Navigate the evolving threat landscape with our best-in-class security orchestration, automation and response (SOAR) solution to streamline incident response workflows.
If your Cloud SOAR instance URL matches the pattern
*.soar.sumologic.com, this means you're using the legacy version. Refer to the Legacy Cloud SOAR section.
Learn how Cloud SOAR allows you to perform incident management and threat response.
Cloud SOAR Security ops supports multi-tenant architecture.
Cloud SOAR Compared to the Automation Service
Compare the features of Cloud SOAR with the Automation Service.
Global Functions Menu
Cloud SOAR configuration and administrative options.
Cloud SOAR operational functions.
Incidents and Triage
Customize your Cloud SOAR Incident data display.
Configuration tools for Cloud SOAR automation and orchestration features.
Learn how to install a bridge for Cloud SOAR to allow running custom actions or integrations in an on-premise environment.
Learn about the framework used for integrations.
Learn how to search the Audit Event Index for CSOAR log events.