Cisco Splunk SOAR
commercialThe section your link pointed to isn't on Cisco Splunk SOAR's page any more, so we've brought you to the top.
Summary
Cisco Splunk SOAR is a commercial security orchestration, automation, and response platform that connects an organization's existing security tools so alerts can be triaged and acted on automatically rather than by hand. It runs as a downloadable package installed alongside a Splunk environment, or as a native capability inside Splunk Enterprise Security, and is built for SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. analysts and incident responders who need to cut the time between an alert and a response. It works by orchestrating playbooks across more than 300 third-party tools and thousands of predefined actions, drawing on MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. and D3FEND-aligned templates rather than requiring teams to write automations from scratch. Its category, SOAR, is a defined space alongside SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. and log management tools, which Splunk SOAR is designed to sit beside and reinforce. Cisco has run the product since its 2003 launch, and it continues under active vendor development.
How Cisco Splunk SOAR helps
Which of this week's alerts actually need an analyst's attention right now?
consolidates alerts and data pulled from the connected tools into one queue and applies playbooks to triage and prioritize them, so timely items surface instead of sitting in each tool's own console
How do I stop doing the same containment steps by hand every time a known alert type fires?
maps the response to a prebuilt or customized playbook aligned to MITRE ATT&CK and D3FEND that executes the same actions across the relevant tools in seconds instead of a manual run-through
Can this alert be resolved using tools already in the stack, or does it need a new integration?
checks the alert against the library of 300+ connected third-party tools and 2,800+ predefined actions to see whether an existing connection already covers the response, before anything new is built
Which stages of an incident are still manual versus already automated?
breaks a use case into its foundational SOC tasks and shows which ones a prebuilt playbook already covers end-to-end versus which steps still require an analyst
Is the alert-to-response gap in the SOC actually shrinking?
runs playbooks as the layer between the SIEM's detections and the analyst's action, so the time between an alert firing and a resolved action reflects the automated path rather than a manual handoff
Release-note detail over time
See how much detail Cisco Splunk SOAR puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.
Checking release-note history…
Commercials
pricing & packaging history · Cisco vendor page63 readings of Cisco's pricing page since Jun 2022, with 39 relaunches of its plan lineup and 3 changes to what its plans include — each one dated, compared with the reading before it, and explained for someone buying the tool.
Pricing and packaging history is included with Researcher and Business. See how every vendor we track sells, and how that has changed over time, using data we don't publish anywhere else.
See plans → Already subscribed? Sign in →Plans by offering
Each offering on the pricing page links to its own page of plans, read at its latest capture.
Plan relaunches
Plans, prices and descriptions are quoted from the vendor's own pricing page as we read it on each date. A plan missing from a later reading is shown as no longer listed on the page — a statement about the page, not the product. Readings that failed to show any plans are left out rather than read as a change.
Website history
snort.org, every changeCisco's home page and 23 more pages as they looked each month from August 2021 to October 2026: 35 renders, 0 changes of tagline or palette. Step through them, play them, or put any two months side by side.
Website history is included with Researcher and Business.
See plans → Already subscribed? Sign in →← → or h l a month · Shift a year · [ ] previous / next change · Space play · 1 2 3 page · T whole page · C compare · F full size
← → or h l the right month · Shift the left · S swap · W wipe · T whole page · Esc back
Rebranding timeline
Dates bound when a change appeared between captures. Possible rebrands are AI suggestions; a redesign alone does not establish a rebrand.
Releases
Nothing shipped since we started watching. Releases and docs updates land here as they happen.
Add the badge to your README
Maintain this project? The badge links readers straight to this page, so they can follow every release here.
Choose a badge style and copy the code →