Snare vs. Splunk SOAR

Snare provides compliance products ranging from small footprint, highly effective device, and network logging and log management tools to ID advanced infrastructure threat protection solutions. It has many valued features like activity dashboard, real-time monitoring, data import/export, dashboard creation, and many more. They all help me to improve my working skills It has been a game-changer as it saves a lot of time and I can work freely with this, and whenever I have any doubt the customer support team communicates immediately.

Incentivized

Our company has very complex and dynamic security operations because of the large number of security tools and systems that we need to manage and coordinate. Moreover, it helps us to meet many regulatory and compliance requirements because it helps us to automate and document our security operations. We also use it to streamline our security operations and improve our response to potential threats.

Incentivized

• The tools were very easy to install and it integrates seamlessly with our secure system and prevents deployment.
• Logging cooperates with our system perfectly.
• Sending events to SIEM.
• I have realised that the data collected is going to the centralised detection and prevent solution for analysis and monitoring.

Incentivized

• It's integration with a 'multiverse' of tools and platforms has allowed us to easily connect it to our existing security infrastructure and extend its capabilities to support a variety of use cases.
• Despite the robust capabilities it is easy to deploy custom workflows and playbooks.
• It possesses powerful automation capabilities

Incentivized

• Nothing really, it has been performing flawlessly.
• I did not run into any problems.

Incentivized

• A lack of instruction It can be difficult to contact the support staff. Limited experience from current users.
• It takes some effort to set up and learn new technology at first. More assistance is required from the support staff. The product's price needs to go down.
• Cost of the larger version.

Incentivized

It is a really efficient system that has good artificial intelligence for incident prevention, it is not complicated to use and can be quickly customized, it is software that we like to use.

Incentivized

Not immediate: it always requires a training.

Incentivized

We are able to automate almost every one of our use cases, even our threat-hunting, and threat intel procedures. We have 20+ playbooks and cover almost everything, even searching logs into Splunk, looking into TIP and external systems, enrichment, and collecting evidence for analysts; it can perform concurrent playbooks running.

Incentivized

Splunk Support is always great! In addition the Community is very efficient and active.

Incentivized

I never followed an in-person training, I gave my evaluation based on the online training

Incentivized

I followed training for Phantom admins and it opened a world for me

Incentivized

I already said that the main key insight is the knowledge of Phantom, so a detailed training for all the people involeved.

Incentivized

Splunk Phantom integrates well with Splunk ES and has many integrations. One thing that I liked about XSOAR as compared to Phantom is that it has an "app-store" where you can download not only app integrations (similar to Phantom) but Playbooks and dashboards as well.

Incentivized

me and the customers I encountered found it flexible and scalable

Incentivized

• It has made and positive effect on my work.
• It has saved me a lot of time for my needs.

Incentivized

• We are guaranteed maximum protection from cyber security threats of all kinds. Members of the software security department have over twenty tasks to complete in a day - the manual load would have been unbearable if we did not have the advanced automation from SPLUNK SOAR.

Incentivized