The card for Regulated or air-gapped
A team under a regulator or a classification rule that limits where playbooks run and who can approve an action. It may need on-prem or air-gapped deployment, named regions and an audit trail for every automated step.
Hosting carries 24 and approvals 20, the two rows a regulator asks about first. Cases carry 10, since the record is the evidence. Pricing drops to 4 and AI to 6. Apply a hard filter yourself before reading the order: the product must document on-prem, hybrid or air-gapped deployment. On the pages read that means Palo Alto Cortex XSOAR, where XSOAR 6 is recommended for on-prem and air-gapped installs, Splunk SOAR, which documents cloud, on-prem and hybrid, Cyware Orchestrate, which says it runs in cloud and on-premise environments, and BlinkOps, which an AppSource listing says runs on-prem through runners. Mate Security documents no deployment model or residency and falls to seventh on these weights. Several hosting rows were flagged for a re-read.
The covered platforms, in this order
- 1 Cyware 7.35 Opens a band.
- 2 Torq 6.76 Opens a band.
- 3 Splunk SOAR (Cisco) 6.68 In the same band as the row above.
- 4 Tines 6.38 Opens a band.
- 5 Palo Alto Cortex XSOAR 6.32 In the same band as the row above.
- 6 Microsoft Sentinel 6.19 In the same band as the row above.
- 7 Mate Security 5.96 Opens a band.
- 8 D3 Security 5.94 In the same band as the row above.
- 9 BlinkOps 5.66 Opens a band.
- 10 Swimlane (Turbine) 5.62 In the same band as the row above.
- 11 Google Security Operations 5.35 Opens a band.
- 12 ServiceNow Security Operations 4.84 Opens a band.
The weights used
| Row | Weight on this card | Weight on the main card |
|---|---|---|
| Playbook authoring model | 10.0 | 14 |
| Integration count and depth documented | 8.0 | 14 |
| Case management and collaboration | 10.0 | 8 |
| Approvals and human-in-the-loop controls | 20.0 | 12 |
| Agentic or AI features that are documented | 6.0 | 12 |
| Hosting and data residency options | 24.0 | 8 |
| Pricing model and transparency | 4.0 | 8 |
| Migration tooling and import or export formats | 8.0 | 14 |
| Ownership stability | 10.0 | 10 |
Totals are computed from the same nine scores as everywhere on the site, reweighted. Totals within 0.25 are a band, not a ladder. How the scoring works.