SOAR and security automation
Workflow and playbook engines that automate security operations tasks across tools.
8 vendors · alphabetical, never ranked
- CywareCyware sells a platform that enriches, correlates and operationalizes threat intelligence across security tools and teams, and automates related response workflows.Ownership not established
- DevoDevo sells a security data platform that ingests and stores large volumes of security telemetry and orchestrates which data is kept hot for real-time analytics, with integrated SIEM, SOAR and UEBA.Privately held
- GuardsixLogpoint rebranded as Guardsix in March 2026.Owned by Summa Equity since 2023
- SecuronixSecuronix sells Unified Defense SIEM, a cloud-native platform that combines security information and event management with user and entity behavior analytics, SOAR and threat intelligence, along with an AI agent called Sam that helps triage alerts.Ownership not established
- SplunkSplunk sells a platform that collects and correlates machine data for security and IT operations, including a security information and event management product and a security orchestration and automation product.Owned by Cisco
- SwimlaneSwimlane sells Turbine, an agentic AI automation platform that combines AI with deterministic security automation to investigate alerts, orchestrate response, and automate vulnerability and compliance workflows.Privately held · primary category
- TinesTines sells a no-code workflow platform for building, running and monitoring security and IT automations, including a workflow builder, an AI copilot called Workbench, and case management.Privately held · primary category
- TorqTorq sells an AI SOC platform that combines agentic AI reasoning with automation to enrich, investigate and act on security alerts from initial triage through remediation.Privately held
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.