Vendor referenceVerified 19 Jun 2026
SOAR Vendors 2026: The Full Independent List With Pricing Posture
16 vendors, 4 with a free-tier or open-source published rate, 12 fully quote-only on commercial tiers. Click any name for the deep-dive.
16
SOAR vendors tracked
4
publish at least one rate
12
all-quote-only commercial
16 / 16
verified June 2026
The matrix
Sorted with published rates first.
| Vendor | Pricing model | Cheapest published rate | Posture |
|---|---|---|---|
| Shuffle | Open-source self-hosted, optional cloud add-ons | $0 self-hosted | Published |
| Splunk SOAR | Action-based, on-prem or cloud, free Community Edition (100 actions/day) | $0 Community Edition (100 actions/day cap) | QUOTE-ONLY |
| Cortex XSOAR | Per-incident / per-asset platform tier, free Community Edition for single user | $0 Community Edition (single user, request-limited) | QUOTE-ONLY |
| Tines | Per-story (workflow) and per-builder seat | $0 Community (1 builder, 3 stories) | Published |
| Torq | Per-workflow / per-action consumption, separate Hyperautomation and HyperSOC SKUs | Quote only, contact vendor | QUOTE-ONLY |
| Chronicle SOAR | Per-analyst seat, typically bundled with Google Security Operations (Chronicle SIEM) | Quote only, contact vendor | QUOTE-ONLY |
| Swimlane Turbine | Platform subscription, sized to ingest volume and named users | Quote only, contact vendor | QUOTE-ONLY |
| FortiSOAR | Subscription, per-user or per-asset, discounted inside Security Fabric bundle | Quote only, contact Fortinet partner | QUOTE-ONLY |
| QRadar SOAR | Per-user subscription, sold standalone or via Cortex platform | Quote only, contact vendor | QUOTE-ONLY |
| Rapid7 InsightConnect | Job-volume tiered, often bundled with InsightIDR SIEM | Quote only, contact vendor | QUOTE-ONLY |
| D3 Smart SOAR (Morpheus) | Platform subscription plus named user licences | Quote only, contact vendor | QUOTE-ONLY |
| ServiceNow Security Operations | Per-fulfiller-user, three modules (SIR, VR, TI) sold separately or together | Quote only, contact vendor | QUOTE-ONLY |
| LogRhythm Axon SOAR | Bundled with Axon SIEM, standalone option exists but rarely sold | Quote only, contact vendor | QUOTE-ONLY |
| Exabeam New Scale Security Operations | Platform subscription, SOAR included in upper tiers | Quote only, contact vendor | QUOTE-ONLY |
| Securonix SOAR | Bundled inside Unified Defense SIEM, Snowflake-native compute | Quote only, contact vendor | QUOTE-ONLY |
| Cyware Orchestrate | Platform subscription, often bundled with Intel Exchange (CTIX) | Quote only, contact vendor | QUOTE-ONLY |