Splunk SOAR
Splunk SOAR: A strong-value SOAR platform with broad automation, case management and a free edition. Ranked #3 of 22 in SOAR Software by our editors (9.1/10); pricing: Free plan; best for budget-conscious teams needing established SOAR.
At a glance
- Editor score9.1 / 10
- PricingFree plan
- Best forBudget-conscious teams needing established SOAR
- Free planYes
- Playbook automationYes
- Founded2003 · San Jose, California, USA
- Facts checked20 Sep 2026
Where it wins
- Free Community Edition includes over 100 pre-built playbooks
- 2,800+ automated actions connect 300+ third-party tools
- Supports cloud, on-premises and hybrid deployments
Where it doesn't
- Free edition is limited to 100 actions per day
- Only web is listed as a supported platform
- The product is proprietary rather than open source
Our verdict on Splunk SOAR
Splunk SOAR is a security orchestration, automation and response platform for security operations centers. It connects security and IT tools, automates triage and response workflows, enriches investigations with threat intelligence, and supports case management for assigning, documenting and tracking investigative work. It is suited to teams that want to coordinate existing security infrastructure across cloud, on-premises or hybrid deployments rather than replace it.
The Free Community Edition gives teams up to 100 actions per day and over 100 pre-built playbooks. It also supports cloud, on-premises or hybrid deployments, making it a practical entry point for smaller or budget-conscious security operations teams. The paid edition is a dedicated SOAR solution that automates triage and enrichment activities. Across the product, the Visual Playbook Editor supports custom workflows, while case management adds task segmentation, assignment and documentation. Built-in threat intelligence and investigation insights extend the platform beyond basic alert routing.
Integration depth is a central strength. Splunk SOAR connects with 300+ third-party tools and provides 2,800+ automated actions, with Splunk Enterprise Security, Splunk Cloud Platform, and Splunkbase SOAR apps and connectors forming a natural ecosystem fit. SAML2 single sign-on supports access management, and Splunk Automation Broker enables orchestration of on-premises assets. Teams already aligned with Splunk products should find the ecosystem focus especially relevant. Organizations needing a broader platform footprint than web, or preferring open-source software, should consider alternatives.
Your product? Our editors can test Splunk SOAR in depth and publish a review, labelled as paid · from $149/mo →
Splunk SOAR pricing
All 2 Splunk SOAR plans and prices →
Splunk SOAR fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Not verified |
| Playbook automation | Yes |
| Alert enrichment | Yes |
| Threat intel actions | Yes |
| Case management | Yes |
| Deployment model | Hybrid |
| Published integrations | 350 |
| Deployment | Cloud, Self-hosted |
| Platforms | Web |
| Compliance & security | SOC 2, ISO 27001, SSO/SAML |
| Support | Email, Phone, Tickets, Community, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 350+ integrations: Splunk Enterprise Security, Splunk Cloud Platform, Splunkbase SOAR apps and connectors See all → |
| Pricing | Free plan (source) |
| Website | splunk.com |
| Facts checked | 20 Sep 2026 |
Splunk SOAR integrations
Splunk SOAR lists 350+ integrations on its own site — the 3 named here are the ones its pages call out.
- Splunk Enterprise Security
- Splunk Cloud Platform
- Splunkbase SOAR apps and connectors
See all Splunk SOAR integrations →
Alternatives to Splunk SOAR
- Cortex XSOARA case-driven SOAR platform for enterprise security operations teams.9.3
- ShuffleA value-focused SOAR platform for teams that want open-source and self-hosted options.9.2
- Cyware Security Orchestration and AutomationA flexible SOAR platform with AI-assisted playbooks, Python editing, and 400+ integrations.9.0
See all Splunk SOAR alternatives →
Splunk SOAR vs the competition
- Splunk SOAR vs Shuffle
- Splunk SOAR vs Cyware Security Orchestration and Automation
- Splunk SOAR vs Rapid7 InsightConnect
- Splunk SOAR vs IBM QRadar SOAR
- Splunk SOAR vs Swimlane Turbine
- Splunk SOAR vs Torq Hyperautomation
Compare Splunk SOAR with any tool side by side →
Also Ranked In
Splunk SOAR is ranked in 3 of our directories.
Used Splunk SOAR? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Splunk SOAR for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Splunk SOAR is listed in our SOAR Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/splunk-soar/"><img src="https://www.itechguides.com/best/badge/splunk-soar.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update