The card for Splunk shop

This card puts the weight on what a Splunk owner has to decide: migration at 14, because leaving is the live question, ownership at 14, because the Cisco bundling changes how SOAR is bought, and integrations at 14. Hosting drops to 8 and pricing to 10. The rule to apply yourself is whether the product reads Splunk data: Splunk SOAR is native. D3 Security names Splunk among its integrations, a vendor claim, and the pages read for the others do not, so ask each vendor in writing which Splunk objects it reads. On these weights Splunk SOAR is fourth, behind Cyware, Torq and D3 Security, with Tines fifth and Mate Security sixth, because it publishes no price, documents no export to another SOAR and carries a separate licence. That ordering rests on vendor pages, and several of those rows were flagged for a re-read on 2026-11-03.