SOAR vendors in the United States

Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats.

Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments.

World-renowned cybersecurity firm now part of Google Cloud, delivering threat intelligence-led penetration testing and red teaming informed by front-line incident response experience.

7AI provides AI agents that automate security operations centre tasks for enterprises.

Abstract provides a composable SIEM platform for security operations.

Andesite builds AI-powered security operations tools that help analysts investigate threats and automate workflows.

Anomali provides a threat intelligence platform and security analytics, built around its ThreatStream intelligence management product.

ARIA Cybersecurity provides AI-driven threat detection and response solutions for IT and OT infrastructure.

Command Zero provides an autonomous AI platform that investigates security alerts from triage through to verdict.

Conifers provides an agentic AI platform for security operations centres to investigate and respond to threats.

Cyware provides a platform for threat intelligence management, security orchestration, and collective defense.

Dropzone AI builds AI agents that investigate security alerts and hunt threats for security teams.

Telemetry pipelines that route, enrich and transform security and observability data to SIEMs and other destinations, plus AI agents for site reliability work.

Exabeam provides security operations platforms that use behavioural analytics to detect and respond to threats.

Exaforce provides an agentic AI platform for security operations, detection, triage, investigation and response.

Intezer provides an AI-powered security operations center that investigates all alerts at forensic depth.

Mezmo sells an open-source agent harness called AURA, which runs in a customer's own environment using their tools, telemetry and operational context.

NetWitness provides cybersecurity platforms for threat detection, investigation and response across IT and OT environments.

Securonix provides a cloud-native platform for security operations, combining SIEM, UEBA, SOAR and threat intelligence.

Sevii provides an autonomous defense and remediation platform that stops cyber adversaries without human intervention.

Simbian provides AI agents that automate security operations tasks such as alert triage and threat hunting.

Splunk provides a data platform for security, observability, and AI.

Sumo Logic provides cloud log management, monitoring, and SIEM tools for security and operations teams.

Athena Agentic provides a unified cyber operations platform that automates detection, response, and hardening.

Cantina provides an agentic security platform that uses autonomous AI agents to detect, respond to, and fix security issues.

Prophet Security provides an AI SOC platform that automates alert triage, investigation, and response for security teams.