The portability dataset
The playbook portability matrix as two files: 693 rows, one for each source, target and playbook type, read on 2026-11-03 for 588 cells and 2026-11-04 for 49 cells. Licensed CC BY 4.0. Cite it as After SOAR, playbook portability matrix, 2026-11-04.
Downloads
- aftersoar-portability.csv (225 KB)
- aftersoar-portability.json (330 KB)
Columns
| Column | Meaning |
|---|---|
| source | Source platform slug |
| target | Target platform slug |
| playbook_type | One of enrichment, phishing, containment, identity, ticketing, custom, scheduled |
| verdict | moves with tooling, moves with rework, rebuild from scratch or not applicable |
| evidence | The kind of evidence behind the verdict |
| vendor_claim | true where the vendor describes itself |
| reason | The reason, in a sentence |
| source_url | The page behind the cell |
| read_date | The date the page was read |
What is in it
9 source platforms, 11 targets and 7 playbook types (Enrichment lookups, Phishing triage, Endpoint containment, Identity actions, Ticketing and case sync, Custom scripted logic, Scheduled or batch jobs). 64 cells have a documented path, 573 are rebuild from scratch and 56 are same-platform pairs. Read the method before you rely on a cell, and see the matrix for the drawn view.
The scores behind the rankings are explained on the scoring page.