SOAR (security orchestration, automation and response) is a platform that connects a company's security tools and runs automatic responses to alerts. For example, if the SIEM detects a suspicious sign-in, SOAR can lock the account, isolate the device and open a ticket in seconds, without waiting for an analyst.
How TecnetOne handles it: TecnetSOC
security orchestration, security automation, automated response, playbooks