Security orchestration automation and response software: AI search visibility ranking (2026)
How AI search engines rank security orchestration automation and response software by visibility and citations. 18 brands measured monthly across Google AI Mode: which brands the AI names in answers, which domains it cites as sources, and how the leaders compare. SOAR software used by security teams to automate investigations, orchestrate response workflows, connect security tools, and reduce incident handling time. Composite score: 70% visibility (% of AI answers naming the brand) + 30% citation rate (% citing the brand's domain). Full methodology →
Download this ranking as a PDF
We'll email it to you. One-off send — no list, no follow-up, no surprise marketing.
When buyers inquire about Security orchestration automation and response software, AI engines consistently highlight Splunk SOAR as the leader in the field, boasting a visibility percentage of 37.5. Other top brands frequently mentioned by AI are Palo Alto Cortex XSOAR and Exabeam. These names surface regularly in AI-generated answers, reflecting their prominence and recognition.
The rankings of these software solutions are shaped significantly by the top cited sources such as exabeam.com, paloaltonetworks.com, and vmray.com. These sources predominantly include product websites and specialized technology platforms. When AI engines refer to these pages, it underscores the authority and detailed insights offered by the manufacturers and trusted voices in the security domain.
For potential buyers examining this list, consider the weight AI engines place on recent reviews and third-party validations from credible sources. The presence of a brand across multiple authoritative platforms suggests strong topical authority in security orchestration and response software. This endorsement could factor into making a well-informed choice based on both AI recognition and real-world expertise.
At a glance
What we observed in this category
Splunk SOAR leads the SOAR category with a composite score of 30.0 and a visibility rate of 37.5%, placing it well above the category average of 6.9% visibility. The next closest brand, Palo Alto Cortex XSOAR, scores 26.2 composite but records 0% visibility. That gap between first and second place is meaningful because it reflects Splunk SOAR holding consistent named presence in AI-generated responses, not just citation appearances in source links.
The data reveals a sharp divergence between being named in AI responses and being cited as a source. Palo Alto Cortex XSOAR (87.5% citation, 0% visibility) and Exabeam (75% citation, 0% visibility) are heavily referenced as underlying sources yet rarely named directly in AI prose. Splunk SOAR and Microsoft Sentinel show the reverse pattern, appearing named in responses while their citation rates sit at just 12.5% each. This split means some brands supply the AI's evidence base without receiving the brand mention.
Google AI Mode is the top engine for every brand in this dataset, indicating the audit is anchored almost entirely on that single engine. Among the top cited sources, exabeam.com and paloaltonetworks.com appear alongside third-party and niche domains such as vmray.com, devopsschool.com, and strike48.com. The presence of those smaller domains in the citation pool suggests Google AI Mode is drawing on a broad and non-obvious set of reference pages when constructing SOAR category responses.
Movers & shakers since last refresh
Biggest visibility risers
-
BlinkOps 0% → 12% · rank #12 → #5+12pp
Biggest visibility fallers
-
Torq 38% → 0% · rank #4 → #10-38pp
-
Tines 38% → 25% · rank #2 → #6-12pp
-
Swimlane 38% → 25% · rank #3 → #7-12pp
The ranking
| # | Brand | Visibility | Citation | Top engine |
|---|---|---|---|---|
| 1 |
splunk.com
|
38% | 12% | Google AI Mode |
Splunk SOAR leads all 18 brands with 37.5% visibility and a composite score of 30.0, more than 8 points ahead of second-ranked Palo Alto Cortex XSOAR. |
||||
| 2 |
paloaltonetworks.com
|
0% | 88% | Google AI Mode |
Palo Alto Cortex XSOAR holds the highest citation rate in the category at 87.5%, yet records 0% visibility, meaning it fuels AI answers without receiving direct brand mentions. |
||||
| 3 |
exabeam.com
|
0% | 75% | Google AI Mode |
Exabeam mirrors the Palo Alto pattern with 75% citation and 0% visibility, ranking third overall despite never appearing as a named brand in AI-generated responses. |
||||
| 4 |
microsoft.com
|
25% | 12% | Google AI Mode |
Microsoft Sentinel achieves 25% visibility and a composite score of 21.2, but its 12.5% citation rate is low relative to its named presence in the SOAR category. |
||||
| 5 |
blinkops.com
|
12% | 38% | Google AI Mode |
BlinkOps is the biggest riser in the dataset, jumping from rank 12 to rank 5 with citation climbing 37.5 points and visibility moving from 0% to 12.5% this period. |
||||
| 6 |
tines.com
|
25% | 0% | Google AI Mode |
| 7 |
swimlane.com
|
25% | 0% | Google AI Mode |
| 8 |
ibm.com
|
0% | 12% | Google AI Mode |
| 9 |
d3security.com
|
0% | 12% | Google AI Mode |
| 10 |
torq.io
|
0% | 0% | Google AI Mode |
| 11 |
cloud.google.com
|
0% | 0% | Google AI Mode |
| 12 |
fortinet.com
|
0% | 0% | Google AI Mode |
| 13 |
servicenow.com
|
0% | 0% | Google AI Mode |
| 14 |
securonix.com
|
0% | 0% | Google AI Mode |
| 15 |
rapid7.com
|
0% | 0% | Google AI Mode |
| 16 |
logrhythm.com
|
0% | 0% | Google AI Mode |
| 17 |
dflabs.com
|
0% | 0% | Google AI Mode |
| 18 |
resolvesystems.com
|
0% | 0% | Google AI Mode |
Sources AI engines trust in this category
Across the 8 buyer-intent queries we ran on security orchestration automation and response software, these are the domains Google AI Mode cited most often. If you're not on this list — or if your competitors are — that's a concrete PR / linkbuilding target.
How to read this ranking
Four things worth knowing before you act on the numbers above. These are the same definitions across every industry page — for category-specific observations, see the What we observed section above (where available) and the per-brand insights inline in the ranking.
Visibility = being named
A brand's visibility % is the share of AI answers that mention it by name in the response prose. This is who AI engines actively recommend to the buyer. More on visibility →
Citation rate = being trusted
Citation rate is the share of AI answers that include the brand's domain as a clickable source link. This is what the AI treats as authoritative evidence, different from being named. More on citation rate →
Top engine differs by brand
The "top engine" column shows which AI surface each brand performs best on. Big gaps between a brand's score across engines usually points to specific content or schema gaps. How AI engines pick sources →
Rankings move month to month
AI engines re-crawl and re-rank on shorter cycles than classical search. We re-audit every brand on this list at least every 30 days and refresh this page automatically. How AI search ranking works →
Get your own security orchestration automation and response software brand audited
The brands above were curated from public market-leader lists. Want the same measurement against your own brand — including the queries you appear on, which competitors get named instead, and a prioritised fix list? Run a free preview.
Frequently asked about security orchestration automation and response software AI visibility
Who leads AI visibility in the SOAR software category?
Splunk SOAR leads with 37.5% visibility and a composite score of 30.0, which is the highest in the 18-brand dataset and sits well above the category average of 6.9% visibility.
Which SOAR brands are cited most often by Google AI Mode even though they are not named in responses?
Palo Alto Cortex XSOAR (87.5% citation) and Exabeam (75% citation) both record 0% visibility, meaning Google AI Mode uses their domains as source material without mentioning the brand names in its generated answers.
What sources does Google AI Mode anchor on most when answering SOAR category queries?
The top cited domains include exabeam.com, paloaltonetworks.com, and blinkops.com from the vendor set, alongside non-vendor domains such as vmray.com, devopsschool.com, cloudsek.com, and strike48.com.
Which SOAR brands have lost the most AI visibility recently?
Torq dropped from rank 4 to rank 10 with a visibility fall of 37.5 points to reach 0%, while Tines and Swimlane each fell four places and lost 12.5 points of visibility in the same period.
Is there a SOAR brand showing strong upward momentum in AI visibility?
BlinkOps moved from rank 12 to rank 5, with visibility rising from 0% to 12.5% and citation increasing by 37.5 points, making it the largest riser in the current dataset.
How does the average SOAR brand perform on AI visibility compared to the category leader?
The category average visibility is 6.9% against Splunk SOAR's 37.5%, and the average citation rate is 13.9% against Palo Alto Cortex XSOAR's 87.5%, indicating heavy concentration at the top.