SOAR No Longer Stands On Its Own
Businesses are thrilled by the idea of SOAR (security orchestration, automation and response), which allows them to address all of the alerts they're receiving without manual action, according to Stu Solomon, chief strategy and development officer at Recorded Future.
As customers increasing expect the alerts generated by a vendor's product to the actionable, Solomon said suppliers have either gone the route of Splunk and Palo Alto Networks and acquired leading standalone SOAR providers or organically developed SOAR-type capabilities on their own embedded it into their own tools like Symantec or Exabeam.
SOAR providers are increasingly showing that they don't operate in isolation, and can attach and be part of a broader ecosystem, Solomon said. And from a pricing perspective, Solomon said SOAR providers are evolving beyond an expense model that makes sense for a large enterprise to make their capabilities more accessible.