Try our new research platform with insights from 80,000+ expert users

Splunk SOAR vs Swimlane comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 28, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Torq
Sponsored
Ranking in Security Orchestration Automation and Response (SOAR)
5th
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
6
Ranking in other categories
AI-SOC (3rd), AI-Powered Security Automation (2nd)
Splunk SOAR
Ranking in Security Orchestration Automation and Response (SOAR)
2nd
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
54
Ranking in other categories
No ranking in other categories
Swimlane
Ranking in Security Orchestration Automation and Response (SOAR)
10th
Average Rating
7.6
Reviews Sentiment
7.0
Number of Reviews
10
Ranking in other categories
AI-Powered Security Automation (3rd)
 

Mindshare comparison

As of March 2026, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of Torq is 4.2%, down from 5.1% compared to the previous year. The mindshare of Splunk SOAR is 8.0%, up from 7.3% compared to the previous year. The mindshare of Swimlane is 2.9%, down from 3.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Orchestration Automation and Response (SOAR) Market Share Distribution
ProductMarket Share (%)
Splunk SOAR8.0%
Torq4.2%
Swimlane2.9%
Other84.9%
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

Nimrod Vardi - PeerSpot reviewer
Global IT Director at OpenWeb
Automation workflows have transformed our IT, enabling secure just-in-time access control
We work with them quite often, so we have a direct line regarding areas in Torq that have room for improvement. If we have a feature request, we can request it. I do not have anything in mind at the moment. We were a design partner for a short while, so we feel that they listen and that users of the system have an impact on the way the system is designed for the better. They have a new community, which is something that I personally suggested years ago. There are many people like me in different places and they might have already built the workflow that I need. Having the option to share workflows or to jump on a thread and say I have this need, did anyone ever build a workflow for it, is amazing. Someone would jump in and say yes, sure, here, take this workflow. I think this is an amazing thing and I really hope that the community will come alive because I think this is really powerful. This is something that I already suggested and it did happen eventually, and I am quite happy with it. I do not have any specific feature in mind that I have a need for at the moment.
SS
Manager cybersecurity at Hexion Inc.
Automates threat response and reduces investigation time but needs better threat intelligence integration
One thing that we would like to see with Splunk SOAR is the expandability to the threat intelligence feed. Currently, we have limited ingestion to the threat intelligence feed for the correlation purpose. We would like to see it being integrated, with license cost or without license cost, to leading threat intelligence sources such as Recorded Future, Feedly, or Flare. That is something we would appreciate having integrated. The second thing on the improvement side is about exposed credential-related information. If we start ingesting those data to Splunk SOAR or SIEM with some sort of integration with threat intelligence feed, that will also improve our detection and prediction method or help us with the investigation.
MD
Software Engineer III at a financial services firm with 10,001+ employees
Task persistence and integration ease have been key benefits
The best part of Swimlane is the persistent notifications and its ease of integration, requiring minimal coding. While it lacks response features, it can be integrated with messaging or queue services to achieve this. Any incident response requires additional integration since Swimlane itself doesn't react to incidents. Real-time data in terms of persistence is configurable, and without config, tasks persist indefinitely until completion. If using Appian versions below 11, integration features for Swimlane aren't available. By default, Swimlane lacks built-in intelligence, needing coding for integration. Although the Swimlane is beneficial and reduces manpower requirements, it's hindered by its lack of exposure. If exposed through services or endpoints, its functionality could be accessed without needing a local standalone application. On a scale of one to ten, this solution deserves a rating of nine.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Using that one piece of AI, we auto-closed 511 cases in quarter four alone."
"If I review about 100 vendors that I might work with, Torq is definitely in the top five that gave me personally investment back, just because every bit of effort I put into Torq eventually became a workflow that gave it back to me."
"Any request that comes in, regardless of how complex it is, I can accomplish it with Torq."
"What I appreciate most about Torq is that it is an essential part of our system."
"As an analyst, it has demonstrated potential to reduce workforce requirements and time needed for related activities."
"Once I started to use the system and I saw the potential, it changed all of our work in IT."
"The automation part of the product is great."
"The solution’s dashboard is really good and customizable. It also has a good UI."
"Before its use, analyzing each email would take at least 15 to 20 minutes, with some complex cases taking up to 30 minutes...With the automation provided by Splunk Phantom, we could significantly reduce the amount of time and human effort required to complete this task."
"We are not a 24/7 SOC, so the most valuable feature of Splunk SOAR is the auto-response to threats when we are not in the office and the notifications that it sends to the on-call engineer."
"It's pretty easy when it comes to setting up assets. If you want to fetch emails or call a REST API, you can set up an asset and grab that information."
"Splunk SOAR saves time in threat response, and the time to solve an incident is currently the best in the market."
"Very flexible integration with other tools"
"In terms of deployment, there were no issues. It was pretty seamless."
"On a scale of one to ten, this solution deserves a rating of nine."
"It provides us with a single portal for our logs from different solutions."
"Our primary goal was to reduce analyst time, and we have been successful in that."
"Swimlane saves us 80 to 90 percent of our time by quickly helping us design the journey and efficiently passing information to various components."
"Swimlane enables two SOC analysts to work efficiently as much as ten analysts would without Swimlane, which translates to significant manpower savings."
"We are using it for a SOAR platform at a Cyber Security company which is MSSP."
"The most valuable feature of the solution is the support."
"The biggest advantage of Swimlane for us is that it saves time, which in turn helps us in cost-saving."
 

Cons

"Regarding stability, I have noticed some lagging, crashing, and downtime, which is one of my largest gripes."
"It was able to capture data but was unable to differentiate between the agent hostname we are using and the hostname that resides on the back end of the Internet."
"Even now, we have workflows that are in production that use AI steps and I get different results, making it unusable to some degree."
"The initial deployment of Torq was not easy."
"Regarding the pricing of Torq, I would say it is expensive."
"It would be ideal for us if Splunk SOAR could integrate with Teams."
"There is a lot of room for improvement with the UI."
"Unfortunately, not all of our analysts are iPhone users or iOS users. The mobile app is only supported on iOS. Our analysts who have Android do not have that benefit. That would be a nice thing to have so that we can have it across the board and not just for iOS."
"Creating playbooks using the solution’s playbook editor, for me, is very cumbersome. There have been instances where I have said to myself that I just don't want to use this editor. I might just use a code block and write my own code within it... The functionality in the playbook editor is 80 percent there, but that 20 percent is still lacking. They could make it more efficient."
"The pricing could be a bit more reasonable. It would be great if it were feasible for smaller organizations."
"I'm not an expert on Splunk SOAR, but I'm sure our team members know what areas could be improved."
"We want to see improvements made to the APIs such that we can connect to many different systems and data sources."
"The font used in the interface could be changed and made easier to read."
"I would prefer to have more colors added to represent different risks or notations, which can be used for the prioritization of risks and the significance of information."
"Swimlane's search bar is not working effectively, and there is no option to differentiate between two cases at the same time."
"We faced a lot of issues with the product’s stability."
"The initial setup and deployment are complex."
"The stability of the solution has room for improvement."
"I would like to see improvements in the minor bugs that occur with each update, as some features might have issues."
"Swimlane is not scalable because it is not exposed. Currently, it's a manual component that requires configuration through coding."
"One of the disadvantages of Swimlane is that to manage the platform, we need hardcore developers."
 

Pricing and Cost Advice

Information not available
"Splunk SOAR is moderately priced, neither cheap nor overly expensive."
"While I can't confirm the exact pricing, some colleagues have mentioned that Splunk SOAR may be on the costlier side."
"Splunk SOAR is more expensive compared to other options for SOAR."
"Splunk SOAR is an expensive solution for an organization of our size."
"It's very overpriced because it is based on the number of users. There is no bulk licensing."
"The licensing cost is reasonable."
"When we first purchased our Splunk SOAR license, it was based on an event-count model. It was based on the number of events. I had strong opinions at the time that automation should not be stifled by the amount of automation you can accomplish, so the previous structure was not as beneficial for us. Later that year, we got told or saw at a conference that they announced user-based pricing. We are now in a renewal period, so we migrated to a user-based license model, which is more appropriate for us so that we no longer have to worry about stifling our automation based on the quantity."
"We renewed it this year. This year was the first time there was a dramatic increase in the price. It was kind of non-negotiable. It was just a high increase. We had internal communications, and it was definitely a surprise to us. In a short time frame, we renewed it this year. Prices are going up everywhere, but they are not always justifiable, at least not to our eyes. The pricing this year was definitely a big shock."
Information not available
report
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
883,044 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Comms Service Provider
9%
Manufacturing Company
8%
Computer Software Company
6%
Financial Services Firm
11%
Manufacturing Company
11%
Computer Software Company
8%
University
7%
Financial Services Firm
14%
Manufacturing Company
10%
Computer Software Company
10%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Midsize Enterprise3
Large Enterprise4
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise7
Large Enterprise34
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise1
Large Enterprise6
 

Questions from the Community

What needs improvement with Torq?
We do not utilize the AI features that much. When it comes to general AI features of Torq, we are just slowly startin...
What is your primary use case for Torq?
Torq markets itself as a security tool, and we do use them for security, but not in the traditional sense they market...
What advice do you have for others considering Torq?
I would rate Torq an eight overall. I feel that Torq is as good as the effort you put into it. The limitations are ve...
What is your experience regarding pricing and costs for Splunk Phantom?
I am familiar with the pricing aspect, setup cost, and licensing cost of Splunk SOAR, and it is pretty much similar t...
What needs improvement with Splunk Phantom?
There are areas for improvement in Splunk SOAR, such as the need for more code-level customizations despite providing...
What is your primary use case for Splunk Phantom?
My use case for Splunk SOAR is for orchestration, mostly for automation, as I work with the Security Operations Cente...
What needs improvement with Swimlane?
One of the disadvantages of Swimlane is that to manage the platform, we need hardcore developers. We have recently se...
What is your primary use case for Swimlane?
We are using Swimlane for automation purposes and security orchestration. We are using Swimlane's Playbook Automation...
What advice do you have for others considering Swimlane?
I would rate Swimlane a seven out of ten as a product.
 

Comparisons

 

Also Known As

No data available
Phantom
No data available
 

Overview

 

Sample Customers

Information Not Available
Recorded Future, Blackstone
LinkedIn, TransUnion, Citrix, Aetna, Perspecta
Find out what your peers are saying about Splunk SOAR vs. Swimlane and other solutions. Updated: February 2026.
883,044 professionals have used our research since 2012.