Data as of Oct 18, 2026Based on 220 AI responses
Reviewed by Dimitry Apollonsky
AI summary
Tines holds a wide lead across security orchestration queries, frequently highlighted for its user-friendly, no-code approach to incident response workflows. When security analysts specifically need AI tools to combat alert fatigue, Palo Alto Networks Cortex XSOAR becomes the usual answer.
Rank and Mentioned in · since Jul 6
| # | Brand | Recommended for | Mentioned in |
|---|---|---|---|
| 1 | intuitive, no-code automation for teams seeking approachable incident response workflows | intuitive, no-code automation for teams seeking approachable incident response workflows | 89% |
| 2 | enterprise-scale orchestration featuring massive integration libraries and native threat intelligence | enterprise-scale orchestration featuring massive integration libraries and native threat intelligence | 60% |
| 3 | native AI automation connecting broad tooling environments for enterprise operations | native AI automation connecting broad tooling environments for enterprise operations | 48% |
| 4 | 44% | ||
| 5 | enterprise-grade orchestration backed by an extensive integration ecosystem and mature playbooks | enterprise-grade orchestration backed by an extensive integration ecosystem and mature playbooks | 43% |
| 6 | 42% | ||
| 7 | low-code flexibility and drag-and-drop playbooks built for intuitive alert management | low-code flexibility and drag-and-drop playbooks built for intuitive alert management | 38% |
| 8 | low-code automation using clean drag-and-drop templates to process high-volume telemetry | low-code automation using clean drag-and-drop templates to process high-volume telemetry | 34% |
| 9 | cloud-native SOAR leveraging generative AI summaries and Mandiant threat intelligence | cloud-native SOAR leveraging generative AI summaries and Mandiant threat intelligence | 30% |
| 10 | modern event-driven automation combining visual workflows with AI-assisted design | modern event-driven automation combining visual workflows with AI-assisted design | 28% |
| 11 | modern event-driven automation combining visual workflows with AI-assisted design | modern event-driven automation combining visual workflows with AI-assisted design | 15% |
| 12 | 14% | ||
| 13 | 11% | ||
| 14 | 10% | ||
| 15 | 10% |
Week of Aug 31–Sep 6 · Since Jul 5
Widest split: Swimlane, 53% on ChatGPT Search and 22% on Google AI Mode.
| Brand | ChatGPT Search | Google AI Mode | Comparison |
|---|---|---|---|
| Tines | 96% | 81% | |
| Palo Alto Networks Cortex XSOAR | 59% | 61% | |
| Splunk | 56% | 40% | |
| Microsoft Sentinel | 52% | 36% | |
| Palo Alto Networks | 51% | 34% | |
| Splunk SOAR | 43% | 41% | |
| Swimlane | 53% | 22% | |
| Swimlane Turbine | 20% | 49% | |
| Google Cloud Security Operations | 33% | 27% | |
| Torq | 23% | 34% |
53% of citations point at the ranked brands’ own sites. gartner.com, ciopages.com, underdefense.com are the most-cited sites outside the ranked brands’ own domains.
Market map
Mentioned in · since Jul 6
Leading brands by topic
Which SOAR (Security Orchestration, Automation, and Response) platform is the most user-friendly for automating our incident response playbooks?