SOAR (Security Orchestration, Automation, and Response)
Also known as: Security Orchestration Automation and Response, Security Automation
Security tooling that coordinates systems and automates repeatable response work through controlled playbooks and integrations.
Security Orchestration, Automation, and Response connects security tools and repeatable procedures so a team can enrich alerts, create cases, notify people, gather evidence, and take approved response actions consistently. Automation should not remove governance. Buyers should verify which integrations and playbooks are included, which actions require approval, how failures are handled, and what evidence is retained after a workflow runs.