Acronym for Security Orchestration, Automation and Response—automating and coordinating security operations.
SOAR stands for Security Orchestration, Automation and Response. See 'Security Orchestration Automation and Response' for the full definition. SOAR capabilities are increasingly built into SIEM and XDR platforms rather than deployed as standalone products.
Why It Matters
The DSC Perspective:
SOAR enables smaller teams to handle enterprise-scale security operations. It's particularly valuable for MDR providers and organisations running their own SOC who need to respond quickly and consistently to threats.