# What is SOAR?

SOAR (Security Orchestration, Automation and Response) is software that connects security tools and automates the routine steps of handling an alert: collecting context, opening a ticket, isolating a laptop, blocking an address, informing the right person. It is built around playbooks, written sequences of steps for each kind of incident. SOAR is valuable for teams that handle many alerts a day, and needs work to set up and maintain. Small teams often get most of the benefit from simpler connections. NetSenX sends alerts to Slack or a webhook from the Pro plan, and exports to a SIEM from the Business plan.

FAQ: [What is…? Network and security terms](https://netsenx.com/en/faq/glossary) · https://netsenx.com/en/faq/what-is-soar

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/problems-we-solve

## Related questions

- [What is DLP (data loss prevention)?](https://netsenx.com/en/faq/what-is-dlp-data-loss-prevention)
- [What is an audit log?](https://netsenx.com/en/faq/what-is-an-audit-log)
- [What is dwell time in cybersecurity?](https://netsenx.com/en/faq/what-is-dwell-time)
- [What are MTTD and MTTR?](https://netsenx.com/en/faq/what-are-mttd-and-mttr)
- [What is shadow IT?](https://netsenx.com/en/faq/what-is-shadow-it)