SOAR and security automation
Workflow and playbook engines that automate security operations tasks across tools.
16 vendors · alphabetical
- CyberKordCyberKord sells a service that answers security alerts day and night, without waiting for a person.Ownership not established
- CywareCyware sells an AI-powered threat intelligence platform that combines AI agents and collective defense networks to help security teams act on the threat intelligence relevant to them.Ownership not established
- D3 SecurityD3 Security sells Morpheus, an agentic SOC platform.Privately held · primary category
- DevoDevo sells a security data platform that replaces traditional SIEMs and includes data-powered SIEM, SOAR and UEBA.Privately held
- ElasticElastic sells Elastic Security, an open, agentic security operations platform that offers SIEM, endpoint security, and native automation.Ownership not established
- Elbit SystemsElbit Systems is a global defense technology company that delivers solutions for a secure and safer world.Ownership not established
- GuardsixGuardsix is a European security company that sells a sovereign security platform for lean defenders, with products for SIEM, NDR, SOAR, fleet management and access governance.Owned by Summa Equity since 2023
- GuruculGurucul sells unified Entity Intelligence, which fuses Behavioral AI with traditional detections across humans, machines and AI systems.Ownership not established
- Mate SecurityMate Security is a cybersecurity company that provides an AI-powered Security Operations Center (SOC) platform to help security teams investigate, manage and respond to cyber threats.Ownership not established
- ReliaQuestReliaQuest sells GreyMatter, an agentic AI security operations platform that allows security teams to detect, contain, investigate and respond to threats, regardless of the data source.Ownership not established
- SecuronixSecuronix sells Unified Defense SIEM, which it describes as a connected operating model for modern SecOps for enterprises.Ownership not established
- SplunkSplunk sells a data platform for security, observability, and AI, and says the platform unifies petabyte-scale machine data wherever it lives.Owned by Cisco
- SwimlaneSwimlane sells an agentic AI automation platform that puts AI agents to work across the SOC, from customer-defined detections to fully agentic investigations.Privately held · primary category
- TinesTines is an environment for turning ideas into software that a business can build, deploy and operationalize.Privately held · primary category
- TorqTorq sells the Torq AI SOC Platform, which turns alerts into action across a security stack.Privately held
- UnderDefenseUnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents.Ownership not established