Security Orchestration, Automation, and Response (SOAR) is a stack of compatible software programs that enables an organization to collect data about security threats and respond to security events without human intervention. The goal of using a SOAR platform is to improve the efficiency of physical and digital security operations.
Security Orchestration
Security orchestration connects and integrates different internal and external tools through built-in or custom integrations and application programming interfaces (APIs). Connected systems may include vulnerability scanners, endpoint protection products, end-user behavior analytics, firewalls, intrusion detection, and intrusion prevention systems, and security event and incident management (SEIM) platforms, as well as external threat intelligence feeds.
