Security Orchestration, Automation and Response — technology that automates repetitive security operations tasks and coordinates response workflows.
SOAR platforms let SOC teams automate routine steps — like enriching an alert with threat intelligence or blocking a malicious IP — freeing analysts to focus on judgment calls that actually need a human.
