McAfee ePolicy Orchestrator vs Splunk SOAR comparison

McAfee and Splunk are both solutions in the Security Orchestration Automation and Response (SOAR) category. McAfee is ranked #13 with an average rating of 8.7, while Splunk is ranked #3 with an average rating of 8.3. McAfee holds a 0.7% mindshare in SOAR, compared to Splunk’s 7.8% mindshare. Additionally, 81% of McAfee users are willing to recommend the solution, compared to 86% of Splunk users who would recommend it.

McAfee ePolicy Orchestrator

Read 42 McAfee ePolicy Orchestrator reviews

1,175 Views
670 Comparison Views

81% willing to recommend

Splunk SOAR

Read 46 Splunk SOAR reviews

5,027 Views
3,821 Comparison Views

86% willing to recommend

McAfee ePolicy Orchestrator

Splunk SOAR

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 15, 2025

McAfee ePolicy Orchestrator and Splunk SOAR compete in cybersecurity, each with unique advantages. McAfee ePolicy Orchestrator is favored for its cost-effectiveness and outstanding support, while Splunk SOAR is distinguished by its powerful automation features, which many find worth the higher price.

Features: McAfee ePolicy Orchestrator offers centralized management, comprehensive endpoint security integrations, and effective configuration capabilities from a single interface. It provides automatic patch updates and virus signature reporting. Splunk SOAR has superior playbook automation, extensive integration capabilities, and customizable playbooks for detailed investigative processes, enhancing efficiency and adaptability.

Room for Improvement: McAfee ePolicy Orchestrator could improve its user interface complexity, expand integration with third-party systems, and enhance real-time threat intelligence. Splunk SOAR might focus on simplifying deployment processes, reducing its hardware demands, and enhancing its documentation, making it more accessible to newer users.

Ease of Deployment and Customer Service: McAfee ePolicy Orchestrator facilitates straightforward deployment and offers notable support, making integration into environments seamless. In contrast, Splunk SOAR's deployment involves complexities due to its advanced features, but its responsive support helps ensure successful transitions.

Pricing and ROI: McAfee ePolicy Orchestrator is a cost-effective solution aligning well with budget-conscious implementations, ensuring greater value for security investments. Splunk SOAR, though requiring a higher initial investment, provides significant ROI through advanced automation and efficiency, appealing to those seeking long-term advantages.

To learn more, read our detailed McAfee ePolicy Orchestrator vs. Splunk SOAR Report (Updated: July 2025).

Buyer's Guide

McAfee ePolicy Orchestrator vs. Splunk SOAR

July 2025

Download the complete report

Helped 865,295 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

McAfee ePolicy Orchestrator

Ranking in Security Orchestration Automation and Response (SOAR)

13th

Average Rating

8.0

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Splunk SOAR

Ranking in Security Orchestration Automation and Response (SOAR)

3rd

Average Rating

8.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2025, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of McAfee ePolicy Orchestrator is 0.7%, down from 0.7% compared to the previous year. The mindshare of Splunk SOAR is 7.8%, down from 8.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Orchestration Automation and Response (SOAR)

Featured Reviews

Binu Haneef

System Administrator at Sky News Arabia

Comprehensive security management enabled through efficient integration and automation

McAfee ePolicy Orchestrator helps automate routine security tasks. We created customized automation. For example, when we did not have an EDR or XDR solution, we created tasks exclusively for detection and response automation and automatic segregation of infected PCs. The ability to customize the dashboard in McAfee ePolicy Orchestrator helps us significantly. The main feature is automation for auto-segmentation and segregation. As we are in an AI era, McAfee can focus on AI tools. Instead of putting manual effort into each security-related task, it can implement more advanced automation using AI. This enhancement could improve cybersecurity significantly. Regarding the reporting area in McAfee ePolicy Orchestrator, we are satisfied with what we currently have. Our cybersecurity team needs customized reports beyond the default ones. We have more than 20 separate reports for identifying threats, managing, and understanding the security posture of our company and assets.

Read full review

Hamada Elewa

System Engineer - Security Presales at Raya Integration

Playbook complexity challenges integration but customization enables professional operation

We work with Splunk SOAR from a security perspective, focusing on User Behavior Analytics (UBA) and Security Orchestration, Automation, and Response (SOAR) The customization of the playbook in Splunk SOAR is very beneficial. After building the playbook, it operates professionally. There is an AI…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"McAfee ePolicy Orchestrator's performance is good."

"The valuable feature of the McAfee ePolicy Orchestrator is the management of the policies."

"McAfee is helping us to clean all of the viruses from the machines, protecting our desktops from the latest threats."

"The most valuable features of McAfee ePolicy Orchestrator are the easy-to-use console, and lots of reports, such as customized reports and inventory reports. Additionally, overall the centralized management is very good where you can see the compliance levels and inventory."

"Application control and traffic encryption are the most valuable features."

"The initial setup is very easy."

"What I like the most is the ability to manage centrally, to manage the various devices, the platform, and the endpoint, all from one console."

"The feature that I have found most valuable is its general purpose of protecting our endpoints from infections, malicious files, and all those kinds of things. The fact that there are organized policies and policy inheritance. The general management."

More McAfee ePolicy Orchestrator pros

"When you design a playbook, you can integrate multiple log sources and define rules... After that, the platform automatically compiles all these activities and, based on the results, the analyst only has to indicate whether the result is a true or false positive. That reduces the time and effort involved."

"It's pretty easy when it comes to setting up assets. If you want to fetch emails or call a REST API, you can set up an asset and grab that information."

"The most valuable feature of the solution is the playbook automation just because it allows us to reduce the manual actions that SOC has to handle."

"So far, the interface is very easy to use."

"Splunk SOAR's extensive library of pre-built integrations allows it to connect with a vast array of popular security and IT applications, streamlining workflows across our existing security stack."

"Splunk integrates with so many products. It provides us with good information for us to be able to do our jobs."

"The product’s integration with other Splunk products is valuable."

"It has definitely saved a decent amount of time for our analysts so they can focus on other tasks."

More Splunk SOAR pros

Cons

"The impact of the agent on the endpoint's performance - the resources it takes. Additionally, the difficulties we experience with inheriting and breaking inheritance on the organization's structure breakdown for policy inheritance and then for rules inheritance. We are actually struggling with this."

"I would like to see McAfee reduce the amount of manual work required."

"As for improvements, I think that putting everything on a cloud and one console would be a great idea and would be useful for customers."

"The issues with the integration capabilities of the product, specifically the ones that are deployed on an on-premises model, need to be improved."

"Lacks a single plug-in for multiple uses."

"The Virtual Patching feature needs to be improved."

"McAfee ePolicy Orchestrator support has been helpful. However, sometimes when I raise the case they take a while to answer. For example, the last time I used them it took them two weeks to reply back by email. No one has contacted me back since. They should improve their service."

"McAfee ePolicy Orchestrator could improve by supporting container microservices, such as Docker and Kubernetes."

More McAfee ePolicy Orchestrator cons

"The scalability could be better."

"The font used in the interface could be changed and made easier to read."

"The cost of Splunk SOAR has room for improvement."

"The Splunk SOAR platform was not designed specifically for case management which is why this area needs improvement."

"Some of the training materials are on a basic level."

"The UI can be more customizable for the clients."

"And most of the challenges that I have faced with the solution can be found in the documentation itself."

"We want to see improvements made to the APIs such that we can connect to many different systems and data sources."

More Splunk SOAR cons

Pricing and Cost Advice

"$The price of McAfee ePolicy Orchestrator is expensive, it is approximately $6,000 to $9,000 per license annually."

"Compared to other Antivirus products, the cost of this solution is a bit high."

"McAfee tries to package different things into different products, then sell them as different products with different licenses. They just split everything up into multiple things. That's just their sales pitch and how they do it."

"This solution is priced in the mid-range."

"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing a three out of ten."

"It's an expensive solution"

"It is attractively priced. It is a fraction of what we're going to pay for CrowdStrike or SentinelOne, but it only has a fraction of the capabilities as well."

"McAfee ePolicy Orchestrator is a cheaply priced product, meaning it is not expensive since McAfee provides a free version of ePO, which includes phone support as well."

More McAfee ePolicy Orchestrator pricing and cost advice

"Splunk SOAR is an expensive solution for an organization of our size."

"The licensing cost is reasonable."

"Splunk SOAR is moderately priced, neither cheap nor overly expensive."

"The cost is high and the licensing is on an annual basis."

"We renewed it this year. This year was the first time there was a dramatic increase in the price. It was kind of non-negotiable. It was just a high increase. We had internal communications, and it was definitely a surprise to us. In a short time frame, we renewed it this year. Prices are going up everywhere, but they are not always justifiable, at least not to our eyes. The pricing this year was definitely a big shock."

"While I can't confirm the exact pricing, some colleagues have mentioned that Splunk SOAR may be on the costlier side."

"The tool is not cheap."

"It's very overpriced because it is based on the number of users. There is no bulk licensing."

More Splunk SOAR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.

See recommendations

865,295 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

10%

Financial Services Firm

Energy/Utilities Company

Computer Software Company

13%

Financial Services Firm

12%

Manufacturing Company

11%

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is better - Mcafee's MVision ePO or ePolicy Orchestrator?

Our organization ran comparison tests to determine whether Mcafee's MVision ePO or ePolicy Orchestrator network security software was the better fit for us. We decided to go with Mcafee's ePolicy O...

See all answers

What do you like most about McAfee MVISION ePO?

McAfee ePolicy Orchestrator's performance is good.

See all answers

What is your experience regarding pricing and costs for McAfee MVISION ePO?

It's an expensive solution.

See all answers

What do you like most about Splunk Phantom?

Splunk SOAR's quick response to incidents is the most valuable part.

See all answers

What is your experience regarding pricing and costs for Splunk Phantom?

Splunk SOAR is moderately priced, neither cheap nor overly expensive.

See all answers

What needs improvement with Splunk Phantom?

There are areas in Splunk SOAR that have room for improvement. To make Splunk SOAR a better solution, there could be better built-in debugging tools, smarter playbook suggestions, and enhanced life...

See all answers

Comparisons

Symantec Data Loss Prevention vs McAfee ePolicy Orchestrator

Compared 26% of the time

Forcepoint Data Loss Prevention vs McAfee ePolicy Orchestrator

Compared 26% of the time

GTB Technologies Inspector vs McAfee ePolicy Orchestrator

Compared 19% of the time

More McAfee ePolicy Orchestrator Competitors

Palo Alto Networks Cortex XSOAR vs Splunk SOAR

Compared 18% of the time

Cortex XSIAM vs Splunk SOAR

Compared 13% of the time

Fortinet FortiSOAR vs Splunk SOAR

Compared 11% of the time

ServiceNow Security Operations vs Splunk SOAR

Compared 10% of the time

VMware Carbon Black Endpoint vs Splunk SOAR

Compared 1% of the time

More Splunk SOAR Competitors

Product Reports

Buyer's Guide

McAfee ePolicy Orchestrator

August 2025

Download McAfee ePolicy Orchestrator product report

Buyer's Guide

Splunk SOAR

July 2025

Download Splunk SOAR product report

Also Known As

McAfee ePO, ePolicy Orchestrator, Intel Security ePolicy Orchestrator, McAfee MVISION ePO

Phantom

Overview

McAfee ePolicy Orchestrator (McAfee ePO) is the most advanced, extensible, and scalable centralized security management software in the industry. Unifying security management through an open platform, McAfee ePO makes risk and compliance management simpler and more successful for organizations of all sizes.

McAfee

Splunk SOAR offers features like automation and orchestration of manual tasks, speeding up work, detection and response to advanced and emerging threats.

Go from overwhelmed to in-control

Automate manual tasks. Address every alert, every day. Establish repeatable procedures that allow security analysts to stop being reactive and focus on mission-critical objectives to protect your business.

Force multiply your team

Orchestrate and automate repetitive tasks, investigation and response to increase efficiency and productivity, and do more with the people you already have. Make a team of three feel like a team of 10.

From 30 minutes to 30 seconds

Work faster with Splunk SOAR. Respond to threats in seconds. Lower your mean time to respond (MTTR) by automating security tasks and workflows across all of your security tools.

End-to-end security operations made easy

Take advantage of Splunk Enterprise Security and Splunk SOAR joining forces to provide a seamless and intuitive SecOps platform to prevent, detect and respond to advanced and emerging threats.

Splunk

Sample Customers

Brelje & Race, Cognizant, Sutherland Global Services, Eagle Rock Energy, Arab National Bank, Bank Central Asia, Kleberg Bank, Leading Mexican Bank, SF Police Credit Union, Macquarie Telecom, Seagate Technology, Blackburn & Darwen Council, California Department of Corrections & Rehabilitation, IRCEP, Major U.S. State Government, State of Alaska, State of Colorado, Cemex, Deutsche Edelstahlwerke

Recorded Future, Blackstone

Buyer's Guide

McAfee ePolicy Orchestrator vs. Splunk SOAR

July 2025

Free Report: McAfee ePolicy Orchestrator vs. Splunk SOAR

Find out what your peers are saying about McAfee ePolicy Orchestrator vs. Splunk SOAR and other solutions. Updated: July 2025.

DOWNLOAD NOW

865,295 professionals have used our research since 2012.

See our McAfee ePolicy Orchestrator vs. Splunk SOAR report.

See our list of best Security Orchestration Automation and Response (SOAR) vendors.

We monitor all Security Orchestration Automation and Response (SOAR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.