Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

D3 SOAR

#14 of 23 in Runbook Automation Software

D3 SOAR: A broad SOAR platform for teams that need controlled, auditable security playbooks. Ranked #14 of 23 in Runbook Automation Software by our editors (7.4/10); pricing: Pricing on request; best for MSSPs and security teams needing playbooks.

7.4/10Editor score
D3 SOAR7.4 Visit D3 SOAR

At a glance

  • Editor score
    7.4 / 10
  • Pricing
    Pricing on request
  • Best for
    MSSPs and security teams needing playbooks
  • Approval steps
    Yes
  • Founded
    2015 · Vancouver, British Columbia, Canada
  • Facts checked
    20 Sep 2026
D3 SOAR screenshot
  • Where it wins

    • Codeless playbooks support scheduled and event-driven workflows
    • Multi-tenancy fits MSSPs and MDR providers
    • Case management, approvals and audit trails support controlled response
  • Where it doesn't

    • Contact-sales pricing makes budget comparison less direct
    • Its security focus is narrower than general-purpose automation tools
    • On-premises deployment requires customer-managed infrastructure

Our verdict on D3 SOAR

D3 SOAR is a security orchestration, automation and response platform for security operations teams, enterprises, MSSPs and MDR providers. It combines event ingestion, alert triage, enrichment, case management, integrations and configurable playbooks. Teams can create codeless workflows that automate security-tool commands while retaining human-required tasks and approval steps. Multi-tenancy and reusable playbooks make the product especially relevant to MSSPs and MDR providers managing multiple environments.

Workflow control is a central strength. D3 SOAR supports scheduled and recurring execution alongside webhook and event-driven triggers, so teams can coordinate both routine operations and incident response. Case management adds incident records, while audit trails and operational logs preserve a record of activity for investigations and compliance reporting. MITRE ATT&CK and D3FEND playbooks add structure for teams organizing response around established security frameworks. Buyers should consider it when response governance and operational visibility matter as much as automation depth.

The platform connects with SIEM, EDR, NDR, TIP and ITSM systems, as well as security, IT, DevOps and support tools. It is available through web and API access, with SaaS and self-hosted deployment options. According to the vendor's pricing model, purchasing is handled through contact sales rather than a published tier structure, so organizations should expect a sales-led evaluation. D3 SOAR is a strong fit for security teams and service providers that need broad integrations, multi-tenancy and controlled playbooks; teams seeking a lightweight, general-purpose automation tool may prefer a narrower product.

Your product? Our editors can test D3 SOAR in depth and publish a review, labelled as paid · from $149/mo →

D3 SOAR pricing

Plans Pricing on request No free plan — trial or paid only. Prices checked 20 Sep 2026.
See plans on d3security.com

D3 SOAR fact sheet

Free planNot verified
Paid fromNot verified
Approval stepsYes
Scheduled runsYes
Event triggersYes
Incident integrationsYes
Audit logsYes
Self-hosted optionYes
Runs includedNot verified
DeploymentCloud, Self-hosted
PlatformsWeb
Compliance & securitySOC 2, GDPR, HIPAA
SupportPhone
Built forMid-market, Enterprise (editorial estimate)
Integrations300+ integrations: SIEM, EDR, NDR, TIP, ITSM, security tools … See all →
PricingPricing on request
Websited3security.com
Facts checked20 Sep 2026

D3 SOAR integrations

D3 SOAR lists 300+ integrations on its own site — the 9 named here are the ones its pages call out.

  • SIEM
  • EDR
  • NDR
  • TIP
  • ITSM
  • security tools
  • IT tools
  • DevOps tools
  • support tools

See all D3 SOAR integrations →

Alternatives to D3 SOAR

See all D3 SOAR alternatives →

Used D3 SOAR? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used D3 SOAR for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — D3 SOAR 7.4/10

D3 SOAR is listed in our Runbook Automation Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/d3-soar/"><img src="https://www.itechguides.com/best/badge/d3-soar.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update