Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Orchestration, Automation and Response.

SOAR on Azure Now Available

The market-leading momentum of our partnership and ongoing engineering roadmap with Microsoft continues! Splunk Security Orchestration, Automation and Response (SOAR) is now available as a native SaaS solution on Azure, enabling customers to even further improve their security posture and create greater digital resilience. Splunk SOAR on Azure acts as the efficiency engine for SOC analysts by connecting Azure services and third-party tools, automating workflows and tasks, and speeding response times.

CrowdStrike Falcon Fusion SOAR Content Library

Security teams often lose valuable time pivoting between tools to contain threats. With CrowdStrike Falcon Fusion SOAR's content library, you can streamline incident response using no-code automation to quickly build workflows and a rich content library of orchestrate with third-party integrations and pre-built actions. In this demo, see how teams can quickly integrate with popular security and IT tools and run playbooks in just a few clicks—directly from the Workbench. No context switching. No manual effort.

SOAR: Transforming Security and IT

When people hear “SOAR,” they often think of Security, Orchestration, Automation and Response, a powerful solution for streamlining security operations. But SOAR’s capabilities don’t stop there. By driving efficiency and automation in IT operations, infrastructure management and cloud optimization, SOAR empowers teams across the organization to work smarter and respond faster.

How to Turn a SOAR Migration into SOC Transformation

SOAR is dead-dead (too inflexible, too complex, and too limited on integrations) — but it’s not quite buried in some SOCs where it’s only hanging on because migrating can feel daunting when mission-critical workflows are tied to the system. AI-driven Hyperautomation from Torq is the SOAR killer. Our team has helped major enterprises from every industry make the switch, quickly and easily, to achieve true SOC transformation. We chatted with Mark Carosella, Sr.

Elastic and Tines team up to offer SOAR and AIOps

Automate your security and observability workflows with Tines Workflow Automation, now available directly from Elastic Elastic and Tines are unveiling an integrated product offering to transform the crucial work of security and observability teams. We’re excited to introduce Tines Workflow Automation, available directly through Elastic.

"SOAR isn't obsolete, it's just maturing": Tracking SOAR's AI evolution with Tines and GigaOm

In a recent webinar on SOAR’s evolving role in security and beyond, I chatted with Andrew Green, Networking & Security Research Analyst at GigaOm. We kicked things off with a brief discussion on Gartner’s Hype Cycle for ITSM report, which described the SOAR category as “obsolete” and prompted some commenters to declare that SOAR is “dead”.

SOAR into 2025: SOAR's evolving role in security and beyond

Security Orchestration, Automation, and Response (SOAR) is rapidly evolving to meet the demands of modern security teams. As organizations face increasing threats and complexity, choosing the right SOAR solution has never been more critical. Join Matt Muller, Field CISO at Tines, and Andrew Green, Networking & Security Research Analyst at GigaOm, for an in-depth discussion on the state of the SOAR market and what’s next for security automation.

5 reasons why security teams migrate to a new SOAR platform

The demands on security teams have never been greater and practitioners need tools that can keep pace with evolving threats. Yet, many are still tied to legacy SOAR platforms whose limitations - outdated integration methods, clunky usability, and lengthy deployment timelines - hold teams back from achieving their automation goals. Recognizing when it’s time to pivot is critical. For many teams, next-gen SOAR platforms can also fall short.

Unify and Automate TDIR Workflows with Splunk SOAR 6.3 and Splunk Enterprise Security 8.0

Security teams are juggling 25+ different security tools that perform different actions across detection, investigation and response. Look up an IP here, send malware to a sandbox there, block an executable over there. What’s worse is that the vast majority of those actions are being performed manually. This approach is simply too slow against fast-moving attackers and malware, and it certainly isn’t sustainable.