Guides
Editorial and SEO-focused content for evaluating OpenSOAR and the security automation landscape. Canonical setup, reference, and operational docs live at docs.opensoar.app.
What belongs here
These pages explain concepts, use cases, alternatives, and product positioning. They are meant for discovery, evaluation, and category education.
- Use guides for overview, comparison, and strategy.
- Use docs for setup, deployment, API reference, and operational truth.
Browse guides
Migrate from TheHive to OpenSOAR
A practical guide for teams moving from TheHive to OpenSOAR. Understand the model shift, what maps cleanly, what gaps to plan for, and where to find the canonical migration docs.
OpenSOAR vs Shuffle
A practical guide to the real tradeoffs between OpenSOAR and Shuffle. Compare Python-native playbooks with visual workflow automation and decide which model fits your team.
What is SOAR?
Learn what SOAR is, how it works, and why security teams use it to automate alert triage, investigation, and response across their stack.
Security Automation
Learn how security automation reduces alert fatigue, speeds up incident response, and helps SOC teams scale without buying an expensive commercial SOAR.
Python Security Playbooks
Build security automation playbooks in Python instead of YAML or drag-and-drop builders. Use normal code review, testing, libraries, and CI.
Product pages
Getting Started
High-level onboarding path for evaluating and trying OpenSOAR.
AI-Powered Alert Triage
How OpenSOAR uses LLMs to summarize, classify, and prioritize alerts.
Compare Platforms
Alternatives and comparison pages for OpenSOAR, XSOAR, Splunk SOAR, and more.
Blog
Market analysis, engineering essays, and editorial content around open-source SOAR.
Canonical docs
For installation, playbook loading, deployment, troubleshooting, and engineering references, go to docs.opensoar.app.
One command. No credit card.
Apache 2.0 licensed. Self-host on your infrastructure. No feature gates, no per-action billing, no vendor lock-in. Your playbooks are yours.
curl -fsSL https://opensoar.app/install.sh | sh