ManageEngine Announces Native SOAR To Close the Detection-to-Response Gap With Cross-Domain Automation

Article content

Built-In Orchestration and Low-Code Playbooks in Log360 Let Security Teams Handle the Full Incident Life Cycle

Article content

Within One Platform

Article content

Article content

Article content

Article content

AUSTIN, Texas — ManageEngine, a division of Zoho Corporation and a leading provider of enterprise IT management solutions, today announced a core architecture upgrade in Log360, its unified security platform, introducing native SOAR capabilities, seven new integrations with some of the industry’s leading security vendors, and cross-domain orchestration capabilities that places detection, AI investigation, and automated response in a single data model.

Article content

Article content

Security operations are entering the agentic automation era, albeit with infrastructure that was not built for it. Across most SOCs, tools multiply without converging, each coming with its own alert queue, data model, and demand on analyst time. The visibility problem is rarely a shortage of tooling; it’s a failure of integration. AI agents and autonomous response only work when the layers beneath them share context, and most security stacks today do not.

Article content

Article content

is engineered for that shared context. A single playbook can isolate an endpoint through EDR, revoke a compromised session through IAM, enrich the incident with external threat intelligence, open a service ticket, and notify the SOC, all driven by the same alerts, detections, and behavioral signals the platform already produces.

Article content

“The next evolution in security operations is about rethinking the architecture so that AI, detection, and response share the same foundation,” said Manikandan Thangaraj, vice president of ManageEngine. “When an AI investigation agent and an orchestration engine operate over the same data model, the friction that has kept security teams reactive for years is eliminated. No API handoffs, no reconstructing context, no gap between insight and action. The best automation isn’t prescriptive, it’s programmable. That’s what we’ve built into Log360.”

Article content

Key New Capabilities in Log360

Article content

Expert playbooks, ready on day one:

Article content

A CDN-delivered library of prebuilt response templates means automation is live on day one. When teams are ready to go deeper, analysts extend workflows through low-code platform

Article content

Article content

, while engineers take full control with Python or Deluge. The approach allows teams to build once and continuously adapt workflows to evolving environments and compliance requirements.

Article content

Automated response across the entire stack:

Article content

One automated workflow can isolate endpoints, revoke compromised credentials, open service tickets, and enforce response actions across EDR platforms, network infrastructure, and business applications, eliminating manual handoffs between teams and tools.

Article content

Article content

Context-aware incident response:

Article content

Playbooks enrich alerts with threat intelligence and asset context, apply conditional logic to route incidents by severity or compliance scope, and execute multi-step response sequences automatically without human intervention.

Article content

Endpoint coverage that closes the cross-domain gap:

Article content

Endpoint telemetry, along with identity and cloud context, is brought into Log360’s correlation and response layer to track and contain threats from a single platform.

Article content

About Log360

Article content

Article content

is a unified SIEM solution with integrated DLP, CASB, and SOAR capabilities that detects, prioritizes, investigates, and responds to security threats. Vigil IQ, its TDIR module, combines threat intelligence, an Incident Workbench, ML-based anomaly detection, and rule-based attack detection to surface sophisticated attacks alongside an incident management console for remediation. Reengineered detection with a centralized console, multi-mode rule creation, and tuning insights elevates signal quality and reduces false positives. Native SOAR, with a built-in orchestration engine and extensible playbook library, automates responses across your security stack, closing the gap between detection and action. For more information about Log360, visit

Article content

Article content

and follow the

Article content

Article content

for regular updates.

Article content

About ManageEngine

Article content

ManageEngine is a division of Zoho Corporation and a leading provider of IT management solutions for organizations across the world. With a powerful, flexible, and AI-powered digital enterprise management platform, we help businesses get their work done from anywhere and everywhere—better, safer, and faster. To learn more, visit www.manageengine.com.

Article content

Article content

Article content

Article content

View source version on businesswire.com:

Article content

Article content

Article content

Contacts

Article content

Media Contact

Article content

Article content

Ahana Vissa

Article content

Article content

ManageEngine

Article content

Article content

Article content