No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Splunk SOAR offers seamless integration with other applications and systems, enhancing its utility in diverse environments.
The library of pre-built playbooks and the ability to customize them with Python code significantly boosts efficiency and automation.
It has extensive automation capabilities that save a substantial amount of time in threat detection and response, reducing the burden on security teams.
The automation and orchestration module are mature, leveraging user entity and behavioral analytics with artificial intelligence and machine learning-based features.
Splunk SOAR is highly scalable and provides flexible and effective streamlining of workflows across security operations.

CONS

Splunk SOAR has challenges integrating with Microsoft products and IAM solutions, often facing integration gaps.
Its pricing model is considered high, particularly for smaller-sized customers.
There are complexities in playbook creation and optimization, with suggestions for more playbooks and better lifecycle management.
Users face latency issues, citing slow response times due to the large datasets it handles.
Splunk SOAR's technical support and documentation are perceived as lacking, affecting troubleshooting and user onboarding.
 

Splunk SOAR Pros review quotes

SS
Manager cybersecurity at Hexion Inc.
Nov 11, 2025
Splunk SOAR has saved us a lot; monthly, around 300 hours of effort, it is saving with Splunk SOAR, and it has helped us where we were able to run the SOC operation with the less number of headcount versus what we used to do earlier.
Jabez Daniel - PeerSpot reviewer
Advance Data Engineer(Cyber Security) at Novo Nordisk
Jan 19, 2026
In terms of time savings in threat responses, as a team, we save more than 30%, estimated around 30-40%.
SN
Identity and Access Management Specialist at a university with 10,001+ employees
Feb 22, 2026
Since deploying Splunk SOAR, there has been a notable reduction in time spent on monotonous security tasks, which I estimate to be around 95%, enabling my team to focus on more strategic initiatives.
Learn what your peers think about Splunk SOAR. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,221 professionals have used our research since 2012.
Mack Scott - PeerSpot reviewer
Cyber Security Network Security Engineer at Cirrus Logic
Sep 9, 2025
In terms of deployment, there were no issues. It was pretty seamless.
Hamada Elewa - PeerSpot reviewer
System Engineer - Security Presales at Raya Integration
Oct 28, 2025
Splunk SOAR helps reduce my mean time to detect significantly and enhances it very well; it reduces the mean time to detect by approximately 70%.
Vikas Pandita - PeerSpot reviewer
Global Head Of Security Architecture Digital & Technology at Aramex
Apr 16, 2026
I have saved much time thanks to Splunk SOAR's impact, where earlier, without autonomous monitoring, users took almost one day or two days; now, a twenty-four hour job is done in almost thirty minutes.
Isaac Ogbonnaya - PeerSpot reviewer
Cybersecurity Consultant at Nnamdi Azikiwe University
Mar 4, 2026
Over the years, Splunk SOAR has significantly improved our return on investment and I see great improvement.
reviewer2798544 - PeerSpot reviewer
Senior Information Security Engineer at a tech company with 10,001+ employees
Jan 21, 2026
Splunk SOAR allows us to connect to multiple platforms, whether they are networks, security, or observability.
TonyCormier - PeerSpot reviewer
Information System Security Officer at a manufacturing company with 10,001+ employees
Oct 10, 2025
Fortunately, the system helps to parse through these alerts and determine which ones are important and need further investigation.
FR
Strategic Account Executive at a computer software company with 51-200 employees
Oct 22, 2025
Splunk SOAR saves time in threat response, and the time to solve an incident is currently the best in the market.
 

Splunk SOAR Cons review quotes

SS
Manager cybersecurity at Hexion Inc.
Nov 11, 2025
One thing that we would like to see with Splunk SOAR is the expandability to the threat intelligence feed.
Jabez Daniel - PeerSpot reviewer
Advance Data Engineer(Cyber Security) at Novo Nordisk
Jan 19, 2026
I'd rate Splunk's technical support around five because compared to IBM QRadar, their support is much better. I feel Splunk should enhance their support, as it appears lacking, especially considering the costs associated with higher licenses.
SN
Identity and Access Management Specialist at a university with 10,001+ employees
Feb 22, 2026
While I appreciate Splunk SOAR, there are areas for improvement, notably regarding the CI/CD pipeline for playbook lifecycle management, as transitioning playbooks from development to production currently feels cumbersome and requires more manual effort than I would prefer.
Learn what your peers think about Splunk SOAR. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,221 professionals have used our research since 2012.
Mack Scott - PeerSpot reviewer
Cyber Security Network Security Engineer at Cirrus Logic
Sep 9, 2025
They should integrate Splunk Enterprise Security better into Splunk Cloud.
Hamada Elewa - PeerSpot reviewer
System Engineer - Security Presales at Raya Integration
Oct 28, 2025
Splunk SOAR does not help me reduce my security event volume; in fact, it makes them massive.
Vikas Pandita - PeerSpot reviewer
Global Head Of Security Architecture Digital & Technology at Aramex
Apr 16, 2026
From the improvement point of view regarding Splunk SOAR, I suggest including more types of LLM models such as autonomous AI models including Anthropic and Opus 4.6, as well as creating a playground for new users to work on these, which will significantly help solve complex problems and assist new companies in understanding how Splunk works easily.
Isaac Ogbonnaya - PeerSpot reviewer
Cybersecurity Consultant at Nnamdi Azikiwe University
Mar 4, 2026
I see room for improvement in Splunk SOAR regarding the learning curve, specifically breaking it down, as the Python side requires some technical knowledge.
reviewer2798544 - PeerSpot reviewer
Senior Information Security Engineer at a tech company with 10,001+ employees
Jan 21, 2026
I think Splunk SOAR is a bit slow to catch up with the AI boom. Everyone is ingesting Copilots or some form of AI in their platforms, and Splunk SOAR doesn't have it yet.
TonyCormier - PeerSpot reviewer
Information System Security Officer at a manufacturing company with 10,001+ employees
Oct 10, 2025
I'm not an expert on Splunk SOAR, but I'm sure our team members know what areas could be improved.
FR
Strategic Account Executive at a computer software company with 51-200 employees
Oct 22, 2025
There are areas where Splunk SOAR can continue to improve, particularly regarding the synchronization of information, as sometimes it takes longer than other tools.