Wildbox
Wildbox: Broad open-source security tooling with YAML playbooks, but a narrower dedicated SOAR fit. Ranked #17 of 22 in SOAR Software by our editors (7.4/10); pricing: Open source; best for open-source teams needing broad security tooling.
At a glance
- Editor score7.4 / 10
- PricingOpen source
- Best forOpen-source teams needing broad security tooling
- Paid fromFree
- Playbook automationYes
- Facts checked20 Sep 2026
Where it wins
- YAML-based playbooks support repeatable incident-response workflows.
- Aggregates threat intelligence from 50+ sources with IOC enrichment.
- Scans AWS, Azure, and GCP cloud security posture.
Where it doesn't
- Dedicated case-management capabilities are not a central focus.
- The integration model is centered on webhook alerts and APIs.
- Self-hosting and containerized deployment require technical ownership.
Our verdict on Wildbox
Wildbox is a self-hosted, MIT-licensed security operations platform for organizations, security teams, DevOps and platform teams, and researchers. Its scope extends beyond SOAR: the platform combines YAML-based incident-response playbooks with threat-intelligence aggregation, IOC lookup and enrichment, cloud security posture scanning, CVE vulnerability management, endpoint telemetry, access controls, and LLM-assisted analysis. It suits open-source teams that want one security operations environment across web, Windows, macOS, and Linux, with self-hosted deployment as the operating model.
The standout strength is breadth. Wildbox can collect and process alerts through webhooks, orchestrate response workflows with YAML, enrich indicators, prioritize and track vulnerabilities, and scan AWS, Azure, and GCP environments. Its authenticated API gateway includes rate limiting, while users, teams, and role-based access control support governed access. LLM-assisted threat analysis and report generation add an analysis layer, but the product remains oriented toward teams able to manage a broad technical platform rather than buyers seeking a narrowly focused automation console.
Deployment is built around containerized microservices with Docker Compose, so adoption involves operational responsibility for hosting, configuration, and ongoing maintenance. Wildbox is a strong choice for teams that value open-source control, self-hosting, threat intelligence, cloud scanning, and flexible playbook automation in one platform. Organizations primarily shopping for mature case management or a wide catalog of prebuilt SOAR integrations should consider alternatives with those capabilities as their central focus.
Your product? Our editors can test Wildbox in depth and publish a review, labelled as paid · from $149/mo →
Wildbox pricing
Wildbox fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Free |
| Playbook automation | Yes |
| Alert enrichment | Not verified |
| Threat intel actions | Yes |
| Case management | Not verified |
| Deployment model | Self_hosted |
| Published integrations | Not verified |
| Deployment | Self-hosted |
| Platforms | Web, Windows, macOS, Linux |
| Support | Email, Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Open source |
| Website | wildbox.io |
| Facts checked | 20 Sep 2026 |
Alternatives to Wildbox
- Cortex XSOARA case-driven SOAR platform for enterprise security operations teams.9.3
- ShuffleA value-focused SOAR platform for teams that want open-source and self-hosted options.9.2
- Splunk SOARA strong-value SOAR platform with broad automation, case management and a free edition.9.1
See all Wildbox alternatives →
Used Wildbox? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Wildbox for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Wildbox is listed in our SOAR Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/wildbox/"><img src="https://www.itechguides.com/best/badge/wildbox.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update