my page
Sign InSign Up
언어 선택

No recent searches

HOME
Products
AhnLab Connect PLUS
SOAR
SOAR

AhnLab SOAR

Automate and Modernize Your Security Operations

Contact Sales

AhnLab SOAR automates and modernizes security operations leveraging its standardized built-in playbook and frictionless integration with extensive security products.

Why AhnLab SOAR

Avoid Daily Drudgery.
Enjoy the Benefits of Automation.

Orchestrated Response

AhnLab SOAR leverages built-in playbooks with predefined scenarios representing decades of experience and expertise in security operations. The templated and customizable playbooks uplevel the quality of threat response by automating security workflows.

01

SOAR with Additional Value

AhnLab SOAR does not remain in conventional security orchestration, automation, and response. By offering practical capabilities such as ticket processing and event analysis directly applicable to existing SOCs, AhnLab SOAR frees security staff from tedious daily tasks.

02

ML-Assisted Decision

Employing an ML-powered analysis module, AhnLab SOAR automates the identification, triage, investigation, and contextualization of cyber threats to help customers make intelligence-driven security decisions with confidence.

03

Key Features

Playbooks Representing
Our Expertise, Knowledge and Technology

Security Orchestration

AhnLab SOAR optimizes security workflows by adjusting each task of the threat response process. It supercharges customers’ threat response ability with flexible integration of security and non-security systems encompassing SIEM, log management systems, ERP, and more.

Matching Event with Response Process

AhnLab SOAR automatically matches the predefined response process with the active event, the must-do playbook with each case type, and the playbook label information with the tenant. This significantly decreases the mean time to respond (MTTR) and workload to trigger response actions.

Automation-Driven Playbook

AhnLab SOAR playbook explicitly defines abstract security workflow and a set of necessary tasks. Customers can tailor the built-in playbook that automates everyday and repetitive tasks in line with their security needs using Python and Javascript.

Streamlined Case Management

Customers can manage the entire case lifecycle from start to finish. AhnLab SOAR visualizes the real-time-state case processing status, time, and severity list while allowing customers to merge similar events into a single case to reduce time consumption.

Solution

The Optimal Way to Build Future-Proof SOCs

Related Products

Resources

FAQs

Frequently Asked Questions

AhnLab SOAR automates manual and repetitive tasks of security staff with standardized playbooks to enhance process visibility and response quality.
The major benefits of AhnLab SOAR are:
① Reducing mean time to respond (MTTR) and fueling customers to make informed-decision with confidence
② Upleveling the entire security workflow and quality of threat response
③ Securing process visibility to clearly understand what security teams have to do
④ Improving resource efficiencies and reducing human-made errors
AhnLab SOAR smoothly interacts with various systems spanning non-security systems - email services, Jira, databases, etc. - and security solutions like SIEM, IPS, firewalls, and threat intelligence platforms.
SOAR is not for threat detection but for standardized and automated threat response to detected threats. Therefore, we advise you to procure SIEM to run SOAR at peak levels. If you do not have SIEM, some sort of management solution will be required to operate SOAR.
Please consider the following:
① All tasks and processes within the organization must be precisely defined.
② Automation targets should be prioritized. You can’t simply automate every single task; unconditional automation can pose a risk to the business.
③ Solutions and assets in use must be identified as supplementary tasks of ① and ②.
④ You should consider the post-deployment plan, as playbooks require continuous updates and management.
In simple terms, AhnLab SOAR Basic is the SOAR for AhnLab products. It supports automated threat response and security operation powered by its dedicated built-in playbook and integration with “AhnLab products”; it does not require SIEM. If you are looking for third-party integration, you need to use AhnLab SOAR.