunk Security Essentials is 0.6%, down from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Incident Response
 

Featured Reviews

KishoreKumar4 - PeerSpot reviewer
A low-cost and open-source tool for incident and change management
If we encounter challenges while deploying, we raise incidents. These incidents are categorized by priority: high, medium, and low. We assign an incident number and notify the relevant teams to address the issue. For instance, if we experience a problem with Cloud services or any other issue, we…
Srinivas Prudhivi Reddy - PeerSpot reviewer
Enables us to examine the parameters of the events found and take appropriate actions as necessary
Once we've configured our logs, for example, if we need to monitor processes and IP addresses, we ensure these logs are being ingested into our Splunk instance. The logs gathered from various endpoints are then consolidated into our Splunk platform. Once the data is collected, we can create searches and dashboards to analyze it. With these searches and dashboards, we gain insights into events and can make informed decisions based on them. We'll examine the parameters of these events and take appropriate actions as necessary.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable aspect of working with ServiceNow is its meaningful and feature-rich product."
"What I found most valuable in ServiceNow Security Operations is that it's very useful for any incoming vulnerability. For example, if my team finds any vulnerability on servers such as the CA and CMDB integrated with ServiceNow Security Operations, my team can make some changes. My team can map the vulnerabilities found on the CA server, make the changes required, and resolve the vulnerabilities before the system is attacked. You can avoid vulnerability attacks through ServiceNow Security Operations, so this is the best feature of the solution. ServiceNow Security Operations is beneficial mainly for vulnerability response and engagement purposes."
"ServiceNow Security Operations also takes care of GRC, governance, risk and compliance, enabling it to provide risk assessment."
"Multiple projects use the ServiceNow tool because it is a low-cost and open-source tool."
"ServiceNow is a convenient platform to raise tickets, and the respective support team will contact us to resolve any issues."
"It's stable."
"The product has a very simple UI."
"​Integration to other security tools allows for a consolidated view of all vulnerabilities, incidents, etc. for all sorts of leverage in a single platform to assess governance risk and compliance as well as an enhanced, enriched intelligence.​"
"We are focusing on security to ensure incidents are reported efficiently. In addition to that, for reporting purposes, we are utilizing our dashboards or creating new ones. We will be using free visualization tools for this purpose."
"The network monitoring feature is particularly valuable for gathering information about users, login times, and other statistics."
 

Cons

"The initial setup is difficult."
"The solution needs to make customization easier. You cannot do much customization immediately. It requires an extensive workload. If the customization process was user-friendly, it would be much better."
"Report generation within ServiceNow can take some time."
"It is challenging for the customers to understand the processes for SecOps. It needs to be simplified."
"We'd like customization to be easier in terms of the UI and using the dashboards."
"The dashboard and playbook creation will need to improve"
"Customer awareness and understanding of ServiceNow's SecOps capabilities could be improved."
"In future releases, I would like to add a follow-up and reminder feature. For the tickets in our queue, we could set reminders. This would help us prioritize older tickets before moving on to new ones."
"The reporting feature needs to be more user-friendly."
"The price could be improved."
 

Pricing and Cost Advice

"The product is more expensive than other solutions."
"This product is a good value for the money."
"The solution is more expensive than BMC Remedy, the other ITSM tool available in the market."
"Compared to competitor tools, ServiceNow Security Operations is more affordable"
"If you're going to implement it on your own, there would be internal costs. If you're going to implement it through a contractor or consultant, you have to pay for that."
"It is an expensive product."
Information not available
report
Use our free recommendation engine to learn which Security Incident Response solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
20%
Manufacturing Company
11%
Computer Software Company
9%
Government
8%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about ServiceNow Security Operations?
The most valuable aspect of working with ServiceNow is its meaningful and feature-rich product.
What is your experience regarding pricing and costs for ServiceNow Security Operations?
The product is more expensive than other solutions like Archer but offers more features, making the pricing justifiable.
What needs improvement with ServiceNow Security Operations?
Report generation within ServiceNow can take some time. Additionally, there are occasional issues when raising a ticket, which can also consume time.
What is your experience regarding pricing and costs for Splunk Security Essentials?
Pricing and licensing are managed by our vendor management team and are not under my purview.
What needs improvement with Splunk Security Essentials?
The reporting feature needs to be more user-friendly. It would help if it were easier to generate reports similar to other cybersecurity tools. Additionally, more automation in alert systems would ...
What is your primary use case for Splunk Security Essentials?
I use Splunk Security Essentials for monitoring as part of my organization. We use it for our security processes and to gather reports on performance, security, and bottlenecks. It's primarily util...
 

Overview

 

Sample Customers

DXC Technology, Freedom Security Alliance, Prime Therapeutics, Seton Hall University, York Risk Services
Information Not Available
Find out what your peers are saying about ServiceNow Security Operations vs. Splunk Security Essentials and other solutions. Updated: April 2025.
850,028 professionals have used our research since 2012.