Siemplify rolled out what it says is the industry’s first cloud-native security orchestration, automation, and response (SOAR) platform.

SOAR products integrate all the security tools and systems across an organization’s IT environment. They collect threat data across multiple sources, and then automate and orchestrate manual tasks including responding to low-level security events. This reduces the amount of security alerts that security operations teams have to respond to and frees them up to focus on more serious threats.

Siemplify competes against SOAR vendors including Palo Alto Networks, which recently acquired Demisto, IBM, Splunk, and Swimlane “but none of them have a cloud-native SOAR offering,” Siemplify CMO Nimmy Reichenberg said. “I’ll be surprised if they’re not going to move to the cloud at some point, but they’re not cloud-native offerings now.”

And there’s a reason for this, he adds. SOAR, as a security technology, is only about five years old. When it was first developed, “cloud really wasn’t for security operations,” Reichenberg said. “Look at SIEM [security information and event management]. Five years ago, SIEM was an on-prem solution. End point was an on-prem solution.”

Today, however, SIEM deployments have moved to the cloud, and while end-point products may require agents installed on devices, the central management usually happened in the cloud. “More of your tools are in the cloud, the environment that you need to secure is in the cloud or at the very least hybrid,” Reichenberg said. “So, these days, it almost doesn’t make sense anymore that your security operations platform or your SOAR platform will be on prem.”

Plus, even as companies enter the post-pandemic new normal, “some of this remote working is going to stay with us,” Reichenberg said. “So a remote SOC [security operations center] is another reason to have your security operations platform in the cloud.”

In addition to cloud delivery, Reichenberg lists a couple other features that he says make Siemplify Cloud unique. “It’s also designed for rapid time-to-value and designed more for the mass market,” he said.

Typically, SOAR is expensive, and can be difficult for small and midsized businesses to manage without a full team of security engineers to write a playbook and integrate the various security products and threat feeds. To make the new product accessible to organizations of all sizes while maintaining flexibility, Siemplify offers the SOAR platform in four packages:

• Essentials: For smaller security operations teams looking to automate key use cases quickly and easily. Siemplify Essentials includes all pre-packaged use cases, as well as the ability to build custom playbooks. This package starts at $2,500 a month.
• Professional: For larger security operations teams with more advanced security processes and higher alert volumes, Siemplify Professional includes unlimited alert volume, playbook creation, and a dedicated customer success manager.
• Enterprise: This package targets enterprise security operations centers, and it includes advanced capabilities, such as crisis management, business intelligence and premium 24/7 support.
• Service Provider: For managed security services providers, this includes unlimited multi-tenancy, secure remote connectivity to customer sites and a customer portal for complete visibility into managed operations.
• Security professionals can also sign up for a free 14-day trial of Siemplify Essentials and Siemplify Professional at siemplify.co/get-started.