Open Source Alternatives to Splunk SOAR

A security orchestration, automation, and response platform that automates repetitive security tasks and coordinates responses across a security stack. It provides playbook automation to standardize incident response processes and integrates with various security tools to reduce mean time to respond. The software is designed for security operations center teams to manage alerts and mitigate threats through automated workflows. It enables the coordination of disparate security tools into a single cohesive system to improve operational efficiency. The platform allows users to create complex automation scripts that trigger based on specific security events to ensure consistent handling of threats. It is deployed as part of the Splunk security portfolio to provide visibility and control over the security environment.

Whether you want to cut software costs or escape vendor lock-in, these open source alternatives to Splunk SOAR give you an option you fully own. You can self-host them, so your data stays on infrastructure you control. This page lists 1 open source alternative to Splunk SOAR. The most popular is Tracecat. It uses the AGPL-3.0 license and ships an official Docker image.