Item: Splunk SOAR
Rating: 8
Author: Verified User

Use Cases and Deployment Scope

We use SOAR to orchestrate our security workflows from end-to-end so all our usually daily time consuming tasks are automated. That way, we gain time and efficiency. Alerts let us stay on top of all security issues, and keep us reactive when we need to respond to threats in no time.

Pros and Cons

workflows orchestration
security threat detections
security threat alerts

SPL Intelligence
Support

Return on Investment

freeing secops time
Reduced MTTR by almost 30%
Improved our speed to resolve issues

Performance

First and foremost, Splunk SOAR has helped the team reduce its workload. We've never had any performance issue with it, although we've seen it slow down when we received a significant incoming event volume. It didn't really impact us, but was worth noting. We've deployed it on cloud, not on prem, so we can easily increase the load if we need it.

Key Insights

Do you think Splunk SOAR delivers good value for the price?

Yes

Are you happy with Splunk SOAR's feature set?

Yes

Did Splunk SOAR live up to sales and marketing promises?

Yes

Did implementation of Splunk SOAR go as expected?

Yes

Would you buy Splunk SOAR again?

Yes

Other Software Used

Pipedrive

Likelihood to Recommend

We use it to automate our SecOps main tasks such as:
- monitoring (website monitoring, application monitoring, API monitoring, database monitoring, network monitoring, etc.)
- troubleshooting site issues
- analyzing phishing emails
- reducing manual tasks
- streamlining incident response process,
etc.
It's basically a no brainer tool to use to ease our life and free us time.

Leading security automated orchestration platform

Overall Satisfaction with Splunk SOAR