Swimlane Reviews, Ratings & Features 2026 | Gartner Peer Insights

Security orchestration, automation and response (SOAR) solutions combine incident response, orchestration and automation, and threat intelligence (TI) management capabilities in a single platform. SOAR tools are also used to document and implement processes (aka playbooks, workflows and processes); support security incident management; and apply machine-based assistance to human security analysts and operators.
SOAR solutions must provide:
- Highly customizable workflow process management that enables repeatable automated tasks to be turned into playbooks that run in isolation or joined together into more sophisticated workflows.
- The ability to store (locally or in a third-party system) incident management data to support SecOps investigations.
- Manually instigated and automated triggers that augment human security analyst operators to carry out operational tasks consistently.
- A mechanism to collate and better operationalize the use of threat intelligence.
- Support for a broad range of existing security technologies that supports improved analyst efficiency and acts as an abstraction layer between the desired outcomes and the custom-made set of solutions in place in your environment.

Active

Find the top Security Orchestration, Automation and Response Solutions with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Security Orchestration, Automation and Response Solutions (Transitioning to Security Information and Event Management)

Security Orchestration, Automation and Response Solutions

Swimlane Turbine

Swimlane

IT Security & Risk Management Associate

Swimlane is truly versatile, if you can find a connector for a system you can create an automation for it. Whether it's a baked in api call or a custom python script. The support team is super responsive and knowledgeable as well. The great thing about Turbine is that it advertises a lot of low-code solutions and they work really well, but you can also insert custom scripts like I mentioned above and go in depth and complicated. Any limitations to the platform (which there are essentially none) can be bypassed by a more coded solution.

<50M USD

50M - 250M USD

1B - 3B USD

250M - 500M USD

500M - 1B USD

3B - 10B USD

10B - 30B USD

30B + USD

Gov't/PS/ED <5,000 Employees

Gov't/PS/ED 50,000 + Employees

Gov't/PS/ED 5,000 - 50,000 Employees

Manager of IT Services

Easy to understand and but a bit tricky to configure. Its help my team on daily monitoring and eliminate manual task.

Swimlane Turbine is the SOAR tool used by our company. As per my experience, the product offers a great amount of capabilities in terms of automating processes out of the box, and is very customizable.

Compared to other SOAR platforms that I've worked on previously, I'd say that the platform has been very easy to onboard to, with in-depth courses and hands-on labs.

We've been working together on developing a new integration with their full support and the process has been flawless thus far.

Cisco Systems (Splunk)

Palo Alto Networks

ServiceNow

Rapid7

Fortinet

Google (Siemplify)

Google (Mandiant)

D3 Security

Other...

DFLabs

Torq

Cyberbit

Dataminr (ThreatConnect)

Threat Intelligence

Trellix

KnowBe4

Cyware

FireEye

Resolve

Sumo Logic

Microsoft

ITrust

ThreatQuotient

Logsign

LogicHub

Blumira

SecureAge

Hive Pro

Swimlane provides AI-enabled, low-code security automation for enterprises and managed security services providers (MSSPs). Going beyond traditional capabilities of Security Orchestration, Automation and Response (SOAR), Swimlane unifies security operations in-and-beyond the security operations center (SOC) into a single system of record to help reduce process and data fatigue while helping quantify business value and security effectiveness for security operations leaders, executives and the board. With unlimited integration possibilities, the Swimlane Turbine platform operates at cloud-scale to combine human and machine data into actionable intelligence for security leaders. 

Swimlane is the leader in cloud-scale, low-code security automation. Supporting use cases beyond SOAR, Swimlane improves the ease with which security teams can overcome process and data fatigue, as well as chronic staffing shortages. Swimlane unlocks the potential of automation beyond the SOC by delivering a low-code platform that serves as the system of record for the entire security organization and enables anyone within the organization to contribute their knowledge and expertise to the protection of the organization. 

Swimlane is headquartered in Denver, Colorado, with operations throughout North America and Europe. For more information, visit: www.swimlane.com.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Swimlane Turbine is solid emerging SOAR platform that has a very high ceiling

Critical Review

Swimlane, the first level monitoring engineer.

Likes and dislikes about

likes

dislikes