Defensys SOAR Platform
What Defensys SOAR Platform is
Defensys SOAR Platform collects security incident data from multiple sources into a central database for analysis and investigation, then supports response through workflows and playbooks. Playbooks can run specified actions automatically or use manual or mixed decision-making. Teams can adjust workflows, use ready-to-use scripts and orchestrate security tools. Shared case workspaces support task assignment, role and data access controls, chat and comments. Incident data, evidence, documents, communications and attachments are stored centrally. Teams can configure incident descriptions, templates, catalogs and access rules, and use a graphical editor to build playbooks. Defensys lists built-in integrations with commonly adopted security tools and systems, plus an open API and email connector for custom integrations. Reporting includes maps, relationship views, scheduled predefined or custom reports, and incident metrics. The platform supports real-time incident data sharing with partners, experts, communities and public CERTs or SOCs, with control over recipients and data volume. It is available via web and API, with pricing on request.
Who it suits
Defensys describes SOAR as a platform for building an internal Security Operations Center. Its collaboration, case-management and incident-sharing features may suit teams coordinating security response across sectors such as banking, government, energy and industry.
What it does well
- Playbooks support automated, manual or mixed decisions.
- Shared workspaces include task assignment and chat.
- Central storage holds evidence and incident communications.
- Incident data can be shared with recipient and volume controls.
What to know first
- Pricing is available on request.
- Built-in integrations are described broadly, without a listed connector count.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Defensys SOAR Platform | Pricing not stated; request a demo | On request |
As defensys.com lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Visit the Defensys website.
- Request a demo from Defensys.
- Arrange pricing with the vendor.
- Access the platform through web or API.
Verdict
Defensys SOAR combines incident investigation, response workflows and SOC collaboration features. It offers web and API access, while pricing requires a request for a demo.
Questions
How much does Defensys SOAR cost?
Pricing is available on request; the vendor directs prospective customers to request a demo.
Which platforms does it support?
The listed platforms are web and API.
Can playbooks automate response actions?
Yes. Playbooks can run specified actions automatically, manually, or through a mix of automated and manual decisions.
What integrations are available?
Defensys states that the platform has built-in integrations with commonly adopted security tools and systems, plus an open API and an email connector for custom integrations.
Who makes Defensys SOAR?
The product is offered by Defensys, which lists Singapore as its headquarters and 2011 as its founding year.
Can incident information be shared outside the organization?
Yes. Teams can share incident data in real time with partners, experts, communities, and public CERTs or SOCs, controlling recipients and data volume.
Facts from Defensys SOAR Platform's own pages
- Asset management
- Its infrastructure controls include asset relationships, unauthorized device and software detection, user privilege control, and vulnerability management. · defensys.com, 4 Oct 2026
- Automation
- It provides dynamic playbooks, ready-to-use scripts, adjustable workflows, and security tool orchestration. · defensys.com, 4 Oct 2026
- Customization
- The platform supports configurable incident descriptions, templates, catalogs, access rules, and a graphical playbook editor. · defensys.com, 4 Oct 2026
- Data sharing
- The product supports real-time incident data sharing with partners, experts, communities, and public CERTs or SOCs, with user control over data volume and recipients. · defensys.com, 4 Oct 2026
- Evidence
- It stores incident data, evidence, documents, communications, and attachments centrally for analysis and investigation. · defensys.com, 4 Oct 2026
- Founded
- 2011 · defensys.com, 28 Sept 2026
- Headquarters
- Singapore · defensys.com, 28 Sept 2026
- Integrations
- Defensys states that SOAR has built-in integrations with commonly adopted security tools and systems, plus an open API and an email connector for custom integrations. · defensys.com, 4 Oct 2026
- Intended users
- The vendor describes SOAR as a platform for building an internal Security Operations Center and says it is used across sectors including banking, government, oil and gas, energy, metallurgy, and industry. · defensys.com, 4 Oct 2026
- Newer incident features
- The vendor’s version 5.0 announcement describes incident grouping and a native incident-card area for indicators of compromise. · defensys.com, 4 Oct 2026
- Playbooks
- Playbooks can run specified actions automatically and support automated, manual, or mixed decision-making. · defensys.com, 4 Oct 2026
- Purpose
- Defensys SOAR collects security incident data from multiple sources into one database for analysis and investigation, then supports response through automated workflows and playbooks. · defensys.com, 4 Oct 2026
- Reporting
- It supports maps and relationship views, predefined or custom reports with scheduled delivery, and incident metrics. · defensys.com, 4 Oct 2026
- SOC collaboration
- The platform includes shared case workspaces, task assignment, role and data access controls, chat, and commenting. · defensys.com, 4 Oct 2026
- Support
- Defensys lists [email protected] as a support contact. · defensys.com, 4 Oct 2026
Where Defensys SOAR Platform stands on Freedom251
- SOAR Software#14 of 22