Skip to content
SPECIFICTION
Get listed

Defensys SOAR Platform

defensys.com

WebAPI
Visit defensys.com
Spec score 7.5 #8 of 22 in SOAR Software

What it is

Defensys SOAR Platform gathers security incident data from multiple sources into a central database for analysis and investigation, then supports response with workflows and playbooks. Playbooks can run specified actions automatically or use manual and mixed decision-making. The platform provides dynamic playbooks, ready-to-use scripts, adjustable workflows, and security-tool orchestration. SOC teams get shared case workspaces, task assignment, role and data access controls, chat, and commenting. Central storage covers incident data, evidence, documents, communications, and attachments. Teams can configure incident descriptions, templates, catalogs, access rules, and graphical playbooks. Defensys lists built-in integrations with commonly adopted security tools and systems, plus an open API and email connector for custom integrations. Reporting includes maps, relationship views, scheduled predefined or custom reports, and incident metrics. Real-time sharing can send selected incident data to partners, experts, communities, and public CERTs, with controls for recipients and data volume. The platform is available through web and API access. Defensys describes it for internal Security Operations Centers across banking, government, oil and gas, energy, metallurgy, and industry. Pricing is on request.

Spec sheet

Purpose
Defensys SOAR collects security incident data from multiple sources into one database for analysis and investigation, then supports response through automated workflows and playbooks.Read 4 Oct 2026 · defensys.com
Intended users
The vendor describes SOAR as a platform for building an internal Security Operations Center and says it is used across sectors including banking, government, oil and gas, energy, metallurgy, and industry.Read 4 Oct 2026 · defensys.com
Integrations
Defensys states that SOAR has built-in integrations with commonly adopted security tools and systems, plus an open API and an email connector for custom integrations.Read 4 Oct 2026 · defensys.com
Support
Defensys lists [email protected] as a support contact.Read 4 Oct 2026 · defensys.com
Headquarters
SingaporeRead 28 Sep 2026 · defensys.com
Founded
2011Read 28 Sep 2026 · defensys.com
Asset management
Its infrastructure controls include asset relationships, unauthorized device and software detection, user privilege control, and vulnerability management.Read 4 Oct 2026 · defensys.com
Automation
It provides dynamic playbooks, ready-to-use scripts, adjustable workflows, and security tool orchestration.Read 4 Oct 2026 · defensys.com
Customization
The platform supports configurable incident descriptions, templates, catalogs, access rules, and a graphical playbook editor.Read 4 Oct 2026 · defensys.com
Data sharing
The product supports real-time incident data sharing with partners, experts, communities, and public CERTs or SOCs, with user control over data volume and recipients.Read 4 Oct 2026 · defensys.com
Evidence
It stores incident data, evidence, documents, communications, and attachments centrally for analysis and investigation.Read 4 Oct 2026 · defensys.com
Newer incident features
The vendor’s version 5.0 announcement describes incident grouping and a native incident-card area for indicators of compromise.Read 4 Oct 2026 · defensys.com
Playbooks
Playbooks can run specified actions automatically and support automated, manual, or mixed decision-making.Read 4 Oct 2026 · defensys.com
Reporting
It supports maps and relationship views, predefined or custom reports with scheduled delivery, and incident metrics.Read 4 Oct 2026 · defensys.com
SOC collaboration
The platform includes shared case workspaces, task assignment, role and data access controls, chat, and commenting.Read 4 Oct 2026 · defensys.com

Plans and prices

Defensys SOAR Platform Priced on request Pricing not stated; request a demo Read 4 Oct 2026 · defensys.com

Every Defensys SOAR Platform plan and price →

Strong points and limits

Strong points

  • Automated, manual, or mixed playbook decisions
  • Shared SOC case workspaces
  • Central evidence and document storage
  • Graphical playbook customization
  • Scheduled and custom reporting

Limits

  • Pricing is available only on request
  • Incident data sharing requires recipient and volume management

Who it suits

It suits organizations building an internal Security Operations Center that need coordinated incident response, case management, automation, and controlled data sharing.

Verdict

Defensys SOAR Platform combines incident collection, case collaboration, automation, evidence storage, and reporting in web and API-accessible software. Its fit depends on the workflows, integrations, and sharing controls an organization needs.

Where Specifiction places it

Alternatives to Defensys SOAR PlatformAll alternatives →