SOAR solutions are steadily gaining traction in real-world use to improve security operations. Security and risk management leaders should evaluate how these solutions can support and optimize their broader security operations capabilities.
Download this whitepaper to read more about some of the key findings:
- Large security teams with well-established and tested processes to automate are still the main buyers and continue to buy security orchestration, automation and response, primarily for general productivity, efficiency and consistency improvements in their security operations centers;
- Orchestration and automation, basic incident/case management, and operationalizing threat intelligence are "table stakes" for SOAR tools;
- SOAR is also becoming ubiquitous in managed security and managed detection and response services by helping providers improve client interactions, speed and consistency when detecting and responding to threats;
- SOAR tools are still primarily leveraged by organizations with a security operations center.