No more typing reviews! Try our Samantha, our new voice AI agent.

Cisco SecureX [EOL] vs Splunk SOAR comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco SecureX [EOL]
Average Rating
9.0
Reviews Sentiment
8.2
Number of Reviews
13
Ranking in other categories
No ranking in other categories
Splunk SOAR
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
57
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (2nd)
 

Featured Reviews

Dene Lewis - PeerSpot reviewer
Head of Technical Strategy and Direction CAE Technology Services Ltd at CAE Technology Services Limited
A scalable SaaS based platform that helps with cyber threat intelligence and automated hunting
I would rate Cisco SecureX a ten out of ten. I find the product to be a fantastic platform. If you are eligible, start using it straight away. The best way to evaluate it is to start using it and see where it fits within your organization. I think it helps our customers really deliver their SecOps goals, and I see it as a core foundation of CAE's own security strategy going forward. Our partnership with Cisco is one that was built on trust over a long period of time. This has enabled us to work together to be able to provide the solutions that our customers need to drive their organizations forward. The value we add as a reseller is being able to work closer with our customers, understand them, and get intimate with their organizations. That enables us to offer them the right solutions that will help them achieve their goals.
SS
Manager cybersecurity at Hexion Inc.
Automates threat response and reduces investigation time but needs better threat intelligence integration
One thing that we would like to see with Splunk SOAR is the expandability to the threat intelligence feed. Currently, we have limited ingestion to the threat intelligence feed for the correlation purpose. We would like to see it being integrated, with license cost or without license cost, to leading threat intelligence sources such as Recorded Future, Feedly, or Flare. That is something we would appreciate having integrated. The second thing on the improvement side is about exposed credential-related information. If we start ingesting those data to Splunk SOAR or SIEM with some sort of integration with threat intelligence feed, that will also improve our detection and prediction method or help us with the investigation.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One of the most valuable features is the simplicity of deploying SecureX. It's very easy to do that and then you gain very detailed visibility into everything that's going on in your network and, obviously, at the device level. There's just a wealth of information that you can pull from all of these products that are part of SecureX. You know exactly if you have an issue or not."
"I like that I don't have to jump around to five different products and log into five different places to view the data that it returns."
"If management wants to ingest reports at a high level from all of the different products, they would only need one login to SecureX to view this information as opposed to separate logins for each of the integrated products."
"Using SecureX, we can aggregate the data from all our security products, automate many of our tasks that we had to do manually before, save a huge amount of time, and provide many reports about usage of our systems and networks to our leaders and managers to show what we can do to make our security better."
"Using SecureX, a tool provided by Cisco, we can easily integrate it with many of our other Cisco products such as Cisco ISE and many networking devices."
"SecureX has been keeping our devices safe during the pandemic and we haven't had any major threats that have come in or that have been found on our devices."
"This solution definitely helps us meet our cyber security goals and we haven't had any problems so far."
"The ability to create firewalls online has been most valuable including the ability to create rules."
"In terms of time savings in threat responses, as a team, we save more than 30%, estimated around 30-40%."
"The best feature is the integration and the custom Python code that we can write. Splunk SOAR provides us with both of these capabilities, allowing us to integrate different security solutions with Splunk SOAR and take remediation actions directly on those security tools."
"Splunk SOAR is really saving my time."
"Splunk SOAR saves time in threat response, and the time to solve an incident is currently the best in the market."
"The most valuable feature of Splunk SOAR that stands out is it has a great SOAR, the automation and orchestration module is highly mature, and a lot of use cases are on user entity and behavioral analytics (UEBA), which is artificial intelligence and machine learning-based (AIML)."
"It's pretty easy when it comes to setting up assets. If you want to fetch emails or call a REST API, you can set up an asset and grab that information."
"Compared to other products, Phantom seems to be easy to use and the ability to customize is high."
"We are not a 24/7 SOC, so the most valuable feature of Splunk SOAR is the auto-response to threats when we are not in the office and the notifications that it sends to the on-call engineer."
 

Cons

"For us, the biggest sticking point is that the product is not being designed for multi-tenancy use at present, from an MSP perspective."
"The automation and orchestration could be simpler. It could be that all the other parts are that easy to use so that these stick out as a negative, but that's the trickiest part for us. The workflows within the orchestration are just a bit more difficult."
"Sometimes it's a little slow so that is also something Cisco should check."
"I would rate this solution 7 out of 10. It's a great idea if it worked consistently, but it has to be way more mature than when I used it."
"The playbooks provided with the product are great, although I would appreciate having more playbooks available. Threats are constantly evolving, so having access to updated playbooks is crucial."
"They could put in more third-party integrations, but also more playbooks out-of-the-box for automation would be helpful."
"I would like it to integrate with another solution, e.g., DNA. I would like it to connect to that solution, but not the security aspect."
"Remediation stuff could be integrated into the product's automation."
"The solution must provide more AIOps to improve predictability."
"Splunk SOAR does not help me reduce my security event volume; in fact, it makes them massive."
"It currently lacks simulation features, which are important for me for creating a playbook."
"Splunk SOAR should improve its ease of upgrade, which is a pain point for us right now."
"Overall, this product is fairly good but it's not quite mature yet. It needs some enhancement and some stabilization in some areas."
"The number of playbooks on offer should be increased."
"There are areas in Splunk SOAR that have room for improvement. To make Splunk SOAR a better solution, there could be better built-in debugging tools, smarter playbook suggestions, and enhanced lifecycle management."
"It would be ideal if we could automate processes even more."
 

Pricing and Cost Advice

"It comes free with all Cisco products. So, it is a good price."
"The pricing is the best part of this solution. It is free if you buy Umbrella or Duo Security. It is also a good solution."
"The product is absolutely free to any customer. As such, the only thing one must keep in mind is that as long as he already has one Cisco security product, irregardless of what that product is, SecureX is available for free."
"For the value you get, the pricing of the solution is excellent."
"You can spend less money for another solution, but if you really want to have a good solution you have to pay. We are happy that we are getting such a good solution for what we are spending."
"It is free. It can't get any better than that."
"It would be nice if they had a different pricing model. Most of our budget for projects goes towards Cisco."
"The pricing is competitive, especially for education institutions. Licensing can be a little bit difficult to navigate, especially with resellers with Cisco, but for us it has been pretty easy."
"While I can't confirm the exact pricing, some colleagues have mentioned that Splunk SOAR may be on the costlier side."
"We renewed it this year. This year was the first time there was a dramatic increase in the price. It was kind of non-negotiable. It was just a high increase. We had internal communications, and it was definitely a surprise to us. In a short time frame, we renewed it this year. Prices are going up everywhere, but they are not always justifiable, at least not to our eyes. The pricing this year was definitely a big shock."
"I found the price of Splunk SOAR to be good."
"The licensing cost is reasonable."
"Splunk SOAR is more expensive compared to other options for SOAR."
"The tool is not cheap."
"Splunk SOAR is moderately priced, neither cheap nor overly expensive."
"It's very overpriced because it is based on the number of users. There is no bulk licensing."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
885,376 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Marketing Services Firm
12%
Government
9%
Outsourcing Company
8%
Financial Services Firm
11%
Manufacturing Company
11%
Computer Software Company
8%
University
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise7
Large Enterprise3
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise8
Large Enterprise36
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for Splunk Phantom?
I am familiar with the pricing aspect, setup cost, and licensing cost of Splunk SOAR, and it is pretty much similar to what industries are offering these days. We never had any issue when we had to...
What needs improvement with Splunk Phantom?
While I appreciate Splunk SOAR, there are areas for improvement, notably regarding the CI/CD pipeline for playbook lifecycle management, as transitioning playbooks from development to production cu...
What is your primary use case for Splunk Phantom?
I have been working with Splunk SOAR for about two years now, and it started out of necessity as my team was primarily using Splunk for centralized logging, which became a bottleneck as we scaled t...
 

Also Known As

Kenna.AppSec, Kenna.VI
Phantom
 

Overview

 

Sample Customers

NHS, Rackspace, UNC Pembroke, University of North Carolina at Charlotte, Missing Piece
Recorded Future, Blackstone
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools. Updated: February 2026.
885,376 professionals have used our research since 2012.