+1 coinfor reading to the end
+1
Home / Glossary / SOAR
Glossary · Security

SOAR

Security Orchestration, Automation, Response

In plain language

Software that automatically carries out the first response steps when a security alert fires.

The metaphor

Like an alarm that also locks the doors and dials the guard by itself.

Going deeper

How it works

  • It receives alerts from other tools.
  • It follows a script: check, isolate, notify.
  • It saves time on repeat events.
  • Mostly used by large teams and security providers.
In practice
  • A security provider has a script that isolates a flagged laptop.
  • A larger company automates the first steps after a phishing report.
  • An IT provider links alerts to tickets.

A question owners ask

Is it something I buy?

Rarely. If your security provider uses it, the benefit shows up as faster response.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →