TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Proofpoint Threat Response Auto-Pull

    Score8 out of 10
    N/AProofpoint Threat Response Auto-Pull (TRAP) enables messaging and security administrators to automatically retract threats delivered to employee inboxes and emails that turn malicious after delivery to quarantine. It is also a powerful solution to retract messages sent in error as well as inappropriate, malicious, or emails containing compliance violations and also follows forwarded mail and distribution lists and creates an audit-able activity trail. With Proofpoint Threat Response…N/A

    Splunk SOAR

    Score9 out of 10
    N/ASplunk now offers a security orchestration, automation, and response (SOAR) platform via its acquisition of Phantom. Splunk Security Orchestration and Automation (Splunk SOAR) provides playbook automation and is available as a standalone solution.N/A
    Pricing
    Proofpoint Threat Response Auto-PullSplunk SOAR
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Proofpoint Threat Response Auto-PullSplunk SOAR
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    Community Pulse
    Proofpoint Threat Response Auto-PullSplunk SOAR
    Considered Both Products
    Proofpoint
    No answer on this topic
    Cisco
    No answer on this topic
    Key User Insights
    Would buy again
    No answers on this topic
    100%
    Would buy again
    41 Answers
    Delivers good value for the price
    No answers on this topic
    100%
    Delivers good value for the price
    34 Answers
    Happy with the feature set
    No answers on this topic
    100%
    Happy with the feature set
    41 Answers
    Lived up to sales and marketing promises
    No answers on this topic
    90%
    Lived up to sales and marketing promises
    26 Answers
    Implementation went as expected
    No answers on this topic
    97%
    Implementation went as expected
    37 Answers
    Features
    Proofpoint Threat Response Auto-PullSplunk SOAR
    Incident Response Platforms
    Comparison of Incident Response Platforms features of Proofpoint Threat Response Auto-Pull and Splunk SOAR
    Feature
    Proofpoint Threat Response Auto-Pull
    8.4
    3 Ratings
    6% below category average
    Splunk SOAR
    -
    Ratings
    Integration with Other Security Systems9.03 Ratings00 Ratings
    Attack Chain Visualization8.02 Ratings00 Ratings
    Centralized Dashboard6.03 Ratings00 Ratings
    Machine Learning to Prevent Incidents9.01 Ratings00 Ratings
    Live Response for Rapid Remediation10.03 Ratings00 Ratings
    Best Alternatives
    Proofpoint Threat Response Auto-PullSplunk SOAR
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    No answers on this topic
    No answers on this topic
    Enterprises
    No answers on this topic
    Palo Alto Networks Cortex XSOAR
    Score1.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Proofpoint Threat Response Auto-PullSplunk SOAR
    Likelihood to Recommend
    9.0
    (4 ratings)
    8.1
    (40 ratings)
    Likelihood to Renew
    -
    (0 ratings)
    7.5
    (3 ratings)
    Usability
    9.0
    (1 ratings)
    8.2
    (1 ratings)
    Performance
    -
    (0 ratings)
    8.2
    (40 ratings)
    Support Rating
    9.0
    (1 ratings)
    8.2
    (1 ratings)
    Online Training
    -
    (0 ratings)
    8.2
    (1 ratings)
    Implementation Rating
    -
    (0 ratings)
    8.2
    (1 ratings)
    Configurability
    -
    (0 ratings)
    8.2
    (1 ratings)
    Product Scalability
    -
    (0 ratings)
    8.2
    (1 ratings)
    User Testimonials
    Proofpoint Threat Response Auto-PullSplunk SOAR
    Likelihood to Recommend
    Proofpoint
    If your email admins spend time manually pulling malicious emails, this tool will save them countless hours of work and will do it for them 24 x 7. So if a user receives a malicious email after-hours, TRAP will auto pull it from the affected user's mailbox and potentially save you from an IT disaster.
    Incentivized
    Read full review
    Cisco
    Our company has very complex and dynamic security operations because of the large number of security tools and systems that we need to manage and coordinate. Moreover, it helps us to meet many regulatory and compliance requirements because it helps us to automate and document our security operations. We also use it to streamline our security operations and improve our response to potential threats.
    Incentivized
    Read full review
    Pros
    Proofpoint
    • Auto pull works great, even with our hybrid situation with 2 on premise exchange organizations.
    • Reporting is good, nice graphs of all the actions.
    Incentivized
    Read full review
    Cisco
    • Its security orchestration and integration capability that supports multiple tools.
    • Easy coding that automates our security actions.
    • Enables us to easily collaborate and respond to security issues faster.
    • Splunk SOAR is a flexible product that is easy to deploy.
    • Efficient tracking and monitoring capability.
    • Excellent real-time reporting functionality.
    Incentivized
    Read full review
    Cons
    Proofpoint
    • Learning curve is steep.
    • Interface can be clunky.
    • Some interface items seem counter-intuitive.
    Incentivized
    Read full review
    Cisco
    • A lack of instruction It can be difficult to contact the support staff. Limited experience from current users.
    • It takes some effort to set up and learn new technology at first. More assistance is required from the support staff. The product's price needs to go down.
    • Cost of the larger version.
    Incentivized
    Read full review
    Likelihood to Renew
    Proofpoint
    No answers on this topic
    Cisco
    As we already have a lot of clients being catered with Splunk SOAR and because Splunk SOAR is robust and efficient, we are already using it, and we have understood the product to a certain extent, I feel we are personally more enticed to use and scale it to a lot of business.
    Incentivized
    Read full review
    Usability
    Proofpoint
    It's easy to use and requires very little administrator hands on.
    Incentivized
    Read full review
    Cisco
    Building playbooks through the visual editor is fine for basic tasks, but once you start chaining complex logic or integrating 3rd party APIs you hit a wall that requires deep scripting knowledge.
    Incentivized
    Read full review
    Performance
    Proofpoint
    No answers on this topic
    Cisco
    We are able to automate almost every one of our use cases, even our threat-hunting, and threat intel procedures. We have 20+ playbooks and cover almost everything, even searching logs into Splunk, looking into TIP and external systems, enrichment, and collecting evidence for analysts; it can perform concurrent playbooks running.
    Incentivized
    Read full review
    Support Rating
    Proofpoint
    They are quick to respond and have talented support personnel.
    Incentivized
    Read full review
    Cisco
    Splunk Support is always great! In addition the Community is very efficient and active.
    Incentivized
    Read full review
    In-Person Training
    Proofpoint
    No answers on this topic
    Cisco
    I never followed an in-person training, I gave my evaluation based on the online training
    Incentivized
    Read full review
    Online Training
    Proofpoint
    No answers on this topic
    Cisco
    I followed training for Phantom admins and it opened a world for me
    Incentivized
    Read full review
    Implementation Rating
    Proofpoint
    No answers on this topic
    Cisco
    I already said that the main key insight is the knowledge of Phantom, so a detailed training for all the people involeved.
    Incentivized
    Read full review
    Alternatives Considered
    Proofpoint
    I have never evaluated TRAP against another product.
    Incentivized
    Read full review
    Cisco
    Splunk Phantom integrates well with Splunk ES and has many integrations. One thing that I liked about XSOAR as compared to Phantom is that it has an "app-store" where you can download not only app integrations (similar to Phantom) but Playbooks and dashboards as well.
    Incentivized
    Read full review
    Scalability
    Proofpoint
    No answers on this topic
    Cisco
    me and the customers I encountered found it flexible and scalable
    Incentivized
    Read full review
    Return on Investment
    Proofpoint
    • Chances of phishing attacks has decreased.
    • Your employees don't have to do anything, so no impact on productivity.
    Incentivized
    Read full review
    Cisco
    • The playbooks are valuable. They are the core component. Being able to implement and build a code process to work through and scale out what we want to do is valuable
    • Before its use, analyzing each email would take at least 15 to 20 minutes, with some complex cases taking up to 30 minutes...With the automation provided by Splunk Phantom, we could significantly reduce the amount of time and human effort required to complete this task
    Incentivized
    Read full review
    ScreenShots