Skip to content
Z Zendikt
G
SOAR Software · Rank #6 of 10

Google SecOps SOAR review and pricing

Siemplify, after Google bought it; integrated into Chronicle.

By Google · Founded 2015 · Mountain View, CA (Tel Aviv origin) · public

Google SecOps SOAR is the former Siemplify, acquired by Google in January 2022 for roughly $500M and integrated into Google Chronicle (now Google SecOps). The product retains the strong case management and investigation workflow that made Siemplify a Magic Quadrant Leader pre-acquisition, and the Chronicle integration is now genuinely native (single UI, unified data layer). The defining 2026 question is post-acquisition customer support quality, multiple reviewers cite degraded response times since the Google integration, and product roadmap velocity slowed during the Chronicle merge. Pricing follows the parent Google SecOps per-employee model, which is unusually transparent for SOAR. Trade-offs: best-fit narrowed to Google Cloud / Chronicle customers, support quality concerns persist, and the Siemplify brand has effectively been retired.

Visit Google SecOps SOAR Compare to Swimlane
Best for

Google SecOps (Chronicle) customers wanting integrated SOAR at predictable per-employee pricing, especially those leveraging Mandiant threat intel.

Worst for

Non-Google customers (no compelling reason to choose), Splunk-anchored SOCs (Splunk SOAR wins), or buyers prioritizing top-tier customer support.

Vendor Trust Score

Is Google SecOps SOAR a trustworthy vendor?

7.3/10
Mixed
Pricing transparency
Published rates; no hidden fees
7.5
Contract fairness
Reasonable terms; no auto-renew traps
7.5
Incident response
How they handle outages and breaches
9.0
Post-acquisition behavior
Customer treatment after M&A or PE
6.0
Executive stability
Leadership churn over 24 months
7.0
Roadmap honesty
Public commitments held
7.0
Trust signal log
  • 2022-01-04
    Google acquired Siemplify for roughly $500M
    Siemplify folded into Chronicle.
  • 2024-06-15
    Customer support quality concerns flagged post-acquisition
    Reviewers cite slower response times and rougher escalation paths.
  • 2025-02-10
    Siemplify brand retired; product fully rebranded Google SecOps SOAR
Vendor Trust is scored independently of product quality. A great product from an unfair vendor still earns a low trust score.
Review Intelligence

What 220 reviews actually say

Synthesized from G2, Capterra, Reddit, Trustpilot. Patterns >15% prevalence shown.

Last synthesized
2026-04-29

Praise patterns

  • Strong case management (Siemplify heritage)
    78% →
  • Native Chronicle integration
    71% ↑
  • Per-employee pricing predictable
    64% →
  • Mandiant threat intel useful
    51% ↑

Complaint patterns

  • Customer support quality degraded post-acquisition
    64% ↑
  • Roadmap velocity slowed during Chronicle merge
    51% →
  • Best-fit narrowed to Google customers
    47% →
  • Siemplify brand retirement caused documentation gaps
    38% ↓
Sentiment trend (6 months)
79/100 +1 pts
12
01
02
03
04
05
Patterns are extracted from review corpus and human-verified. We surface trends, not anecdotes.
Verified Pricing

What buyers actually pay

38 anonymized deal disclosures · last updated 2026-05-01

Contribute your deal price
Company size Median annual
500-2,000 employees $96,000
2,000-10,000 employees $288,000
Verified pricing is crowdsourced from buyers under anonymity guarantees. Vendor-listed prices are validated against actual deals quarterly.
Compliance & Security

Auto-verified certifications

Verified 2026-05-01
SOC 2 Type II
ISO 27001
HIPAA
GDPR
CCPA
PCI DSS
FedRAMP Authorized

Editorial: Strengths

  • Strong case management and investigation workflow (Siemplify heritage)
  • Native Chronicle / Google SecOps integration
  • Per-employee pricing model (rare transparency in SOAR)
  • Mandiant threat intel native (post-Google Mandiant acquisition)
  • Unified UI with SIEM/SecOps platform
  • Cloud-native scale on Google infrastructure

Editorial: Weaknesses

  • Customer support quality concerns persist post-acquisition
  • Product roadmap velocity slowed during Chronicle merge
  • Siemplify brand retired; documentation transition rough
  • Best-fit narrowed to Google Cloud / Chronicle customers
  • Smaller playbook marketplace than Cortex XSOAR
  • Original Siemplify leadership team mostly departed

Key features & integrations

  • +Case management and investigation workflow
  • +Native Chronicle integration
  • +Visual playbook builder
  • +Threat intelligence integration (Mandiant)
  • +Pre-built use case packs
  • +API and webhooks
  • +Multi-tenant for MSSPs
  • +Cloud-native architecture
250+ integrations
Google ChronicleMandiantGoogle CloudAWSMicrosoft SentinelCrowdStrikeOkta
Geography supported
Global
Best fit
500-100,000+ employees · Google Chronicle / SecOps customers
Editorial deep-dive

Read our full ranking of SOAR Software

Google SecOps SOAR ranks #6 in our editorial review of 10 soar software platforms. The deep-dive covers methodology, comparison tables, decision matrix, migration scoring, and FAQs.

Read the full ranking

Closest alternatives in SOAR Software

#5
Swimlane
AI-native SOAR rewrite with the Turbine engine.
★ 4.5 opaque
#7
IBM Security QRadar SOAR
Resilient, after IBM bought it; integrated into QRadar.
★ 4.1 opaque
#4
Torq
Hyperautomation positioning, founded by the original Demisto team.
★ 4.7 opaque
Help the next buyer

Contribute your verified deal price

Pricing in B2B software is opaque because vendors want it that way. Verified buyer prices fix that, anonymously. Share what you actually paid for Google SecOps SOAR; we’ll add it to the verified pricing dataset on this page (with company size band only, no identifying details).

Submit anonymously