IRIS-SOAR is a free security orchestration automation and response solution. Splunk SOAR is a commercial security orchestration automation and response solution by Splunk Inc. Features, integrations, deployment and the company behind each one, side by side.
IRIS-SOAR is a Python-based modular SOAR platform that automates security incident response workflows and integrates with DFIR-IRIS for enhanced digital forensics operations.
SOAR platform that orchestrates security workflows and automates SOC tasks at scale.
See more solutions in this category, or build a security stack from your picks.
Based on what each listing shows: deployment, company size, price and open source.
IRIS-SOAR fits if you need to run it on your own servers, you need a free product and you want an open-source product.
Splunk SOAR fits if you need both cloud and on-premises options.
Common questions when comparing IRIS-SOAR vs Splunk SOAR for security orchestration automation and response.
IRIS-SOAR: IRIS-SOAR is a Python-based modular SOAR platform that automates security incident response workflows and integrates with DFIR-IRIS for enhanced digital forensics operations.
Splunk SOAR: SOAR platform that orchestrates security workflows and automates SOC tasks at scale. Built by Splunk Inc.
The table above shows where their features, integrations, deployment and company size fit differ.
IRIS-SOAR is open-source with 15 GitHub stars. Splunk SOAR is made by Splunk Inc. The vendor behind a product decides its roadmap, support, and longevity, so check each company's profile before you commit.
Often, yes. IRIS-SOAR and Splunk SOAR are both Security Orchestration Automation and Response products, and both cover Playbooks, Security Orchestration. Key differences: IRIS-SOAR is Free while Splunk SOAR is Commercial, IRIS-SOAR is open-source. Use the table above to see where features, deployment and company size fit differ.
No Security Orchestration Automation and Response shortlist yet. This is the closest one.
Updated 2026-11-02
See the shortlist
