# Splunk SOAR: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 59 judge labels across 2 categories by 14 of 14 models. Page: https://www.gane.ai/index/it/vendors/splunk-soar

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [SOAR platforms](https://www.gane.ai/index/it/security/soar-platforms/index.md) | 4% | 6 | 35% | 57 |
| [AI SOC agents](https://www.gane.ai/index/it/security/ai-soc-agents/index.md) | 0% | 94 | 50% | 2 |

## What the models said for it

- "Palo Alto Networks Cortex XSOAR and Splunk SOAR are top recommendations" (Mistral Small, SOAR)
- "I recommend Splunk SOAR (formerly Phantom) as the top choice." (Grok 4.20, SOAR)
- "Choose Microsoft Sentinel or Splunk SOAR if your SIEM is already based in Azure/Sentinel or Splunk Enterprise Security." (Gemini 3.5 Flash, SOAR)
- "If you need a more traditional, full-featured enterprise platform, Cisco Secure SOAR (ex-Splunk) remains a robust choice." (Qwen 3.7 Flash, SOAR)

## And against it

- "Avoid for tight budgets: Enterprise-heavy tools like Palo Alto Cortex XSOAR, Splunk SOAR, or FortiSOAR" (Grok 4.20, SOAR)
- "Avoid for Mid-Sized B2B: ... Splunk SOAR – Similarly heavy on licensing and complexity" (DeepSeek V4 Flash, SOAR)
- "Avoid being swayed by the largest enterprise platforms (Splunk SOAR, IBM QRadar SOAR)" (DeepSeek V4 Flash, SOAR)
- "typically start at $10K–$100K+ per year, making them unsuitable for limited budgets" (DeepSeek V4 Flash, SOAR)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 2 | 1 | 0 | 3 |
| GPT-5.4 mini | 0 | 3 | 0 | 1 | 4 |
| Gemini 3.5 Flash | 0 | 1 | 1 | 2 | 4 |
| Perplexity Sonar | 0 | 1 | 1 | 2 | 4 |
| Grok 4.20 | 1 | 1 | 1 | 3 | 6 |
| Mistral Small | 1 | 1 | 2 | 1 | 5 |
| DeepSeek V4 Flash | 0 | 1 | 1 | 4 | 6 |
| Llama 4 Maverick | 0 | 2 | 1 | 1 | 4 |
| Qwen 3.7 Flash | 0 | 2 | 1 | 2 | 5 |
| Kimi K2 | 0 | 2 | 1 | 1 | 4 |
| GLM 4.7 FlashX | 0 | 2 | 0 | 2 | 4 |
| MiniMax M2.5 | 0 | 1 | 2 | 1 | 4 |
| GPT-6 Luna | 0 | 1 | 0 | 0 | 1 |
| Muse Glimmer 30B | 0 | 2 | 2 | 1 | 5 |

## Sources returned with these answers

The sites and pages cited by the answers that named Splunk SOAR, from 177 of the 197 answers that named it (only the models that return a source list).

### Domains cited

- aimultiple.com: 71
- csoonline.com: 71
- gane.ai/index: 53
- g2.com: 51
- softwareadvice.com: 48
- strike48.com: 45
- expertinsights.com: 42
- cloudsek.com: 38
- comparitech.com: 38
- peerspot.com: 36

### Pages cited

- https://aimultiple.com/top-soar-platforms: 71
- https://csoonline.com/article/3622920/soar-buyers-guide-11-security-orchestration-automation-and-response-products-and-how-to-choose.html: 71
- https://softwareadvice.com/soar: 45
- https://cloudsek.com/knowledge-base/best-soar-platforms: 37
- https://comparitech.com/net-admin/best-soar-software: 37
- https://ciopages.com/buyer-guides/security-orchestration-automation: 33
- https://expertinsights.com/network-security/the-top-soar-solutions: 32
- https://intezer.com/guides/soar-security/soar-platform-guide: 31

## In its own words

What Splunk SOAR's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: Vous pouvez éliminer les tâches fastidieuses des analystes, rationaliser vos opérations de sécurité et détecter, trier et prendre en charge les alertes plus rapidement que jamais. (https://www.splunk.com/fr_fr/form/5-automation-use-cases-for-splunk-soar.html)
- For: Le centre des opérations de sécurité (SOC), les analystes de niveau 1 et les professionnels de la cybersécurité (https://www.splunk.com/fr_fr/form/5-automation-use-cases-for-splunk-soar.html)
- Price stated: Téléchargez votre exemplaire gratuit (https://www.splunk.com/fr_fr/form/5-automation-use-cases-for-splunk-soar.html)
- Free plan or trial: Essai gratuit (https://www.splunk.com/fr_fr/products/splunk-security-orchestration-and-automation.html)
- Integrations claimed: 300 (https://www.splunk.com/fr_fr/products/splunk-security-orchestration-and-automation.html)
- Customers named: Tide, Novuna

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.