Anomali Reviews, Ratings & Features 2026 | Gartner Peer Insights

Security orchestration, automation and response (SOAR) solutions combine incident response, orchestration and automation, and threat intelligence (TI) management capabilities in a single platform. SOAR tools are also used to document and implement processes (aka playbooks, workflows and processes); support security incident management; and apply machine-based assistance to human security analysts and operators.
SOAR solutions must provide:
- Highly customizable workflow process management that enables repeatable automated tasks to be turned into playbooks that run in isolation or joined together into more sophisticated workflows.
- The ability to store (locally or in a third-party system) incident management data to support SecOps investigations.
- Manually instigated and automated triggers that augment human security analyst operators to carry out operational tasks consistently.
- A mechanism to collate and better operationalize the use of threat intelligence.
- Support for a broad range of existing security technologies that supports improved analyst efficiency and acts as an abstraction layer between the desired outcomes and the custom-made set of solutions in place in your environment.

Active

Find the top Security Orchestration, Automation and Response Solutions with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Security Orchestration, Automation and Response Solutions (Transitioning to Security Information and Event Management)

Security Orchestration, Automation and Response Solutions

The Anomali Platform

Anomali

MANAGER, IT SECURITY AND RISK MANAGEMENT

Threatstream is a comprehensive Threat Intelligence Platform (TIP). It allows for the integration of a wide array of curated threat intelligence feeds, offering up-to-date known threats and indicators of compromise. From there, we're able to automate process that lead to the automatic blocking in other security tools.

Threatstream also has exceptional customer support, providing prompt and knowledgable information. With it's technical assistance, training, guidance, and a responsive and helpful support, Threatstream is one of the best TIPs on the market.

3B - 10B USD

<50M USD

Cyber Threat Lead

Anomali ThreatStream came with a reputation of being one of the top Threat Intelligence Platform providers. The platform offers limited capability with often complex queries that are time consuming for small CTI teams. The ingestion of sources is noisy with no easy way to understand what is relevant to my organisation and industry and what is not. This requires me to read a lot of information. The dashboards offer limited functionality and the creation of reports leaves little responsibility on the user as to what is contained in them. Useless metadata is included with indicators of compromise adding to the bulk of the report with no value add. Data manipulation is minimal such as using mitre Att&ck mapping, kill chain analysis and diamond mapping. 

Microsoft

Palo Alto Networks

Cisco Systems (Splunk)

Dataminr (ThreatConnect)

Anomali is modernizing security operations with the power of analytics, intelligence, automation, and AI to deliver breakthrough levels of visibility, threat detection and response, and cyber exposure management. Anomali helps customers and partners transform their SOC by elevating security efficacy and reducing their costs with automated processes at the heart of everything. Founded in 2013, Anomali serves global B2B enterprise businesses, large public sector organizations, ISACs, ISAOs, service providers, and Global 1000 customers to help safeguard the world’s critical infrastructure, companies, and people.

Anomali is the leader in modernizing security operations with the power of analytics, intelligence, automation, and AI to deliver breakthrough levels of visibility, threat detection and response, and cyber exposure management. Anomali helps customers and partners transform their SOCs by elevating security efficacy and reducing their costs with automated processes at the heart of everything. Founded in 2013, Anomali serves global B2B enterprise businesses, large public sector organizations, ISACs, ISAOs, service providers, and Global 1000 customers to help safeguard the world‚Äôs critical infrastructure, companies, and people.

Anomali is the leader in modernizing security operations with the power of analytics, intelligence, automation, and AI to deliver breakthrough levels of visibility, threat detection and response, and cyber exposure management. Anomali helps customers and partners transform their SOCs by elevating security efficacy and reducing their costs with automated processes at the heart of everything. Founded in 2013, Anomali serves global B2B enterprise businesses, large public sector organizations, ISACs, ISAOs, service providers, and Global 1000 customers to help safeguard the worldâs critical infrastructure, companies, and people.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Threatstream: A powerful Threat Intelligence Platforms

Critical Review

Anomali ThreatStream: Key Features, Limitations and User Opinion

Likes and dislikes about

likes

dislikes