Connecting SOAR apps
Apps are the integration points between Splunk SOAR and your other security technologies. Through apps, Splunk SOAR directs your other security tools to perform actions on your assets. The Splunk SOAR app model supports 350+ tools and 2,150+ actions, so you can connect and coordinate workflows across your team and tools.
Some of the most popular apps are:
- AWS EC2
- Cisco ISE
- HTTP
- Jira
- Microsoft 365 Defender
- MS Graph for Office 365
- MySQL
- ServiceNow
- SMTP
- SSH
- Virustotal v3
- Whois
To search all available Splunkbase apps for SOAR, click here.
You can also develop your own custom SOAR apps!
Learn more about developing SOAR apps with the following resources:
- Splunk Help: SOAR (Cloud) develop apps
- Splunk Help: SOAR (On-premises) develop apps
- Splunk Tech Talk: Automation for Modern SOC: Splunk SOAR’s App Editor
You can also take the free Developing SOAR applications course to plan, design, and debug basic applications for Splunk SOAR.
Additional resources
- Splunk Help: Manage your Splunk SOAR (Cloud) apps and assets
- Splunk Help: Manage your Splunk SOAR (On-premises) apps and assets