Skip to main content


Splunk Security Orchestration, Automation and Response (SOAR)

Orchestrate security workflows and automate tasks in seconds to empower your SOC, work smarter and respond faster.


Automate so you can innovate


Bring Order to a Chaotic SOC

Splunk SOAR is designed to integrate and enhance your security operations seamlessly. It orchestrates your security stack by connecting with 300+ third-party tools and supporting 2,800+ automated actions. This ensures that you can streamline complex workflows across various teams and tools without the need to massively overhaul your existing security stack.

Force multiply your team

Splunk SOAR can streamline your response and automation processes by consolidating alerts and data from the various tools in your environment, ensuring timely and prioritized responses. Splunk's data-centric approach, backed by the power of machine learning, further amplifies its capabilities.


Respond with Speed and Accuracy

Splunk SOAR empowers users to easily automate security tasks with playbooks that can be customized to fit your needs. Splunk SOAR features a wide variety of prebuilt playbooks, which leverage the MITRE ATT&CK and D3FEND frameworks, are all aligned to foundational SOC tasks, and help ensure you can automate everything from small steps to end-to-end use cases.


Supercharged SOAR

Combine infrastructure orchestration, playbook automation, case management and integrated threat intelligence to streamline processes and tools.

Automated playbooks Automated playbooks

Automated playbooks

Execute actions across security and IT tools in seconds instead of hours. Splunk SOAR comes with a plethora of playbooks to help you tackle the use cases that matter most. 

App integration App integration

App integrations

Splunk SOAR integrates across 300+ third-party tools and supports 2,800+ automated actions. Connect and coordinate complex workflows across your teams and tools, so you don’t need to rip and replace your existing stack. 

Simple, scalable security automation Simple, scalable security automation

Simple, scalable security automation

Whether you’re new to coding or an expert, Splunk SOAR’s Visual Playbook Editor simplifies the playbook creation process by allowing you to assemble custom workflows with prebuilt code blocks while still providing intuitive editing options. 

Comprehensive case management Comprehensive case management

Comprehensive case management

Whether you're using custom templates or industry standards for incident response, Splunk SOAR facilitates task segmentation, assignment, and documentation, ensuring a cohesive and collaborative investigative process. 

Infused with intelligence Infused with intelligence

Infused with intelligence

Splunk SOAR’s investigation panel helps you prioritize what threats to act on, all from one location. Additionally, the built-in threat research and insights from the Splunk Threat Research Team help you make informed decisions and stay ahead of threats. 

Flexible deployment options Flexible deployment options

Flexible deployment options

Support cloud, on-premises or hybrid deployments. Deploy Splunk SOAR in the way that best meets the needs of your organization.

Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness or a particular purpose.


Automate any tool, any action

Explore more from Splunk

Related products

Splunk Attack Analyzer Splunk Attack Analyzer

Splunk Attack Analyzer

Automatically detect and analyze the most complex credential phishing and malware threats.

Learn More
Splunk Enterprise Security Splunk Enterprise Security

Splunk Enterprise Security

Industry-defining SIEM to quickly detect, investigate, and respond to threats.

Learn More
Splunk Security Essentials Splunk Security Essentials

Splunk Security Essentials

Security visibility and threat detection. 

Learn More