What is SOAR?

SOAR (Security Orchestration, Automation and Response) is software that connects security tools and automates the routine steps of handling an alert: collecting context, opening a ticket, isolating a laptop, blocking an address, informing the right person. It is built around playbooks, written sequences of steps for each kind of incident. SOAR is valuable for teams that handle many alerts a day, and needs work to set up and maintain. Small teams often get most of the benefit from simpler connections. NetSenX sends alerts to Slack or a webhook from the Pro plan, and exports to a SIEMSIEM: security information and event management. A system that collects logs from many systems and looks for patterns across them. from the Business plan.

← All 69 questions on What is…? Network and security termsAll topics