The card for Small team
A security team of a few people with no automation engineer. They need playbooks they can build and fix themselves, a price they can read before a call, and a vendor that will still exist in three years.
Authoring and pricing carry 20 each, because a small team lives or dies by how fast it can build and whether it can budget. Ownership is 12, since a funding failure hurts a small team most. Migration drops to 4, hosting to 4 and cases to 6, since a team this size rarely has legacy content or a residency rule. On these weights Cyware leads, D3 Security and Tines follow within 0.02 of each other, Splunk SOAR is fifth and Mate Security is sixth. Tines publishes a free edition with three live workflows and a one-time USD 50 AI allowance, Microsoft Sentinel publishes per-GB prices, Mate Security shows a list price on AWS Marketplace, and D3 publishes the structure of its pricing without amounts. Most of the others say contact sales.
The covered platforms, in this order
- 1 Cyware 7.15 Opens a band.
- 2 D3 Security 6.60 Opens a band.
- 3 Tines 6.58 In the same band as the row above.
- 4 Torq 6.49 In the same band as the row above.
- 5 Splunk SOAR (Cisco) 6.46 In the same band as the row above.
- 6 Mate Security 6.43 In the same band as the row above.
- 7 Swimlane (Turbine) 6.08 Opens a band.
- 8 Microsoft Sentinel 6.06 In the same band as the row above.
- 9 Google Security Operations 5.89 In the same band as the row above.
- 10 Palo Alto Cortex XSOAR 5.82 Opens a band.
- 11 BlinkOps 5.68 In the same band as the row above.
- 12 ServiceNow Security Operations 4.80 Opens a band.
The weights used
| Row | Weight on this card | Weight on the main card |
|---|---|---|
| Playbook authoring model | 20.0 | 14 |
| Integration count and depth documented | 14.0 | 14 |
| Case management and collaboration | 6.0 | 8 |
| Approvals and human-in-the-loop controls | 10.0 | 12 |
| Agentic or AI features that are documented | 10.0 | 12 |
| Hosting and data residency options | 4.0 | 8 |
| Pricing model and transparency | 20.0 | 8 |
| Migration tooling and import or export formats | 4.0 | 14 |
| Ownership stability | 12.0 | 10 |
Totals are computed from the same nine scores as everywhere on the site, reweighted. Totals within 0.25 are a band, not a ladder. How the scoring works.