D3 Security Reviews, Ratings & Features 2026 | Gartner Peer Insights

Security orchestration, automation and response (SOAR) solutions combine incident response, orchestration and automation, and threat intelligence (TI) management capabilities in a single platform. SOAR tools are also used to document and implement processes (aka playbooks, workflows and processes); support security incident management; and apply machine-based assistance to human security analysts and operators.
SOAR solutions must provide:
- Highly customizable workflow process management that enables repeatable automated tasks to be turned into playbooks that run in isolation or joined together into more sophisticated workflows.
- The ability to store (locally or in a third-party system) incident management data to support SecOps investigations.
- Manually instigated and automated triggers that augment human security analyst operators to carry out operational tasks consistently.
- A mechanism to collate and better operationalize the use of threat intelligence.
- Support for a broad range of existing security technologies that supports improved analyst efficiency and acts as an abstraction layer between the desired outcomes and the custom-made set of solutions in place in your environment.

Active

Find the top Security Orchestration, Automation and Response Solutions with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Security Orchestration, Automation and Response Solutions (Transitioning to Security Information and Event Management)

Security Orchestration, Automation and Response Solutions

Smart SOAR

D3 Security

SOC MANAGER

We had an exceptional experience with the vendor.  They are always listening to our requests and are very responsive. 

<50M USD

250M - 500M USD

1B - 3B USD

3B - 10B USD

50M - 250M USD

30B + USD

Specialist

During integration, the initial team which has changed a handful of times promised functionality that still is not there or possible with platform which has led to internal ways of customizing playbook features.

SECURITY ARCHITECT

Very powerful solution. Amazing customer support & professional services. Product has grown significantly since its initial release.

Cisco Systems (Splunk)

Google

ServiceNow

Palo Alto Networks

Other...

Microsoft

Fortinet

Sumo Logic

Swimlane

ThreatQuotient

Trellix

KnowBe4

Cyberbit

Cyware

Threat Intelligence

Google (Mandiant)

D3 Security is a cybersecurity company serving enterprise, public sector, and MSSP customers across North America, Latin America, Europe, the Middle East, and Asia-Pacific. Its flagship product, Morpheus, is an agentic AI SOC platform and SOAR replacement that autonomously investigates, triages, and responds to security alerts, with up to 95% triaged and L2-investigated in under two minutes. Morpheus is an AI SOC platform that includes a native SOAR engine for governed response orchestration, consolidating investigation, case management, self-healing integrations, and AI-driven triage into one platform across 800+ connected tools. It is model-agnostic, with its investigation governed by D3's proprietary Cybersecurity Triage Reasoning Graph. Every action lands in one unified audit trail per incident, defensible under SEC, NYDFS, HIPAA, NIS2, DORA, and the EU AI Act. Cloud, on-premises, hybrid, and air-gapped deployments are supported, with native multi-tenant architecture for MSSPs.

D3 Security has been at the forefront of security orchestration, automation, and response since before the term SOAR was even invented. As a global leader among independent SOAR vendors, we‚Äôve helped many of the largest companies in the world transform their security operations with automation.

In our 10-year history, we have been a global leader in case management, incident response, and now cutting-edge SOAR that is an invaluable tool in fighting today‚Äôs cyber threats.

D3 is always innovating, with new features, integrations, and technological breakthroughs. We were the first SOAR platform to fully embed the MITRE ATT&CK matrix for TTP-based analysis and correlation. Our Event Pipeline is also the first of its kind: a powerful asset for enterprises, MSSPs, and MDR providers that streamlines alert triage so that only genuine threats get escalated to human analysts‚Äîresulting in a 90% or greater reduction in alert volume.

D3‚Äôs success in the SOAR market has led to the company more than doubling in size over just a few years. The company is headquartered in Vancouver, Canada, with employees all around the world. We are continually looking to add talented and driven people to join our team. Does that describe you?

To review open opportunities, visit D3Security.com/company/careers

To learn more, check out D3Security.com

D3 Security, a global leader in security orchestration, automation, and response (SOAR), provides cutting-edge solutions to the world's largest companies. Founded a decade ago, the company focuses on incident response, case management and latest SOAR tools to combat today's cyber threats. Consistently innovating, D3 Security pioneered the full embedding of the MITRE ATT&CK matrix for TTP-based analysis and correlation. Additionally, it introduced the Event Pipeline, a unique feature aimed at streamlining alert triage for enterprises, MSSPs, and MDR providers, thus significantly reducing alert volume. The company's accomplishments in the SOAR market have resulted in a sizeable growth. With the headquarters situated in Vancouver, Canada, D3 Security boasts a dynamic team spread across the globe.

Reviews

Ratings Overview

Overall experience with

Favorable Review

D3 Security SOAR Review

Critical Review

D3 is an average SOAR solution that is still being developed and improving.

Likes and dislikes about

likes

dislikes