Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Orchestration, Automation and Response.

SOAR: Transforming Security and IT

When people hear “SOAR,” they often think of Security, Orchestration, Automation and Response, a powerful solution for streamlining security operations. But SOAR’s capabilities don’t stop there. By driving efficiency and automation in IT operations, infrastructure management and cloud optimization, SOAR empowers teams across the organization to work smarter and respond faster.

How to Turn a SOAR Migration into SOC Transformation

SOAR is dead-dead (too inflexible, too complex, and too limited on integrations) — but it’s not quite buried in some SOCs where it’s only hanging on because migrating can feel daunting when mission-critical workflows are tied to the system. AI-driven Hyperautomation from Torq is the SOAR killer. Our team has helped major enterprises from every industry make the switch, quickly and easily, to achieve true SOC transformation. We chatted with Mark Carosella, Sr.

Elastic and Tines team up to offer SOAR and AIOps

Automate your security and observability workflows with Tines Workflow Automation, now available directly from Elastic Elastic and Tines are unveiling an integrated product offering to transform the crucial work of security and observability teams. We’re excited to introduce Tines Workflow Automation, available directly through Elastic.

"SOAR isn't obsolete, it's just maturing": Tracking SOAR's AI evolution with Tines and GigaOm

In a recent webinar on SOAR’s evolving role in security and beyond, I chatted with Andrew Green, Networking & Security Research Analyst at GigaOm. We kicked things off with a brief discussion on Gartner’s Hype Cycle for ITSM report, which described the SOAR category as “obsolete” and prompted some commenters to declare that SOAR is “dead”.

SOAR into 2025: SOAR's evolving role in security and beyond

Security Orchestration, Automation, and Response (SOAR) is rapidly evolving to meet the demands of modern security teams. As organizations face increasing threats and complexity, choosing the right SOAR solution has never been more critical. Join Matt Muller, Field CISO at Tines, and Andrew Green, Networking & Security Research Analyst at GigaOm, for an in-depth discussion on the state of the SOAR market and what’s next for security automation.

5 reasons why security teams migrate to a new SOAR platform

The demands on security teams have never been greater and practitioners need tools that can keep pace with evolving threats. Yet, many are still tied to legacy SOAR platforms whose limitations - outdated integration methods, clunky usability, and lengthy deployment timelines - hold teams back from achieving their automation goals. Recognizing when it’s time to pivot is critical. For many teams, next-gen SOAR platforms can also fall short.

Unify and Automate TDIR Workflows with Splunk SOAR 6.3 and Splunk Enterprise Security 8.0

Security teams are juggling 25+ different security tools that perform different actions across detection, investigation and response. Look up an IP here, send malware to a sandbox there, block an executable over there. What’s worse is that the vast majority of those actions are being performed manually. This approach is simply too slow against fast-moving attackers and malware, and it certainly isn’t sustainable.

SOAR in Seconds - Playbook Building with Natively Integrated SIEM and SOAR

In Splunk SOAR 6.3, SOAR features now come fully integrated with Splunk Enterprise Security 8.0. In this demo, see how to easily create a Splunk SOAR playbook in the context of your SIEM workflows. Playbooks and actions are now directly integrated within the Splunk Enterprise Security analyst queue. You can run playbooks and see the results without leaving the Splunk Enterprise Security interface. Both a Splunk SOAR and Splunk Enterprise Security license is required.