- xsoar's flexibility : The playbook engine allows both quick development of simple automations and complex,multi-stage workflows that interact with dozens of third parts systems ,the automation editor,the rest api integrations,and the ability to use python scripts directly inside the platform give a lot of freedom to build custom logic tailored to our environment - the marketplace and content packs : many integrations work out of the box and drastically reduce onboarding time when adding new security tools. Also documentation and community support are generally good, especially for common use cases -The user interface is intuitive for analysts and the platform provides clear visibility over incident lifecycles,enabling faster triage and standardized responses
February 28, 2026
The fact that sometimes it's very slow or even unresponsive.
January 15, 2026