No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Splunk SOAR's automation playbooks reduce manual work, enabling analysts to focus on higher-priority tasks.
Integration capabilities allow seamless connectivity with various systems, enhancing workflow efficiency.
Automating incident response significantly reduces investigative time, allowing quicker incident resolution.
Visual Playbook Editor's drag-and-drop interface facilitates easy playbook creation without coding from scratch.
Automated processes lead to substantial time savings, improving productivity and operations efficiency.

CONS

There are challenges with accuracy in identifying threats, resulting in false negatives and positives, necessitating manual verification.
The installation process for Automation Broker on Linux is difficult and requires simplification to connect on-premises security controls more effectively.
Simplifying the processes related to automation and playbook creation is essential, as the current approach is complex and cumbersome, affecting efficiency.
The management features for user roles are insufficient, particularly when changes in permissions occur, resulting in complications that require complete platform reinstallation.
The integration ecosystem and connectivity with various data sources need enhancement to improve performance and usability out of the box.
 

Splunk SOAR Pros review quotes

Vikash Kushwaha - PeerSpot reviewer
Full-Stack Software Engineer at mindpathtech
Aug 10, 2026
Splunk SOAR consolidates tools in my environment significantly, notifying users about ongoing malicious activities based on integrated security features in my banking app.
Sydney D'Souza - PeerSpot reviewer
Security Consultant at SoftwareONE
Jul 17, 2026
One particular example I can recall is that in enterprise, we get around 100 to 200 notables daily, which consumes approximately 16 to 40 hours per day for an analyst, but since we have Splunk SOAR, it is now just about five to seven minutes or five to 10 minutes per alert.
reviewer2747643 - PeerSpot reviewer
Security manager at a manufacturing company with 1,001-5,000 employees
Nov 11, 2025
Splunk SOAR has saved us a lot; monthly, around 300 hours of effort, it is saving with Splunk SOAR, and it has helped us where we were able to run the SOC operation with the less number of headcount versus what we used to do earlier.
Learn what your peers think about Splunk SOAR. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
920,769 professionals have used our research since 2012.
MohitGupta2 - PeerSpot reviewer
Chief Information Security Officer Teleperformance India And Global Business Services at a financial services firm with 10,001+ employees
Aug 12, 2026
Splunk SOAR really automates triaging and investigation, reducing an engineer's one-hour incident investigation to just a few minutes while automatically closing false positive tickets with a high level of granularity.
Abhishek Nayak - PeerSpot reviewer
Soc L1 Engineer at Softcell Technologies Limited
Jun 23, 2026
We decided to use Splunk SOAR because it's a powerful, reliable engine that has significantly improved our SOC operations, especially in terms of incident response time and scaling features.
Vaibhav Mahendra Kolhe - PeerSpot reviewer
Soc Analyst at Softcell Technologies Limited
Jun 2, 2026
Splunk SOAR helps a lot with consolidating our networking, security, and observability tools, and we are saving almost 200 hours compared to not using Splunk SOAR.
Jabez Daniel - PeerSpot reviewer
Advance Data Engineer(Cyber Security) at Novo Nordisk
Jan 19, 2026
In terms of time savings in threat responses, as a team, we save more than 30%, estimated around 30-40%.
reviewer2890704 - PeerSpot reviewer
Engineer at a tech vendor with 10,001+ employees
Aug 20, 2026
The visibility for Splunk SOAR is extremely clear and very user-friendly and intuitive.
SN
Identity and Access Management Specialist at a university with 10,001+ employees
Feb 22, 2026
Since deploying Splunk SOAR, there has been a notable reduction in time spent on monotonous security tasks, which I estimate to be around 95%, enabling my team to focus on more strategic initiatives.
JaiBharath Boithi - PeerSpot reviewer
Data Scientist at a tech vendor with 51-200 employees
Aug 19, 2026
Splunk SOAR has significantly improved our ability to investigate and remediate threats by centralizing alerts and automating responsive workflows.
 

Splunk SOAR Cons review quotes

Vikash Kushwaha - PeerSpot reviewer
Full-Stack Software Engineer at mindpathtech
Aug 10, 2026
The installation of Splunk SOAR is complex, requiring integration with various tools such as CloudWatch, antivirus, and EC2 machines, making it difficult.
Sydney D'Souza - PeerSpot reviewer
Security Consultant at SoftwareONE
Jul 17, 2026
When it comes to Splunk SOAR, in terms of improvement, I feel there should be some pre-deployed solutions available.
reviewer2747643 - PeerSpot reviewer
Security manager at a manufacturing company with 1,001-5,000 employees
Nov 11, 2025
One thing that we would like to see with Splunk SOAR is the expandability to the threat intelligence feed.
Learn what your peers think about Splunk SOAR. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
920,769 professionals have used our research since 2012.
MohitGupta2 - PeerSpot reviewer
Chief Information Security Officer Teleperformance India And Global Business Services at a financial services firm with 10,001+ employees
Aug 12, 2026
The primary concern with Splunk SOAR is the learning curve and coding expertise required.
Abhishek Nayak - PeerSpot reviewer
Soc L1 Engineer at Softcell Technologies Limited
Jun 23, 2026
I have found a challenge in my three months with Splunk SOAR in that it is quite a heavy tool to maintain.
Vaibhav Mahendra Kolhe - PeerSpot reviewer
Soc Analyst at Softcell Technologies Limited
Jun 2, 2026
The price of Splunk SOAR is high. From a price perspective, the cost for an organization is very high.
Jabez Daniel - PeerSpot reviewer
Advance Data Engineer(Cyber Security) at Novo Nordisk
Jan 19, 2026
I'd rate Splunk's technical support around five because compared to IBM QRadar, their support is much better. I feel Splunk should enhance their support, as it appears lacking, especially considering the costs associated with higher licenses.
reviewer2890704 - PeerSpot reviewer
Engineer at a tech vendor with 10,001+ employees
Aug 20, 2026
A pain point is that you cannot debug from the console or widget within the playbook itself.
SN
Identity and Access Management Specialist at a university with 10,001+ employees
Feb 22, 2026
While I appreciate Splunk SOAR, there are areas for improvement, notably regarding the CI/CD pipeline for playbook lifecycle management, as transitioning playbooks from development to production currently feels cumbersome and requires more manual effort than I would prefer.
JaiBharath Boithi - PeerSpot reviewer
Data Scientist at a tech vendor with 51-200 employees
Aug 19, 2026
I would like to see easier playbook development, better troubleshooting, debugging, and more intuitive improved integrations and documentation, which would also make automation easier to maintain.