Splunk SOAR vs Tines comparison

Splunk and Tines are both solutions in the Security Orchestration Automation and Response (SOAR) category. Splunk is ranked #3 with an average rating of 8.4, while Tines is ranked #11 with an average rating of 9.0. Splunk holds a 7.6% mindshare in SOAR, compared to Tines’s 7.1% mindshare. Additionally, 87% of Splunk users are willing to recommend the solution, compared to 100% of Tines users who would recommend it.

Splunk SOAR

Read 50 Splunk SOAR reviews

4,447 Views
3,380 Comparison Views

87% willing to recommend

Tines

Read 4 Tines reviews

2,364 Views
2,009 Comparison Views

100% willing to recommend

Splunk SOAR

Tines

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 15, 2025

Splunk SOAR and Tines are both prominent players in the SOAR space. Splunk SOAR has the upper hand with its extensive integration capabilities, although Tines is noteworthy for its simplicity in automation.

Features: Splunk SOAR offers powerful data analytics, extensive integration with IT systems, and robust incident response capabilities. It includes advanced user entity and behavioral analytics (UEBA) based on AI and machine learning. Meanwhile, Tines is characterized by its streamlined automation processes, low-code environment, and intuitive interface for building and customizing workflows with ease.

Room for Improvement: Splunk SOAR could benefit from simplifying its deployment process and further enhancing user-friendliness. Additionally, it may consider expanding its pre-built automation solutions for quicker adoption. Tines, on the other hand, could expand its integrations with additional third-party tools, offer improved documentation for advanced features, and enhance its analytics capabilities to compete with more established solutions.

Ease of Deployment and Customer Service: Splunk SOAR requires technical expertise for its complex deployment process but boasts excellent technical support for its users. Tines, in contrast, offers a straightforward setup, making it ideal for smaller teams. Its customer service is focused on fast and efficient support, meeting the needs of its user base effectively.

Pricing and ROI: Splunk SOAR tends to have a higher setup cost due to its extensive features, providing strong ROI for larger organizations that require comprehensive solutions. Tines, with its lower cost, offers a quick deployment leading to faster ROI, appealing to smaller enterprises looking for efficient incident automation without a hefty initial investment.

To learn more, read our detailed Splunk SOAR vs. Tines Report (Updated: September 2025).

Buyer's Guide

Splunk SOAR vs. Tines

September 2025

Download the complete report

Helped 872,922 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Splunk SOAR

Ranking in Security Orchestration Automation and Response (SOAR)

3rd

Average Rating

8.2

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Tines

Ranking in Security Orchestration Automation and Response (SOAR)

11th

Average Rating

9.0

Reviews Sentiment

7.6

Number of Reviews

Ranking in other categories

Threat Intelligence Platforms (TIP) (18th), AI-Powered Security Automation (1st)

Mindshare comparison

As of November 2025, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of Splunk SOAR is 7.6%, down from 7.7% compared to the previous year. The mindshare of Tines is 7.1%, up from 4.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Orchestration Automation and Response (SOAR) Market Share Distribution
Product	Market Share (%)
Splunk SOAR	7.6%
Tines	7.1%
Other	85.3%

Security Orchestration Automation and Response (SOAR)

Featured Reviews

Hamada Elewa

System Engineer - Security Presales at Raya Integration

Creating automation workflows has reduced detection time but integration and visibility challenges remain

The visibility of Splunk SOAR's playbook viewer is rather unclear to me; I wonder what the visibility is for. There are indeed some problems with integrating Splunk SOAR with other Splunk products or other vendors in my system, and it took a while after implementing Splunk SOAR to train my SOC team on how to use the playbooks. Splunk SOAR does not help me reduce my security event volume; in fact, it makes them massive. Splunk SOAR does not help me free up resources to work on other projects; they are not good in this regard. I have not seen time to value with Splunk SOAR; I am curious about what time to value means. I believe Splunk SOAR can be improved by adding more integrations and out-of-the-box integrations, and by increasing the number of admins that can access the solution simultaneously. I see the need to inject more AI in creating the playbooks. I think they can inject more threat intelligence into the solution.

Read full review

VikramSingh8

Security Delivery Manager at Accenture

Automation simplifies workflows with no code and excellent support

Reporting and dashboards could be more advanced for deeper analysis. Tines has its own dashboard, which displays information like how many stories have been created and how many automations have taken place. However, the reporting and dashboard are not advanced; they are quite basic, with fewer customizable options. The look and feel of the dashboard could be enhanced. Another area for improvement is in terms of documentation, as every tool and company has its own knowledge base.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The playbooks are valuable. They are the core component. Being able to implement and build a code process to work through and scale out what we want to do is valuable."

"Surprisingly, the mobile app is valuable because it is very convenient for our on-call analysts to respond and get alerted to security alerts and events wherever they are. We are able to harness the power of Splunk SOAR and everything that we are doing, and we are also able to alert our on-call analysts 24/7. From their mobile phone, they can respond to those alerts."

"The most valuable features of Splunk SOAR are the easy integration with other solutions, including other Splunk solutions. The most important playbooks we need on the market come already on the Frontend. However, nowadays, Splunk changed its name, it's not Frontend anymore, it's Splunk Store. This is a very strong point."

"The features of Splunk SOAR that I appreciate most are the integrations with all the other applications and tools."

"Technical support is helpful."

"The most valuable feature of Splunk SOAR that stands out is it has a great SOAR. The automation and orchestration module is highly mature. A lot of use cases are on user entity and behavioral analytics (UEBA), which is artificial intelligence and machine learning-based (AIML)."

"Splunk SOAR has made a huge impact across security operations and the business overall."

"I'm just a beginner on the solution and it's pretty easy for me to use."

More Splunk SOAR pros

"The best thing is that it's no code, so it doesn't require coding knowledge."

"One of the most valuable features is that it’s a low-code solution."

"The tool was vendor-neutral."

"The best advantage is the no-code automation, excellent customer support services, and ease of integration with other tools."

Cons

"It would be ideal for us if Splunk SOAR could integrate with Teams."

"Portability is one thing that is currently lacking. The open-source product that I evaluated had portability. It would require a lot of development effort, but it will save the cost of rewriting all the playbooks."

"Splunk's support for integration is subpar and has room for improvement."

"We want to see improvements made to the APIs such that we can connect to many different systems and data sources."

"Unfortunately, not all of our analysts are iPhone users or iOS users. The mobile app is only supported on iOS. Our analysts who have Android do not have that benefit. That would be a nice thing to have so that we can have it across the board and not just for iOS."

"The cost of Splunk SOAR has room for improvement."

"Splunk SOAR does not help me reduce my security event volume; in fact, it makes them massive."

"The number of playbooks on offer should be increased."

More Splunk SOAR cons

"They started implementing some AI, and their AI is isolated."

"Tines was a little bit more expensive than Torq."

"Maybe Tines can add more features and demonstrations, like videos on how to use the features within the tool."

"Reporting and dashboards could be more advanced for deeper analysis."

Pricing and Cost Advice

"Splunk SOAR is more expensive compared to other options for SOAR."

"We renewed it this year. This year was the first time there was a dramatic increase in the price. It was kind of non-negotiable. It was just a high increase. We had internal communications, and it was definitely a surprise to us. In a short time frame, we renewed it this year. Prices are going up everywhere, but they are not always justifiable, at least not to our eyes. The pricing this year was definitely a big shock."

"I don't know the exact price, but for my region, it is very expensive."

"When we first purchased our Splunk SOAR license, it was based on an event-count model. It was based on the number of events. I had strong opinions at the time that automation should not be stifled by the amount of automation you can accomplish, so the previous structure was not as beneficial for us. Later that year, we got told or saw at a conference that they announced user-based pricing. We are now in a renewal period, so we migrated to a user-based license model, which is more appropriate for us so that we no longer have to worry about stifling our automation based on the quantity."

"Splunk SOAR is an expensive solution for an organization of our size."

"Splunk SOAR is moderately priced, neither cheap nor overly expensive."

"The cost is high and the licensing is on an annual basis."

"The tool is not cheap."

More Splunk SOAR pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.

See recommendations

872,922 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Computer Software Company

11%

Manufacturing Company

University

Financial Services Firm

13%

Computer Software Company

Manufacturing Company

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	7
Large Enterprise	30

No data available

Questions from the Community

What do you like most about Splunk Phantom?

Splunk SOAR's quick response to incidents is the most valuable part.

See all answers

What is your experience regarding pricing and costs for Splunk Phantom?

I don't have experience with costs; management handles that aspect.

See all answers

What needs improvement with Splunk Phantom?

I'm not an expert on Splunk SOAR, but I'm sure our team members know what areas could be improved. I haven't spoken to them specifically about what could be improved or what they would want Splunk ...

See all answers

What needs improvement with Tines?

See all answers

What is your primary use case for Tines?

I am Vikram Singh, I work for top service based multinational brand and I am responsible for delivering Tines services. Essentially, I am working on it, and I am leading one of the source services ...

See all answers

What advice do you have for others considering Tines?

When you start working with Tines, ensure you pursue the Tines certifications. They offer these free certifications when they become your partner. Overall, I would rate Tines a nine out of ten.

See all answers

Comparisons

Palo Alto Networks Cortex XSOAR vs Splunk SOAR

Compared 18% of the time

Fortinet FortiSOAR vs Splunk SOAR

Compared 11% of the time

ServiceNow Security Operations vs Splunk SOAR

Compared 10% of the time

Cortex XSIAM vs Splunk SOAR

Compared 9% of the time

Torq vs Splunk SOAR

Compared 7% of the time

More Splunk SOAR Competitors

Torq vs Tines

Compared 46% of the time

Blink Ops vs Tines

Compared 10% of the time

Palo Alto Networks Cortex XSOAR vs Tines

Compared 9% of the time

Swimlane vs Tines

Compared 9% of the time

ServiceNow Security Operations vs Tines

Compared 5% of the time

More Tines Competitors

Product Reports

Buyer's Guide

Splunk SOAR

October 2025

Download Splunk SOAR product report

Buyer's Guide

Security Orchestration Automation and Response (SOAR)

October 2025

Download Tines product report

Also Known As

Phantom

No data available

Overview

Splunk SOAR offers features like automation and orchestration of manual tasks, speeding up work, detection and response to advanced and emerging threats.

Go from overwhelmed to in-control

Automate manual tasks. Address every alert, every day. Establish repeatable procedures that allow security analysts to stop being reactive and focus on mission-critical objectives to protect your business.

Force multiply your team

Orchestrate and automate repetitive tasks, investigation and response to increase efficiency and productivity, and do more with the people you already have. Make a team of three feel like a team of 10.

From 30 minutes to 30 seconds

Work faster with Splunk SOAR. Respond to threats in seconds. Lower your mean time to respond (MTTR) by automating security tasks and workflows across all of your security tools.

End-to-end security operations made easy

Take advantage of Splunk Enterprise Security and Splunk SOAR joining forces to provide a seamless and intuitive SecOps platform to prevent, detect and respond to advanced and emerging threats.

Splunk

Tines offers no-code and low-code automation for users to automate tasks without coding expertise, integrating seamlessly with APIs to enhance incident management and security operations.

Known for a vendor-neutral approach, Tines provides detailed documentation and live chat support, allowing for effective integration with other tools, scheduling capabilities, and streamlined processes that save time and effort. Users find it intuitive for efficient task handling, making manual intervention unnecessary. Challenges include the need for more comprehensive documentation and instructional videos, as well as improvements in AI integration and reporting aesthetics. Pricing is also noted as higher compared to alternatives.

What are the most important features of Tines?

No-code and low-code automation: Enables task automation without coding knowledge.
API integration: Facilitates enhanced automation for security operations.
Vendor-neutral approach: Promotes unbiased integration across various tools.
Detailed documentation: Provides users with comprehensive guides and support.
Scheduling capabilities: Allows users to automate workflows efficiently.

What benefits and ROI can users expect from Tines?

Time savings: Automates tasks to reduce manual processes.
Improved efficiency: Streamlines security operations, enhancing productivity.
Comprehensive task handling: Offers intuitive tools for managing complex tasks easily.

Tines primarily serves organizations in the security sector, automating security operations such as alert detection and managed detection and response. It's utilized extensively in security operation centers for tasks like phishing email processing, ticket creation, IOC investigations, and ticket assignments within enterprise security frameworks, with multiple teams delivering Tines services to enhance task handling efficiency.

Tines

Sample Customers

Recorded Future, Blackstone

Information Not Available

Buyer's Guide

Splunk SOAR vs. Tines

September 2025

Free Report: Splunk SOAR vs. Tines

Find out what your peers are saying about Splunk SOAR vs. Tines and other solutions. Updated: September 2025.

DOWNLOAD NOW

872,922 professionals have used our research since 2012.

See our Splunk SOAR vs. Tines report.

See our list of best Security Orchestration Automation and Response (SOAR) vendors.

We monitor all Security Orchestration Automation and Response (SOAR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.