Cybersecurity definition
What is SOAR?
SOAR stands for Security Orchestration, Automation and Response.
By Cyber Tool Stack Editorial TeamUpdated
Definition
Software that automates the repetitive steps of responding to a security alert — pulling context from other tools, opening a case, taking containment action — via predefined playbooks, freeing analysts to focus on judgment calls a machine can't make.
Related cybersecurity terms
SIEMSecurity Information and Event ManagementA central system that collects logs from across an environment, correlates them into alerts using detection rules and behavioral baselining, and lets analysts search historical activity during an investigation.SOCSecurity Operations CenterThe team (in-house or vendor-run) responsible for monitoring security alerts around the clock and responding when something looks like a real incident.