SOAR
Security Orchestration, Automation, and ResponseDefinition
SOAR refers to technologies that enable organizations to collect security threat data, automate responses to low-level threats, and orchestrate complex incident response workflows.
Buyer context
SOAR can make response faster, but it does not decide by itself who owns the outcome. Buyers should ask which playbooks are included, which actions need approval, and whether automation is limited to enrichment and ticketing or includes containment steps.