SOAR (On-premises)

Automate, orchestrate, and accelerate threat response, reducing risk, saving analyst time, and boosting SOC efficiency with on-premise control.

Release Notes

View release notes and resources for Splunk SOAR (On-premises), including new features, compatability information, and known and fixed issues.

Use Splunk SOAR (On-premises)

Automate security orchestration and response with Splunk SOAR (On-premises) playbooks to streamline workflows, reduce manual tasks, and enhance threat management.

Build Playbooks

Create playbooks to automate analyst workflows, streamlining security operations and enhancing response efficiency.

Python Playbook API Reference

Access the Python automation API reference for Splunk SOAR (On-premises) to streamline security workflows and enhance automation.

REST API Reference

Query data, update records, perform bulk operations, and retrieve system information with the Splunk SOAR (On-premises) REST API.

Develop Apps

Streamline security automation and develop apps and playbooks for Splunk SOAR (Cloud) using the Visual Playbook Editor, REST API, and Python Playbook API.

Python Playbook Tutorial

Follow a Python tutorial to build and automate security workflows with Splunk SOAR (On-premises).