Splunk Named a Leader in The Forrester Wave™: Security Analytics Platforms, Q2 2025

Security Olivia Henderson

We’re honored to share that Splunk has been named a Leader in The Forrester Wave™: Security Analytics Platforms, Q2 2025.

Splunk is committed to power the SOC of the Future by providing a unified threat detection, investigation, and response (TDIR) experience — no matter their deployment requirements. We are proud to help organizations strengthen their digital resilience with increased visibility, accurate detections, and integrated, automated workflows delivered through a unified platform so that they can navigate their security challenges.

Splunk Has Been Recognized With the Top Score in the Current Offering Category

We received the highest possible scores from the Forrester evaluation in the following criteria:

According to the Forrester report, “Splunk maintains its strategic focus on data, where it is strongest: accessing it, applying the right analytics, and accelerating actions across IT and security…Enterprise Security’s latest release unified Splunk’s security orchestration, automation, and response (SOAR) for a more seamless analyst workflow. Its analytics — scheduled queries and streaming analytics — show up in risk-based alerting, so users can build correlation rules.”

We are extremely grateful to our customers and partners for making this recognition possible. Access The Forrester Wave™: Security Analytics Platforms, Q2 2025 to learn more about how Splunk Enterprise Security stacks up, visit our website or take a product tour.

Forrester does not endorse any company, product, brand, or service included in its research publications and does not advise any person to select the products or services of any company or brand based on the ratings included in such publications. Information is based on the best available resources. Opinions reflect judgment at the time and are subject to change. For more information, read about Forrester’s objectivity here.

Related Articles

Black Hat USA 2026: Proving the Splunk ES Foundation for the Agentic SOC
Security
10 Minute Read

Black Hat USA 2026: Proving the Splunk ES Foundation for the Agentic SOC

Cisco and Splunk used live NOC/SOC operations to validate Splunk Enterprise Security detections.
Splunk Integrates with Amazon Security Lake to Deliver Analytics Using the Open Cybersecurity Schema Framework
Security
2 Minute Read

Splunk Integrates with Amazon Security Lake to Deliver Analytics Using the Open Cybersecurity Schema Framework

We're proud to be one of the early partners of Amazon Security Lake, allowing joint Splunk and AWS customers to efficiently ingest the OCSF-compliant data to help improve threat detection, investigation and response.
SUPERNOVA Redux, with a Generous Portion of Masquerading
Security
10 Minute Read

SUPERNOVA Redux, with a Generous Portion of Masquerading

A review of the Pulse Secure attack where the threat actor connected to the network via a the Pulse Secure virtual private network (VPN), moved laterally to its SolarWinds Orion server, installed the SUPERNOVA malware, and collected credentials, all while masquerading the procdump.exe file and renamed it as splunklogger.exe.