Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Splunk SOAR by Splunk View product | TheHive by StrangeBee View product |
|---|---|---|
| Overview | ||
| What it is | Splunk SOAR from Splunk focuses on security orchestration. Key capabilities: case management and automated containment. Compare it with the leading SOAR alternatives. | TheHive by StrangeBee: alert triage and audit trails. Ideal for alert investigation. Deployment: self-hosted. See how it compares with top Incident Response alternatives. |
| Product type | Security Orchestration, Automation & Response | Open-Source Security Incident Response Platform |
| Best for | Cross-industry, Enterprise SOC, Managed Detection Providers | Cross-industry, SOCs, CERTs, Enterprise IT |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | On-Premise |
| Deployment details | Cloud; On-premises; Cloud-hosted SaaS; On-premises virtual appliance | Self-hosted; Docker; Linux; Docker Compose; Debian/Ubuntu Packages; Kubernetes |
| Data residency | Global; US; EU; APAC | Self-Hosted / On-Premises |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Enterprise SOCSecurity Workflows | Docker ContainersKubernetesOn-Premises Linux |
| Compliance | SOC 2ISO 27001GDPRHIPAA | Open Source (AGPL-3.0) |
| Integrations & coverage | ||
| Integrations | Splunk ESCrowdStrikePalo AltoCheck PointServiceNowJira | CortexMISPSuricataElasticSplunkQRadar |
| Industries | Cross-industryEnterprise SOCManaged Detection Providers | Cross-industrySOCsCERTsEnterprise IT |
| Regions | Global | Global |
| Vendor | ||
| Company | Splunk | StrangeBee |
| Headquarters | San Francisco, California, USA | Paris, France |
| Company size | 8,000+ | 51-200 |
| Founded | 2003 | 2018 |
Overview
What it is
Splunk SOAR
Splunk SOAR from Splunk focuses on security orchestration. Key capabilities: case management and automated containment. Compare it with the leading SOAR alternatives.TheHive
TheHive by StrangeBee: alert triage and audit trails. Ideal for alert investigation. Deployment: self-hosted. See how it compares with top Incident Response alternatives.Product type
Splunk SOAR
Security Orchestration, Automation & ResponseTheHive
Open-Source Security Incident Response PlatformBest for
Splunk SOAR
Cross-industry, Enterprise SOC, Managed Detection ProvidersTheHive
Cross-industry, SOCs, CERTs, Enterprise ITPricing
Pricing model
Splunk SOAR
Contact VendorTheHive
Contact VendorFree trial
Splunk SOAR
Free trial: yesTheHive
Free trial: yesDeployment
Deployment options
Splunk SOAR
SaaSCloudOn-Premise
TheHive
On-Premise
Deployment details
Splunk SOAR
Cloud; On-premises; Cloud-hosted SaaS; On-premises virtual applianceTheHive
Self-hosted; Docker; Linux; Docker Compose; Debian/Ubuntu Packages; KubernetesData residency
Splunk SOAR
Global; US; EU; APACTheHive
Self-Hosted / On-PremisesKey features
What it offers
Splunk SOAR
- Security orchestration
- 300+ pre-built integration apps
- Visual playbook editor
- Automated containment
- Case management
- Automated response playbooks
- Rapid threat containment
TheHive
- Collaborative incident response
- Alert triage
- Observable analysis
- MISP synchronization
- Task assignment
- Audit trails
- Security incident tracking
- Alert investigation
Platform & access
API access
Splunk SOAR
API access: yesTheHive
API access: yesSingle sign-on (SSO)
Splunk SOAR
SSO: yesTheHive
SSO: yesRole-based access (RBAC)
Splunk SOAR
RBAC: yesTheHive
RBAC: yesMulti-tenant
Splunk SOAR
Multi-tenant: yesTheHive
Multi-tenant: yesMobile app
Splunk SOAR
Mobile app: noTheHive
Mobile app: noSupported platforms
Splunk SOAR
Enterprise SOCSecurity Workflows
TheHive
Docker ContainersKubernetesOn-Premises Linux
Compliance
Splunk SOAR
SOC 2ISO 27001GDPRHIPAA
TheHive
Open Source (AGPL-3.0)
Integrations & coverage
Integrations
Splunk SOAR
Splunk ESCrowdStrikePalo AltoCheck PointServiceNowJira
TheHive
CortexMISPSuricataElasticSplunkQRadar
Industries
Splunk SOAR
Cross-industryEnterprise SOCManaged Detection Providers
TheHive
Cross-industrySOCsCERTsEnterprise IT
Regions
Splunk SOAR
Global
TheHive
Global
Vendor
Company
Splunk SOAR
SplunkTheHive
StrangeBeeHeadquarters
Splunk SOAR
San Francisco, California, USATheHive
Paris, FranceCompany size
Splunk SOAR
8,000+TheHive
51-200Founded
Splunk SOAR
2003TheHive
2018